last executing test programs: 7.862131455s ago: executing program 0 (id=2790): faccessat2(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x0, 0x100) socket(0x21, 0xa, 0x6) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500004c000000000002907800000000e00008011100907800000000"], 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) iopl(0x3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nullb(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300040009210101000122050009058103ff"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB=' \n\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) close(0x3) 7.861053165s ago: executing program 1 (id=2792): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3}, {0xffe0, 0xfff1}, {0x10, 0x3}}, ["", "", "", "", ""]}, 0x24}}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000008500)=[{{&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000000480)="60667e9d01f6962e99d45b6699c50b4b38c71ba14e72c5d1cab91c80384cea042b58b8808b24fefd5e9c7cbe1ee0cc8b256bc10c1f7c6f88d5ecae3d259527e223fdb9b50880b8b814fd33e78016cff8ba0b246384517869bed1eef50d6e054edfad7f30d5e506759b49b71eb5ddb7a57181cc4640bd6608b7958884b93f0d9e8561c8cc28987d01c04f60197e28951cec10b4c472973a2fd6e91ff547c13de84d732061df8118f8c5604fde43f2a54a9d516dc3e27740fa06f3f1695ef37b1bbe74ea8e2d650305ce", 0xc9}, {&(0x7f0000000580)="8267e4a91ef20fdecd3d4e696eb1dbc617713aed3b1d02903c432bf9d0f03f8182025f3b6d60dfa1c9f5d981e31ebea35a96ef29483a6b04184e48b37910fe4916924ad48ef336108c8a0eb33fc9e610890ac6b5903c394df293a659fefd31cf46fa9509cbc629fa2663a638ed1c3644b6a8281598c4ff1f3acfff2ea832283c910fc6a96d9b6859d8094f02082d3480e2a14979a71ac4d356b0a75524ff79a9bf4d58e53f7a9d941c9092a8006d2858dbb548a9ea49dd018ffe62511903a1a70754242b9661a0fd4697e0d265c6519cb17f7b729f81d17bc8d3b56ef4bbfbeabe530285", 0xe4}, {&(0x7f0000000680)="3087236428fdcbfb07f7609df8b961e25686f995f80347b955061b72f40933b7ea81c91fd60954eaae609c5e8e39018a02cd48a7b90063f18580a458f34873f83b990fcb555d1fa9d36400ec51a2101af0b54c0072e40dcf6be21228614a1744b983f94cf126087075c1cb06cbd82cbe3d88c0acf4c1aeaf749e75fd87ef06942cf65197c4d35f2fb04da82d2272ba150709ba29f0c275", 0x97}, {&(0x7f0000000780)="b5e1e22412fcc676c937cace0ff1b0a178d82710eb386a506f37e9d76494cd46eeec8241c3bb12451c82710f4080b1f6aa52833ef8fb28b81a8ef0447d2b4739a7416e14ab55fc7efe87373dc840c73d2f3648294f17a87dff50f4d098aed1b38077367dc4e456cd403d733fe3b10959c3a2e1338d986d168d980072b5e9b0e5ae050e7985a72214ed024d8e8ccb729513baf756d100df82ffcadf25696d68d7f5b94b9eedc5fc9908777ea31f593947bd8da66669d4d7bdb20790b5adfeedc60a4a89a210d4fd68f5460765d5762e5e5e2de7d535a5721f87ff1a0ea1ecf2", 0xdf}, {&(0x7f0000000340)}, {&(0x7f0000000880)="0a8b7ad7291aa69c74c7e6d96338a5f196d170214a68b412e1b1b2ade39a82525cdffde33c0c0f8119e572cfde2a1d90161414bf7cb1dbcd580843eb4c671a46fcc4f45f2277b2bd751dd80ca37dbe7b10ada5ec75806f400fc6ab8bb31d4967f2228b5f537b0c7ac1e1ef62bcd93214cb90cc7e2c2f6a6604d2d604d9a3e391a9efb1cd02582204199073fdfa1f5041983b0674966172b88c7156b1a9e15cd022b4fda835996d9b0ec4662d58f05857873621763f1c503034d3c7b93f5059f6ce467762d130a577051ee7526859cd70698dcf4e766c399f0a178c49439b0ffd9a5cfa21db055bb0", 0xe8}, {&(0x7f0000000980)="630303eb85675bf6feee494e1f2b7d49d153361b8c1f273b3e5d086ff84f4d8e3c34ae2648ead7d32191297e9722f56c3eccacab9d2d30e03c76a8885ee646b19efe85ab9c43122bfe552019deec", 0x4e}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="6727b3c090dddf772c350176237b4617d656c25414efdce16e40b78e60714aeb4999fb7cc7fef2276e333056ee0f23c18659ff4b49cffe759e2ce4ade544e754b24d414e759007b665eb574445d42737c15c1660a752bf3c1121feaf2974d6f257389f65e7247ae22b9deab44f135a243ff56d46117af01b3fcf28e997a0d832d6c4ff572c078dd4fdc8", 0x8a}], 0x9, &(0x7f0000001c80)=[@rights={{0xc}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {r0, 0xee00}}}, @cred={{0x18, 0x1, 0x2, {r0, 0xee01}}}], 0x4c, 0x800}}, {{&(0x7f00000025c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000002640)="b8ac50ddd363dfffd0a55dae04293cb0e328d088dba0e0338c3d7e18ce0e9f40720328784be3f0e65bb6b2c5e18d295e4d33c878bf21a2cc228da5f7046bcccb2f2c06ed40a699341b05c724322db04d436f3c12e8ec3fb4acc5d0ab0c87bdbebbff77d363d9bb916ee5cabe9410f5a559c83150b2929dc2a6f8adb303f5b63594179e39743b3b0c15652f6f0a", 0x8d}, {&(0x7f0000002700)="185863755850921261fd13c283768e49123fac5987f189152510dc43c59d3e465c6529701e14067ecd3f108cec5b2e1329b9f07199cd2dddb49d81e6e76837a229107e8cea0bd8cc0a58dc450894f29558b7fe47754fc78caf6bf59b3e5d28b3b191a0a8a26a72ec1e8513dc31fde6b4d35ddf3fa39ed4de27a6d9261d3c504f6021578a69ff38e4e2ae4e08dc010c21eae8c493ba1baa5cf6c9ec1b787fd8f3577e14ee495810f276b9a92d517f112d70b6ac4a", 0xb4}], 0x2, &(0x7f0000002840)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x20, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x18}}], 0x98}}, {{&(0x7f0000002900)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004280)=[{&(0x7f0000003040)="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", 0x1000}, {&(0x7f0000002980)}, {&(0x7f0000004040)="462b2cdc9e21ebd820f97767f867294eb294a1cec1858731d4de621d21ab7daf421488f2f1997963cb4911cbcd778cb1625da03c4827385dd2f6713eaa0af504eefb12bde16ff64caae2e4f4812c38891a869de173746428ee12b9f4a031a42e2cb6cd6a5e3383631db0056f948145289afbaa03b248290db9001648482135798334255309f1c3a7d1594cc96074b71af9df8cdb562a507304cf7d64cac5ab99dd7fae5ee2c9d4d09073ad5d0d9e80f0e9ef66186fc483fa9701031c13a4c9ec054838844954a8dedfed2477a1645057e12e549318d22f1c0c950d", 0xdb}, {&(0x7f0000004140)="7d7f7c3b48a81e2a8560e9e63a2c055c0da63ee8cadd915acebb349e8f8f5f9ffb9221420028a0cde421bac150510b34c8dd224570b20ed3", 0x38}, {&(0x7f0000004180)="0763b25c26c421294248a726a143ddf1259a3dceff4ff5f88fe32b303a4b000e1716ae196b9a98594d1554399c0ddb02f9b0ff1351bdaf52fbbe4f0f1a03e3c3be3faca22d35954539afe871df3ae3eca96dc6732d392fb8ff678e7d5dbb777e816070a1e94c7006085e5da3b54d60ca0d64756c117e7ed460f534ce356440bf4fff79655d044ff6c5d738b52db3f81a76ffb01e02dca78c29d34478d79ca54089fb579c841da17a42bc4c37482c25707af512e3fac1800e2209af15447208d129dbef7f7cac28e22d11d6e1874e0770cbd93432f5c9e2cb8bbdcd143e33602338375e2f", 0xe4}], 0x5, &(0x7f0000004600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff, r1]}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xc0, 0x4004000}}, {{&(0x7f00000046c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004740), 0x0, &(0x7f0000004780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x38, 0x8000}}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f00000047c0)="3505ba62b70219e0c1c0beae589e55fe0e86c3c5a6c2940a058f9893357846abbcbc1590fb2b490c34dc7eed8ff146a43cd71bd6100caafec83a1096a0ec139576939b5df86bed0c20784139cb643391f5dec9d3c7c8ac037845808f7127a145090ab12bbd171b38dd96446a41a08275c9040e6712739cf863aff973187876f2748b4bd9de13e76e2668fbb1920fdbebe4c71e79770779f429f6b572265690887fc93d6ec7545d780366330df02cecf96189ae700147b7c3403f74a3bf459a08152bbdee7118d7c6d4adc04d547faecca61bd122b6536a0880c2f1c984bd01cd86388c9c0efbdf", 0xe7}, {&(0x7f00000048c0)="9d9820daa53a95cd9367f7a4aff17612479c8a1fc93faadc98938bcddf9ed5ab0ff73b6067472bdbf67c996841cb4a6bbc3307666b47a6663c20923c530448", 0x3f}, {&(0x7f0000004900)="d443df281712bbcb9598f66f4444a76e15c2aa94dcf0f14250ce66750a85de3af9307f28589e4461148a91c940e2a391e0fed56486ed2dce9282e1621d3446fc644be0a3fa140af1772405b549c36e2c729951c603f2579f396fa6291cf4cdfe2768f640d75a101e695e081cfc92ed90ad55cfffe4b2b344ba5c0967862ad681e88db5fec12435", 0x87}, {&(0x7f00000049c0)="19a991498dda0ca1c6adb6fe959f59b11b5451808a320057a290008e602f06edda647ed7e559780a61ca97b6040e3d44da2a91f518a90a0b02bd83c1", 0x3c}], 0x4, &(0x7f0000004b00)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x6c, 0x1}}, {{&(0x7f00000072c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008480)=[{&(0x7f0000007340)="5bb6cf28bfebf89542d0d33e763b812e5b03ee5d33922485143b286d7b373744d0c011a63219f326dd0a7c982d6d18bfcf8faab869634bd2c82848e56919cd99342d57e3c74a0ae6fcfe704f89bf2f91bb24c171d25fb069c6d6ef47c6407dff96ad3aa1016dd0603e903c732b01410a32fe0ee30a37e6874a9e4a40b0d2db918607ccd2d2433322abe22ed5f8a5792bc04db848ee824029dcb101d3e408d96115789d779f2cbfebb0d9ca50a042da1f46c10747af52", 0xb6}, {&(0x7f0000007400)="a49516d7f5abaf8aee28f974c41d1436ee0c0a267e10bc22c177a7c28d505209400719fa2f8517c2fe35bde1741681031fdea91a8841facd46846a21c5c1408f453433071731c9e065ac7e3d181771b6f41cf99016fe44eb27ad0821254ce54f6d66a1b6283c7de26a3dea470ceb0bc96deede6a39a9e603ea3721c5763fe565a27272980e10d6fbfa65e0de4d1c171a5997e252302fb2dab2c01098746b5311f6eb2d4c9e46c222e1cab804f8143bf3d87d62cd3fc63a9b3ba438b131dd8d700c76a3e411da3c059c66f108821b69cda8afa83a992a7549aac374332dd18689de2aab4cc56540d0b441d0a591ebbc2b2f27951f82ddd3efd5c71c4f820987b6e194ed80913c1d09185a223c781a7368e87858c9bd750b82734af7207c7c8a1b9a643ab59b82467f267c827e6248dfe8ccd7b12448c4bd3a1719adf5895b1105c03dbcaa49961fcfb64be0bccc7035724ab94685e3b59abf75df7da662598f08fe206d0cbe7d2d70f5f8f84d32b2e9e24f026e4635fe7e5e9dc4201c7b67d8c0a9936dbeb27b87768b66dcb795ad00c843338c6f884cea59f228c448b2f9b5e1892f2e3b01e78a69aadb80fc9009ae23e5356269cdcda2c5113efd4a287d28761b45f899058396fbace2d751a458ba97eda4a410fdd0a9ccb054d0545355e392158e18c208325fa2a08d8bbf3e13cd85f92eb36b7b5621649125132f56fbb2931b77edd69c8273802a77c8891fe24717f255c0eec19c6e1b17fc655923ff6512b328292aa44efc124e461c3a539f276d496f5ddf2fc74394386f6a05bf8c2591eaa0bbbafea9d935d78eb8d9b4740bebcf10ddfe8469dce1d7fdfa33c8ab20d90861903c31924089e86f5441c477907e140946ec1c7ba0eee89cbb869d84bc29ea68fd9ecc4cc17d945ba59432fd6bf89e53adf600ad49cefaf588a279d63c46fc773ba4a0512d50057166dd5f24afa9fd82c0443a46d2b216b3fca54976591c8a86eb8ba54bb00c03fb860a3634479664f9af3243eb878033cda84d918abd5c0a5f3db221d3cca33290321d716b703c2af8e149f2bb0c1263b125002b9124c370277b52b23e79022f4a290c4491ee8a107d452d9cd61daf256328fa67ad53538d9539d1c8fea20a810804e8748dcd0ec15c63c2551a97a6d6c379490bda280698f5bb22456f98f7d60814fcf07bb855b880bf3e98d199affdf4dd3be23b2aed7fbc916f3aa272f43bf93a724d3c130951602a4eb13c15b3d3e08fd1be4f922ae34ebee26f63fbc66a6b1a1ece7d6d89019c8c45628a87d89641502ef044022c355afdf78c1f7dff19dbb15413ae4886ff43fc1e5a3b11a22f8317c836ef2caec96b8f7ec267b7c8ab0f002e583259a81ff9cd208a24aa4ed0231702720ff4f02ad2b762aecb6113e710853efa9252009097cec5ff0c2cbfccf7d8e517264cf96c5834e2307c24b7ede3adb60ad9b50af9d390482054048a412d95528a6d0709cf09164ab132d2c991fdb4cd52224540f831a636a272cb525e525d583d5820e39cd91e6cf4b4bc38346182b85dd95f22344c61377966d4291ce9386af7a20fd3cda6565bc10b52c426c57dfd1e2a531d423faa520ca9bd8af1a0535e72b34ec6327b8acf9cad4f64faef1ae371e5bddc9a402deea9b2f83335d571d9abf30f5829bd568bef3bbf5f664f1b05a2fb2fd13c13598261690054fd140e7aff348850e7907f2eb19ac4fa1184c5dc40c76e40b81057abf962569f6466959eb3145c43111c979a6d4ba13faa75b84affdd079244d7c9b710f7995c086fb3ff1436d84f77cb3b6f172c5c323032d43809c7d04a7b2c9d6f28032f3a6ae988f62d63f63f91e45e3694d0610786c737cc86d1036c037f3c5a3639b306973a4b46580f7e4fa036e4c8096e15fde3916fcec3ad954adc7e22102701c620ea5961ad49829dd049af9e1375f269037445f57dfce62d1f5112d4f232deba77274ec0e4ab717de1b37b117251aeb33f93f588c7ec3fc10f22963de0e934542527743926be9aec55d15562735d42a9ce3b4ad261556349c8d8e8fbee5c88eabc53448afe41cde8ae8ece839424d45e3c4e38875cb7133ddab012de306bc64e97daa155832cd2f2518e76f2c60ff429c00b7f85631c209d5ddf9e61f924f4233880faa3a88e02093ded42cf56d78df7b337bac4c6ae5cbdd89274ea96ab28cf8cb548fb0a28357699b60aaa5fd6e0cbda496b18e129860c15385f05e85a3f1f312b9dcaaadb7ac12d3fbae2ea25984c9b161c7845d8aa100fe76ffbe4d4362de2f4bb7687f410a601a31060538d4cb8b30398106b87ff8c96a4d9f8be687a7cab3009977fea03effc29685d862505a84c75db1c1206f0b276135ab1b3e41c011292f04dc5200c235de941023195a66d8887aa2c97001dbc21a1338ddbda316bc6b874b5c9046437166f2e44bdfaae4c1182d042a82894eb2bee38208f3de25e4fdca196fa0f05da6f553be27bdeba2a4887f585c669e9af8c91bc649c7907275e967c5930572c78c71a36295135e45389889c0046a4bed4465146c430bfd8e2f4c84635c4fa36ada56811a29b306f23e1107b243bd297762ea90eb6a3c22c7f3041df0accf585c91d31d0f97333fc7ec9a7e4e8c987e30d06050972f2e1bff4550ac91b8c7cb1f988db22de121130685e14c8f4804ec55a222e41808956bc86229d8c8f3ecf7d3f1d7b020f8d8fc981027368d51e50ed70f37c65c294bfd80b4086c0227422854053acf722bb22fa1ae4a301bf1173b657ffdc0c522a325bc658e2e95876199dee06d1404702ce4335e00cadf1b1b0328488294321779cb526735f42b5ed1aa6759ea7ffab723ef022f14465698339d015fd06921bccb032e052bcc11b4360563f81e2f42fc2de23d663a968deae94a1f450b0162485d920a1a6ce129a41148c6d6215d4dae9041e14302c50a2ecd738105eb846410d627e07fd8265ff510dc4e805a59cd4c598ebed8bafc64326ed93e2a9bb93c91e675735ffc34b8c77cc9120fa49d45f4a80d8732c0fcf8fcae93a898cfcc6b9893be1bd1ea610d31cb6c55f112dd8a056692297d08eb66db8c4db93787c80eb6acdaefbada03d12b198121bb0ad5e4fe82c0c73215dff06fb1f329527c2a8dcf7f150dd0ea01a89b4211ab7fb103c5fdf76eb0fc9f0f255df75a63492e0caffaf7d4aef66e9a42ddcb59f2faef086ca467c45019b4f7c55bcddcd1c88f959b3908e3f02b4e2922b898f5d2eff3e08c4b0721dba67fce8581c611d77e1b46fd009f449e98ed85e32e313cbb7637ff4d31f332631247710bbc3d5ffb85b9a366417cb636df1d1c34ab2f1b1a866999ac220c88dc78ff3082c683abd507ac10a384ecdbf49840708f79b52655bfddfe4e4fe02bbe1bd9bc3913035a0d872410d051f2262cd3c7244938a0097dff29d9f62e9f95fc2cd99ca4ba6b32cf3091fe37c6283e952d8af9882633e8ef9c54876f41f664b77a29189079a94a61920b9205131a821617eeb798b83ac19ba714aa1bbee285aaef2d7949ad8797c3ce63c90c6b69cfd0ead568030245db4c3af95f0578e78fe4d62cfbfc27eca2592ab13b31a891f8785885b72f077421e20c9801c14d68ba923a6b6a1a39e3fe75c0b0b9033f70c38769c51545e72b94f244921fb729e4d2a2af53bc910e2159854e0a7a06b70d45a9a91672dfdd5694a9e5f5b46a8a208ed55b2563a46848307aeaef9b5677252a8e083500e4b8dbf7a3e326ff0cd1671a322f3ece6b78b3c47b60b13046abe1ea461afcf3605a5bda303ed461cf60a3d3793fa8c15306bc211f59838dfadc468015c4533981c596a9c3199a5f4a9144d7175029ef2be6ff72037b45811945b769b4b3bed1e01d32cb5a162f5186bd10a1b4e714d7b4375bd36a5b737032af6cfe5785402abb1509dd88d6abedde730d833ce9c64c439f500f02d4030805a253d74acee9fe1715b91e5d64009639b479593a9e287626d0faad846e2715c13062668b7c3c03f55c4b8f7e36c476a70a9e31c02678fa634d418eee2041320aaefe93c90139a69a5c5824446446771e7e8b5d6f5ea0dbceadba386d297b80fd637e10aa1374581c4d6e1b206edb6be65d9900d0fdc6ba82badab365bf2a23ffac1605b31fa511fc9cb57f4aa3600e7239de550c8d9c08bf9daa575ff9d23ab33c26eab2964bdd7c7221c6a778e32faff75522f904f4d60015616bb17f2a4dd4276d497f57c0a958d11d5521e16993d1097165759e6ff7f4e37740528e270fb388e34d858c1b5e105430c9d28425699ed245691b3121f4d51647d91e1ac4e3b406a1a2b0b7d34e6287783f9b575b7249fc170b5163d77a77c0601aa068f615b954368f711945b13e51928654990832c4a3b60d55a8f585a17ce41f5dd1ffd0e200da7f1c959e7c0cb9189dc9d77f46baf23ee369e5fd35ce870eb15f059f782fb066f3a5e515cfd342df9c34f52b3cde561e005b158d8e82003bd3dbd117eeab5721206aa6131ca1be4fccf807ced14de47eb8a516dc46201df63abd452d66c57f8f87fe12f07bd61622543d55ae4cc4d3cafc35d7f9f045b4b29cb197143996d521d32b2e05e99edc1d054ee86e371f3b31af78ae263c221ca588c5e311b03fc2f3b7807281c04240cda77f26ffe660575c5c7d2e4d6e64cc85401356021045e5625b3d7e6ab3ba6bb01ae2a86a0f74f8edc8f2daa70f3561f97bbae0e864c80165dbbf1045b787aa8bba20cfba8cc2c9f5eb6685f0f9e89a24fcd1c8194ae231921d92a5d3a09abb5a7ce5f9cfde43ff940758d2d1d20b6cb82b61dcef84f90ed979a243e4144b77955c156f9bd93c99199191ce6b3c90cde053fa5c1afc6d30cc998c971972dadd9fba0aa057cef93988e156d3a07659e33d2dfd3939d9803c7847c9eebd76a278424aaf03cc3bd540cceed69eeecf19904e9f7da8e6aba032f4751faa20163da3cfd2fb9cf2fa973fd602d0f1e89894698f82b4690c5de32530f4bf2dc022d8e79be03c25f193ea1e17f0451c7b315dfc982d915161a32297320ee2c8fbc9e086932cc90675b2179b085b6032446ad92bc7718a1cf63e26e2426d10c3840fe052c72b5d2484c97e3966db6a2f183aab0efaee4857df6e05a6177b7771e4115e2953f770f731a82d379abd4eb49aa8c6e2846887aaed73e4f59254cf3c214459739c5372bd4f3981101a2aed89ce5be4ab9235b51b75552d63288abad78fa98e235444fd029eef90234e1242722ccaffcefced8c0a8149dfc3a8a586e55fad2f7270f7056c8ff4dbbf2fd22dc7147bfda13991404e8bebec4c4472d3fc5ec201f93c7394a8e5b4f1be335f8a9d38b2167987aba4137bae51c85040a8e40e9a46e436878a833a5a3251edd60b9b63f030cf124925599cb71379961603458851578040d5734f9e3686ed8377e6ecb9317e932354b3ed401c97397e2389762be346e6310659e85405696891bb1b46ffa62c85db8d1e7ed4b49c61f0f75dfbff6a8b68a66a15383e3fc562029499b4e048ddd379774d8317779d8f92c82ba9785514870d7710e1ba527cc2be952f763b66b652ff57446b22073ae6fbd94b234156067065b3057f98481f135e9f00bbd16833b320260d165d81113230d0b81622c7764a3bd2e75be8c53963caf17868c75b09e79de2c3f4f188f3a538c22611eb6ff3830d5f00ec17b874f5ddd6314f38ef9ff25d36dfafa542e5be57cff69410039fb623925c0bd264d7daa9a714496a687d841223b0b46cca86ba99b7b4b90216788319c15cf18", 0x1000}, {&(0x7f0000008400)="0587ca4f204a1e1962fce7e59eb4e698b52a31216f2f6e54e762ee1b6d7e74c6d4c5f25721ec04cd668f57f6646373aaa5d40d8eb69c88db86617b30012cec2b4624613c93d5d57238637bb76db50d70770f56d958ed0df7100327dc3452f1295daf2fa70144170dbf88784072fe144bf2fdf58a3762bb97d8e5c7bc93", 0x7d}], 0x3, &(0x7f00000084c0)=[@rights={{0xc}}], 0xc, 0x8800}}], 0x6, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth1_vlan\x00', @ifru_ivalue=0xa}) ioctl$sock_netdev_private(r3, 0x89ff, &(0x7f0000000300)="45037231504434932d3377b3c5c2491ec69bd041a5d78239efbd99c7f88a47480c9e945e2eaf82bf1f5d3c8d54ea31818a776ba02301ce4a5018364dfaa1") r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}, 'team_slave_1\x00'}}, 0x1e) socket$kcm(0x10, 0x5, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000440)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f0000000140)={0x0, 0x5, 0xf1, 0x7}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 7.321357976s ago: executing program 2 (id=2795): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x40000, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x0) 7.221770475s ago: executing program 2 (id=2796): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.851895978s ago: executing program 1 (id=2797): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @sdr={0x32314d59, 0x8be6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x101040, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) eventfd(0x80001ff) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/132, 0x0, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) unshare(0x44040000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB]) openat$hpet(0xffffff9c, &(0x7f0000000100), 0x341800, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) memfd_create(&(0x7f0000000580)='/dev/nmem0\x00', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socket$inet6_icmp(0xa, 0x2, 0x3a) connect$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0xcce87d156e221353, 0x0, &(0x7f0000000440)=""/61, &(0x7f0000000480)=""/30, &(0x7f0000000500)=""/47, 0x80a0000}) getpid() r5 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r5, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) 6.285127016s ago: executing program 2 (id=2798): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0x1, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x8, '\x00', 0xe}, {0x6, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x80, 0xb1, '\x00', 0x7}, {0xf, 0x3, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x1, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x91, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0x3, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x5e, 0x5, '\x00', 0x3}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xb, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0xf1, 0xb, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x91, '\x00', 0x1}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) r5 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000001840)=""/105, 0x69}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x7}, 0x80000000}], 0x3, 0x40008062, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.232325441s ago: executing program 2 (id=2801): socket$inet6(0xa, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r2, &(0x7f000000b900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=[{0xc, 0x10b, 0xb68}], 0xc}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c00000007010000030000000cb7d07c1b0000000d0100000500000039a1675ae25844c8d4b326027dc5cb7af24712bd332e6f52da46fcfce9c73a6ef72db8e9c8048a5d701833665bea37c39646431db16e488a1bdb24df4c6bd6b256bb51e4a591396d77f4e7ff9d69bdd0a3cee86f0c751da5661dfc479f58c071ba39a6ae"], 0x18}}], 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000001}) socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndctrl(&(0x7f0000000380), 0x4, 0x10000) r4 = syz_io_uring_setup(0x235, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x2b1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x4000}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mknod$loop(0x0, 0x10, 0x0) 5.162065483s ago: executing program 3 (id=2803): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES16], 0x50) socket$inet(0x2, 0x3, 0x2) (async) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x55, 0x1, 0x1, 0x0, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0xe7, {{0xa, 0x24, 0x6, 0x0, 0x0, "2b7a015b79"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8, 0x80, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0xd6, 0x401, 0xe0, 0xf9, 0x3, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0xc7, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4, 0x3, 0x4}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x9, 0x0, 0x3, 0x10, 0x2}, 0xf3, &(0x7f00000002c0)={0x5, 0xf, 0xf3, 0x6, [@generic={0xae, 0x10, 0x1, "77ad35e263f1c373c643cc5350c70cdd8b81df1b6c7bf2e70995172a758f21cc633522f988bc07cc0955654becac7795d2fbb96a77ca8b525bc88c39d936fcd22d7ee9c98bcee27f14301b4e7ed0239901f49892b2ecd6feb0f409dbb756e57435a9e6c96bb934bed41682c55600d7c729738481a9dd12124943d98572a817a0640e051e79dd515e464d16e13b0e07ae0d885dcdd7e4efa467332cb86a2b2279728995596bd33c843d5a1b"}, @ptm_cap={0x3}, @generic={0x26, 0x10, 0xa, "e9d0db7fdb1724159f13d933914d938ab5cb246755798fe4eccb8fed103b82da23af8a"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x40, 0x5, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4, 0x5, 0x4}]}, 0x7, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc21}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3456}}, {0x97, &(0x7f0000000540)=@string={0x97, 0x3, "c2d22268839496a099ece4f5c908b51c4328d3efb2108679b177101c56b7a3c16491653b0eb07ba7faec08e24825e1b008421921d9bc8dfd76e6391cb9cab2feec0b0ae5f2c7c08022c3419bee992199108dc75e6d4b0b2f9d8fe0997cf33f330719a5ec8bf1d20fe51ee6f08d67b1cb15c01cadb4fb623566c9d361f0f1fc8f9aae4897ec44f7046f25994cc12d9f7b0f0338c62c"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x444}}]}) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYBLOB="bfe79a469fb0bb3be423fb9fa3dcf39bcf9d743d8a5c90bf2f9808636dfde82140a0126b61adc8098c1dbe63ec", @ANYRES64=r2, @ANYRESDEC=r1], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) 4.883975787s ago: executing program 1 (id=2804): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1d1) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x600002, 0xa4) (fail_nth: 10) 4.842639635s ago: executing program 0 (id=2805): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$media(&(0x7f0000000280), 0xb, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000000300)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{}, {r1}, 0x2}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}}, 0x1) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2020) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000019c0)={'syztnl1\x00', &(0x7f0000001580)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x74, 0x8, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x7, 0x8, 0x0, 0x8}}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001b80)=ANY=[@ANYBLOB="d800", @ANYRES16=0x0, @ANYBLOB="000025bd7000ffdbdf25100000005c000180140002006c6f0000000000000000000000000000080001", @ANYRES32=0x0, @ANYBLOB="08000300030000000800030002000000080003005f384aee14000200626f6e645f736c6176655f3100000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="080006000400000008000900ec36000008000600020000004000018008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000140002007465616d30000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="18000000000000000000008fa0c6958f00", @ANYRES32=r8, @ANYBLOB="08000900040000000800090000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x8001}, 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) signalfd(0xffffffffffffffff, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @thr={&(0x7f0000000000)="3c6a2431a9585474c7c70907d23026", &(0x7f0000000440)="b3bdcb014ca74787780d9da0074233bd7ee620dc39ae5b79194522a203c4a9e7838e20e2b46a00ed6d66691e41d635badda36de2f3d5853b0e548c23805b25a32cfb210b8d88a59d8ad221b1f2a18f42540433ebcd0042a6342bc164292f9ff432ec26a8a643d6af34cbabf991def5a55095edc82c0cbb2071acbb3c209056dce407401083279c4a43c8d6ecfe0413dd0e7c00c5e4b1263838a7877945a4695c748150fd2dbf215fbc81bd28c3e64985ced0af96c61fca33bbb16a69e3094f3470a80bc60cdd91761d3f5326b707a1c1a4dfbbc998884757617d1e6f6988a39a7b186d3d"}}, &(0x7f0000000080)) munmap(&(0x7f0000584000/0x800000)=nil, 0x800000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000014c0)={0x0, 0x5, 0x0, &(0x7f0000001640)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000001840)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000140)=[{}, {}], 0x0, 0x0, &(0x7f00000003c0)}) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.7325562s ago: executing program 1 (id=2806): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0x1, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x8, '\x00', 0xe}, {0x6, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x80, 0xb1, '\x00', 0x7}, {0xf, 0x3, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x1, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x91, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0x3, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x5e, 0x5, '\x00', 0x3}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xb, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0xf1, 0xb, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x91, '\x00', 0x1}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) r5 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0), 0x0, 0x40008062, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.341856329s ago: executing program 2 (id=2807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.88207636s ago: executing program 2 (id=2808): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = getpid() r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b02, 0x0) tgkill(0x0, r1, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcdbfd250400000014000500fe800000000000f200000000000000bb08020700e000000208000200000000003c2db5800b0fafa483fd79f4bbb769ddad662aa858577bf0f9b0fa312a1f13706724d834cf62718e62f378941998a792c4ac00f42e6fdbeb3d3b8fe02a1e91fa69493827b506b7457d6b5655ceceeee7715410fe1ac6b7daf355b9d7a7bd1c87"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000a80)="0b0312002e00640002004c5440f6a13b09000000081886dd48eb", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='sockfs\x00', 0x104c0e0, &(0x7f00000000c0)='\x00') madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe) 2.868696748s ago: executing program 0 (id=2809): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0x1, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x8, '\x00', 0xe}, {0x6, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x80, 0xb1, '\x00', 0x7}, {0xf, 0x3, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x1, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x91, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0x3, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x5e, 0x5, '\x00', 0x3}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xb, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0xf1, 0xb, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x91, '\x00', 0x1}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) r5 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000001840)=""/105, 0x69}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x7}, 0x80000000}], 0x3, 0x40008062, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.632007623s ago: executing program 1 (id=2810): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0xfffffffe, @remote, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x77359400}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240), 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES16=r6, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4008045}, 0x800) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x700, 0x0) chdir(0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x4b45, 0x3) socket$alg(0x26, 0x5, 0x0) close(0x3) 2.122255502s ago: executing program 3 (id=2811): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newnexthop={0x5c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0x3c, 0x2, [{0x0, 0x6e}, {0x1, 0x10}, {0x1, 0x7}, {0x0, 0x6}, {0x2, 0x5}, {0x0, 0x1a}, {0x0, 0x2}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x2}]}, 0x5c}}, 0x0) 2.052029555s ago: executing program 3 (id=2812): socket(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r2 = fsopen(&(0x7f0000000000)='qnx6\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00', 0x0, 0xffffffffffffff9c) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r2, &(0x7f0000000400), 0x2) r4 = gettid() capset(&(0x7f0000000040)={0x20080522, r4}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x800, 0x0, 0x8001}) openat$tun(0xffffff9c, &(0x7f00000001c0), 0x8000, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') r6 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r5, &(0x7f0000000200)={r6, r1, 0xffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b\xba\xdf//\xdc/\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}, &(0x7f00000001c0)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x7, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xeb8f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8c6, 0x0, 0x0, 0x0, 0x70}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x32, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x3, 0x5, 0xcbd2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000400)=[r1], &(0x7f0000000440)=[{0x4, 0x1, 0x3, 0x6}, {0x0, 0x4, 0x4, 0x3}, {0x0, 0x1, 0x2, 0x9}, {0x1, 0x3, 0xf, 0xb}, {0x1, 0x3, 0x8, 0x5}, {0x5, 0x4, 0xa, 0xc}], 0x10, 0xc7, @void, @value}, 0x94) (async) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r3, 0xc0405619, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001008000140000000020900010073797a30000000000900020073797a32000000001400000011000100"/117], 0x78}}, 0x0) (async) r4 = socket$kcm(0x2, 0x1, 0x0) shutdown(r4, 0x1) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xfffffffd, @private1={0xfc, 0x1, '\x00', 0x1}, 0x90000}, 0x1c) (async) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) listen(r1, 0xffffffff) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1.830142022s ago: executing program 0 (id=2814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%-5lx \x00'}, 0x1c) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={&(0x7f0000000140)="e34f29f5aacc80586c3adc51fa9017557fa2188273597188a2bd222233c4e82e44e94f3caa5e5f3af93c8275c2733051b56dd5cf20466a4cb655b1038f6342b0376e9818ef5cf25ab3d399c006111e2844a42d39d8f87102aac5c3ee9a61bd262b42236f8637c4149a184fe6ca01e055697da0f9179e0fae8492dc0c8fc91af3873dbff9", &(0x7f0000000680)=""/4096, &(0x7f0000000240), &(0x7f0000000380)="c48e72fc709d7c7811a4346f6d5f0b3943ec925450167b67c43b067d58a2727d76179ed3f2ede0498f1f09b5cb50ad2b43e2ad2da35f59045ccd98887293953170c10832011a21a4b2bd77531260a32b04b8ded004967ecb9d653540d72ffb7bc47b11de1aeb4ce4d2c0092c080c9c9f", 0x10000, r2, 0x4}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000000), 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x54, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x36, 0x33, @action={{{}, {}, @device_b}, @vht_group_id={0x15, 0x1, {0x0, "5584d2f515d56c029a92908b231c387c"}}}}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r6, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc, 0x1a}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8041}, 0x8800) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}}, 0x0) 1.829767443s ago: executing program 0 (id=2815): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.771951559s ago: executing program 3 (id=2816): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8, 0x1c, r0}]}, 0x28}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x8000, 0x4ce, 0x5, 0x9dff, 0xd}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x4, 0x8, 0x0, 0x8000000080000007, 0xa, 0x0, 0x4002004c4, 0x1000, 0x1, 0x1], 0xeeee8000, 0x1144}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'dvmrp1\x00', 0x2}) close(r1) 1.600151241s ago: executing program 3 (id=2817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x190, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'netdevsim0\x00', 'macvlan1\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.0648294s ago: executing program 1 (id=2818): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0x1, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x8, '\x00', 0xe}, {0x6, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x80, 0xb1, '\x00', 0x7}, {0xf, 0x3, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x1, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x91, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0x3, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x5e, 0x5, '\x00', 0x3}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xb, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0xf1, 0xb, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x91, '\x00', 0x1}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) r5 = syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0), 0x0, 0x40008062, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=2819): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x10010, r0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), &(0x7f0000000240)=ANY=[], 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f00000000c0)='./file0\x00') (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x10010, r0, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r2) (async) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), &(0x7f0000000240)=ANY=[], 0x2, 0x1) (async) kernel console output (not intermixed with test programs): netlink: 'syz.3.2262': attribute type 1 has an invalid length. [ 566.523578][T15427] netlink: 208284 bytes leftover after parsing attributes in process `syz.3.2262'. [ 566.526155][T15427] netlink: 'syz.3.2262': attribute type 2 has an invalid length. [ 566.528317][T15427] netlink: 'syz.3.2262': attribute type 1 has an invalid length. [ 566.912777][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 567.072879][T15414] Bluetooth: hci4: command 0x1003 tx timeout [ 567.076238][ T5303] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 567.183571][ T6008] usb 8-1: USB disconnect, device number 6 [ 567.210157][T15438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2266'. [ 567.428493][T15441] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 567.473071][T13885] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 567.705865][T15447] syz.1.2264: attempt to access beyond end of device [ 567.705865][T15447] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 567.709519][T15447] SQUASHFS error: Failed to read block 0x0: -5 [ 567.711351][T15447] unable to read squashfs_super_block [ 567.952809][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 568.128206][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2270'. [ 568.306755][T15459] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2271'. [ 568.744908][T15472] Cannot find del_set index 320 as target [ 568.992808][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 569.878515][T15492] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2281'. [ 570.042771][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 570.555626][T15512] netlink: 'syz.2.2286': attribute type 1 has an invalid length. [ 570.558068][T15512] netlink: 208284 bytes leftover after parsing attributes in process `syz.2.2286'. [ 570.560797][T15512] netlink: 'syz.2.2286': attribute type 2 has an invalid length. [ 570.563283][T15512] netlink: 'syz.2.2286': attribute type 1 has an invalid length. [ 570.844075][T15515] tmpfs: Bad value for 'mpol' [ 570.849088][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2287'. [ 571.072801][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 571.863553][T15539] trusted_key: encrypted_key: master key parameter '' is invalid [ 572.112815][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 572.583622][T15549] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2297'. [ 573.152782][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 573.675227][T15570] lo speed is unknown, defaulting to 1000 [ 573.677738][T15570] »»»»»»7 speed is unknown, defaulting to 1000 [ 574.192784][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 575.232811][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 576.272860][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 576.893601][T15618] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2314'. [ 577.312863][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 578.352877][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 578.383008][ T6388] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 578.572781][ T6388] usb 8-1: unable to get BOS descriptor or descriptor too short [ 578.579140][ T6388] usb 8-1: config 1 interface 0 altsetting 180 endpoint 0x82 is Bulk; changing to Interrupt [ 578.584700][ T6388] usb 8-1: config 1 interface 0 altsetting 180 endpoint 0x3 is Bulk; changing to Interrupt [ 578.587455][ T6388] usb 8-1: config 1 interface 0 has no altsetting 0 [ 578.597396][ T6388] usb 8-1: string descriptor 0 read error: -22 [ 578.599452][ T6388] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 578.601996][ T6388] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.693790][T15632] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 578.696548][T15632] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 578.703906][ T6388] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 578.904532][T15638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.906910][T15638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.913168][T15632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.916911][T15638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.921555][T15632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.924338][T15638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.927187][ T5956] usb 8-1: USB disconnect, device number 7 [ 579.014352][T15640] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 579.018592][ T5990] »»»»»»7 speed is unknown, defaulting to 1000 [ 579.402823][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 580.137949][T15668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2330'. [ 580.432772][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 581.061664][T15688] wireguard0: entered promiscuous mode [ 581.063454][T15688] wireguard0: entered allmulticast mode [ 581.482818][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 581.860618][T15696] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 582.067017][T15702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2339'. [ 582.089670][T15699] sctp: [Deprecated]: syz.1.2338 (pid 15699) Use of int in maxseg socket option. [ 582.089670][T15699] Use struct sctp_assoc_value instead [ 582.200624][T15705] netlink: 'syz.2.2340': attribute type 1 has an invalid length. [ 582.203824][T15705] netlink: 208284 bytes leftover after parsing attributes in process `syz.2.2340'. [ 582.206376][T15705] netlink: 'syz.2.2340': attribute type 2 has an invalid length. [ 582.208502][T15705] netlink: 'syz.2.2340': attribute type 1 has an invalid length. [ 582.354014][T15414] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 582.357743][T15414] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 582.361448][T15414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 582.366766][T15414] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 582.369509][T15414] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 582.371662][T15414] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 582.391447][T15712] lo speed is unknown, defaulting to 1000 [ 582.393661][T15712] »»»»»»7 speed is unknown, defaulting to 1000 [ 582.522776][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 582.523605][T15712] chnl_net:caif_netlink_parms(): no params data found [ 582.606054][T15712] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.608118][T15712] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.610161][T15712] bridge_slave_0: entered allmulticast mode [ 582.612257][T15712] bridge_slave_0: entered promiscuous mode [ 582.615459][T15712] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.617493][T15712] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.619521][T15712] bridge_slave_1: entered allmulticast mode [ 582.621565][T15712] bridge_slave_1: entered promiscuous mode [ 582.642518][T15712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.646785][T15712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.668991][T15712] team0: Port device team_slave_0 added [ 582.672028][T15712] team0: Port device team_slave_1 added [ 582.688684][T15712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.690635][T15712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.698049][T15712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.701830][T15712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.703943][T15712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.710994][T15712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.737671][T15712] hsr_slave_0: entered promiscuous mode [ 582.739572][T15712] hsr_slave_1: entered promiscuous mode [ 582.741350][T15712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.743566][T15712] Cannot create hsr debugfs directory [ 582.773546][T12044] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.832488][T12044] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.874990][T12044] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.937725][T12044] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.387695][T15731] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2347'. [ 583.552878][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 583.565180][T12044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.569923][T12044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.573281][T12044] bond0 (unregistering): Released all slaves [ 583.656570][T12044] bond1 (unregistering): (slave veth5): Releasing active interface [ 583.659872][T12044] bond1 (unregistering): Released all slaves [ 583.783999][T12044] IPVS: stopping master sync thread 12693 ... [ 583.872642][T15736] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2348'. [ 583.872934][T13885] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 583.874514][ T5303] Bluetooth: hci4: command 0xfc11 tx timeout [ 584.107403][T12044] hsr_slave_0: left promiscuous mode [ 584.109263][T12044] hsr_slave_1: left promiscuous mode [ 584.124518][T12044] veth1_macvtap: left promiscuous mode [ 584.126607][T12044] veth0_macvtap: left promiscuous mode [ 584.271755][T15749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2352'. [ 584.276084][T15749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2352'. [ 584.464660][T13885] Bluetooth: hci5: command tx timeout [ 584.592835][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 585.632807][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 586.015116][T15749] gretap0: entered promiscuous mode [ 586.017858][T15749] batadv_slave_1: entered promiscuous mode [ 586.127280][T15712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 586.131571][T15712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 586.135905][T15712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 586.146015][T15712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 586.204512][T15712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.213921][T15712] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.217814][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.219896][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.226213][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.228242][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.337714][T15712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.339476][T12044] IPVS: stop unused estimator thread 0... [ 586.411062][T15712] veth0_vlan: entered promiscuous mode [ 586.416105][T15712] veth1_vlan: entered promiscuous mode [ 586.427611][T15712] veth0_macvtap: entered promiscuous mode [ 586.432119][T15712] veth1_macvtap: entered promiscuous mode [ 586.446387][T15712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.449275][T15712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.452002][T15712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.457118][T15712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.461595][T15712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.470519][T15712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.475145][T15712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.478530][T15712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.481866][T15712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.485500][T15712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.489787][T15712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.492282][T15712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.495380][T15712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.498654][T15712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.514506][T13885] Bluetooth: hci5: command tx timeout [ 586.541430][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.546119][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.558906][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.562575][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.672834][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 586.838885][T15778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2357'. [ 587.712821][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 588.592885][T13885] Bluetooth: hci5: command tx timeout [ 588.752882][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 588.754895][T15805] fuse: Bad value for 'fd' [ 588.891723][T15811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2366'. [ 589.792868][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 590.502343][ T5303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 590.506601][ T5303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 590.509112][ T5303] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 590.516265][ T5303] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 590.518784][ T5303] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 590.520852][ T5303] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 590.542560][T15837] lo speed is unknown, defaulting to 1000 [ 590.544716][T15837] »»»»»»7 speed is unknown, defaulting to 1000 [ 590.642032][T15837] chnl_net:caif_netlink_parms(): no params data found [ 590.674075][ T5303] Bluetooth: hci5: command tx timeout [ 590.832877][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 591.198336][T15837] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.200425][T15837] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.202500][T15837] bridge_slave_0: entered allmulticast mode [ 591.205174][T15837] bridge_slave_0: entered promiscuous mode [ 591.208102][T15837] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.210878][T15837] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.213826][T15837] bridge_slave_1: entered allmulticast mode [ 591.216621][T15837] bridge_slave_1: entered promiscuous mode [ 591.261269][T15837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.277419][T15837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.351659][T15837] team0: Port device team_slave_0 added [ 591.364628][T15837] team0: Port device team_slave_1 added [ 591.425878][ T78] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.447270][T15837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.452436][T15837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.460737][T15837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.470927][T15837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.474080][T15837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.481789][T15837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.524788][ T78] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.578422][T15837] hsr_slave_0: entered promiscuous mode [ 591.581310][T15837] hsr_slave_1: entered promiscuous mode [ 591.584646][T15837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 591.587665][T15837] Cannot create hsr debugfs directory [ 591.615446][ T78] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.688593][ T78] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.810115][T15857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2375'. [ 591.872799][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 591.892049][T15862] FAULT_INJECTION: forcing a failure. [ 591.892049][T15862] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 591.897999][T15862] CPU: 0 UID: 0 PID: 15862 Comm: syz.3.2377 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 591.898015][T15862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 591.898022][T15862] Call Trace: [ 591.898027][T15862] [ 591.898031][T15862] dump_stack_lvl+0x16c/0x1f0 [ 591.898098][T15862] should_fail_ex+0x50a/0x650 [ 591.898127][T15862] ? __pfx___might_resched+0x10/0x10 [ 591.898148][T15862] should_fail_alloc_page+0xe7/0x130 [ 591.898160][T15862] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 591.898179][T15862] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 591.898198][T15862] ? copy_splice_read+0x1a8/0xb80 [ 591.898212][T15862] ? stack_trace_save+0x95/0xd0 [ 591.898225][T15862] ? __pfx_stack_trace_save+0x10/0x10 [ 591.898238][T15862] ? stack_depot_save_flags+0x28/0x9c0 [ 591.898260][T15862] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 591.898278][T15862] ? kasan_save_stack+0x42/0x60 [ 591.898294][T15862] ? kasan_save_track+0x14/0x30 [ 591.898310][T15862] ? __kmalloc_noprof+0x21c/0x510 [ 591.898326][T15862] ? copy_splice_read+0x1a8/0xb80 [ 591.898339][T15862] ? do_splice_read+0x282/0x370 [ 591.898352][T15862] ? splice_direct_to_actor+0x2a4/0xa40 [ 591.898367][T15862] ? do_splice_direct+0x178/0x250 [ 591.898380][T15862] ? do_sendfile+0xafb/0xe40 [ 591.898394][T15862] ? __ia32_compat_sys_sendfile+0x1e7/0x230 [ 591.898414][T15862] alloc_pages_bulk_noprof+0x6f9/0x1390 [ 591.898437][T15862] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 591.898458][T15862] ? trace_kmalloc+0x2d/0xd0 [ 591.898469][T15862] ? __kmalloc_noprof+0x23b/0x510 [ 591.898489][T15862] copy_splice_read+0x1e0/0xb80 [ 591.898504][T15862] ? look_up_lock_class+0x59/0x150 [ 591.898520][T15862] ? __pfx_copy_splice_read+0x10/0x10 [ 591.898536][T15862] ? __pfx_register_lock_class+0x10/0x10 [ 591.898558][T15862] ? __pfx_copy_splice_read+0x10/0x10 [ 591.898572][T15862] do_splice_read+0x282/0x370 [ 591.898588][T15862] splice_direct_to_actor+0x2a4/0xa40 [ 591.898604][T15862] ? __pfx_direct_splice_actor+0x10/0x10 [ 591.898622][T15862] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 591.898639][T15862] ? __fget_files+0x1fc/0x3a0 [ 591.898657][T15862] do_splice_direct+0x178/0x250 [ 591.898672][T15862] ? __pfx_do_splice_direct+0x10/0x10 [ 591.898688][T15862] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 591.898707][T15862] ? bpf_lsm_file_permission+0x9/0x10 [ 591.898725][T15862] ? security_file_permission+0x71/0x210 [ 591.898740][T15862] ? rw_verify_area+0xcf/0x680 [ 591.898754][T15862] do_sendfile+0xafb/0xe40 [ 591.898770][T15862] ? __pfx_do_sendfile+0x10/0x10 [ 591.898784][T15862] ? __fget_files+0x206/0x3a0 [ 591.898802][T15862] __ia32_compat_sys_sendfile+0x1e7/0x230 [ 591.898813][T15862] ? ksys_write+0x1ba/0x250 [ 591.898828][T15862] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 591.898843][T15862] __do_fast_syscall_32+0x73/0x120 [ 591.898859][T15862] do_fast_syscall_32+0x32/0x80 [ 591.898874][T15862] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 591.898892][T15862] RIP: 0023:0xf7f6f579 [ 591.898901][T15862] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 591.898912][T15862] RSP: 002b:00000000f509655c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 591.898923][T15862] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004 [ 591.898929][T15862] RDX: 0000000000000000 RSI: 000000007ffff000 RDI: 0000000000000000 [ 591.898935][T15862] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 591.898941][T15862] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 591.898948][T15862] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 591.898960][T15862] [ 592.138673][ T78] gretap0 (unregistering): left promiscuous mode [ 592.386974][T15872] FAULT_INJECTION: forcing a failure. [ 592.386974][T15872] name fail_futex, interval 1, probability 0, space 0, times 1 [ 592.391256][T15872] CPU: 3 UID: 0 PID: 15872 Comm: syz.0.2379 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 592.391271][T15872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 592.391278][T15872] Call Trace: [ 592.391282][T15872] [ 592.391287][T15872] dump_stack_lvl+0x16c/0x1f0 [ 592.391307][T15872] should_fail_ex+0x50a/0x650 [ 592.391318][T15872] ? __lock_acquire+0x15a9/0x3c40 [ 592.391335][T15872] get_futex_key+0x4a3/0x1000 [ 592.391349][T15872] ? __pfx_get_futex_key+0x10/0x10 [ 592.391366][T15872] futex_wake+0xe8/0x4e0 [ 592.391382][T15872] ? __pfx_futex_wake+0x10/0x10 [ 592.391399][T15872] ? find_held_lock+0x2d/0x110 [ 592.391419][T15872] do_futex+0x1e5/0x350 [ 592.391432][T15872] ? __pfx_do_futex+0x10/0x10 [ 592.391446][T15872] ? __might_fault+0xe3/0x190 [ 592.391457][T15872] ? __might_fault+0xe3/0x190 [ 592.391469][T15872] mm_release+0x24e/0x300 [ 592.391486][T15872] do_exit+0x886/0x2d70 [ 592.391498][T15872] ? get_signal+0x8f7/0x26c0 [ 592.391514][T15872] ? __pfx_do_exit+0x10/0x10 [ 592.391525][T15872] ? do_raw_spin_lock+0x12d/0x2c0 [ 592.391535][T15872] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 592.391547][T15872] do_group_exit+0xd3/0x2a0 [ 592.391559][T15872] get_signal+0x24ed/0x26c0 [ 592.391576][T15872] ? vfs_write+0x306/0x1150 [ 592.391618][T15872] ? __pfx_get_signal+0x10/0x10 [ 592.391635][T15872] ? set_user_sigmask+0x217/0x2a0 [ 592.391652][T15872] arch_do_signal_or_restart+0x90/0x7e0 [ 592.391667][T15872] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 592.391683][T15872] ? ksys_write+0x1ba/0x250 [ 592.391697][T15872] ? __pfx_ksys_write+0x10/0x10 [ 592.391714][T15872] syscall_exit_to_user_mode+0x150/0x2a0 [ 592.391730][T15872] __do_fast_syscall_32+0x80/0x120 [ 592.391746][T15872] do_fast_syscall_32+0x32/0x80 [ 592.391762][T15872] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 592.391779][T15872] RIP: 0023:0xf7fa3579 [ 592.391788][T15872] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 592.391799][T15872] RSP: 002b:00000000f4ef355c EFLAGS: 00000296 ORIG_RAX: 000000000000013f [ 592.391809][T15872] RAX: fffffffffffffffc RBX: 000000000000000d RCX: 00000000800002c0 [ 592.391816][T15872] RDX: 0000000000000001 RSI: 0000000080800000 RDI: 0000000000000000 [ 592.391823][T15872] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 592.391829][T15872] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 592.391835][T15872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 592.391847][T15872] [ 592.533133][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.536745][ T78] bond_slave_0: left promiscuous mode [ 592.540427][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.547141][ T78] bond_slave_1: left promiscuous mode [ 592.550146][ T78] bond0 (unregistering): Released all slaves [ 592.591099][T15877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.602876][ T5303] Bluetooth: hci1: command tx timeout [ 592.605799][T15877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.644797][ T78] IPVS: stopping master sync thread 13861 ... [ 592.691333][T15884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2383'. [ 592.870940][ T78] batadv_slave_1: left promiscuous mode [ 592.876498][ T78] hsr_slave_0: left promiscuous mode [ 592.878138][ T78] hsr_slave_1: left promiscuous mode [ 592.879747][ T78] batman_adv: batadv0: Interface deactivated: dummy0 [ 592.881440][ T78] batman_adv: batadv0: Removing interface: dummy0 [ 592.897168][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.899013][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.901333][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.905660][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.912840][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 592.933537][ T78] veth1_macvtap: left promiscuous mode [ 592.936780][ T78] veth0_macvtap: left promiscuous mode [ 593.962802][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 594.207167][ T1137] smc: removing ib device sz1 [ 594.213657][ T5297] »»»»»»7 speed is unknown, defaulting to 1000 [ 594.222393][T15906] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2389'. [ 594.294900][T15837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 594.305637][T15915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2392'. [ 594.315262][T15837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 594.325456][T15837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 594.349751][T15837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 594.572552][T15837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.628488][T15837] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.646183][T15837] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 594.650000][T15837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 594.672835][ T5303] Bluetooth: hci1: command tx timeout [ 594.709132][T12043] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.711155][T12043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.741451][T12043] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.743515][T12043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.992832][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 595.019446][T15837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.038051][T15837] veth0_vlan: entered promiscuous mode [ 595.041951][T15837] veth1_vlan: entered promiscuous mode [ 595.055949][T15837] veth0_macvtap: entered promiscuous mode [ 595.058991][T15837] veth1_macvtap: entered promiscuous mode [ 595.067034][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.069831][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.073386][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.076767][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.080686][T15837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.088271][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.091068][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.093945][T15837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.096759][T15837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.100111][T15837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.107046][T15837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.110235][T15837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.117644][T15837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.120730][T15837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.149224][T12044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.151383][T12044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.164132][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.167447][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.223298][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2372'. [ 595.224988][ T78] IPVS: stop unused estimator thread 0... [ 595.683353][T15944] netlink: 209672 bytes leftover after parsing attributes in process `syz.2.2399'. [ 595.706936][T13885] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 595.710704][T13885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 595.724540][T13885] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 595.766282][T13885] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 595.771865][T13885] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 595.774265][T13885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 595.946839][ T5946] bond0: (slave syz_tun): Releasing backup interface [ 595.966142][T15948] lo speed is unknown, defaulting to 1000 [ 595.996926][T15954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2402'. [ 596.032864][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 596.046429][T15948] chnl_net:caif_netlink_parms(): no params data found [ 596.087277][T15948] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.089537][T15948] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.091922][T15948] bridge_slave_0: entered allmulticast mode [ 596.097983][T15948] bridge_slave_0: entered promiscuous mode [ 596.101042][T15948] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.103591][T15948] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.105758][T15948] bridge_slave_1: entered allmulticast mode [ 596.107878][T15948] bridge_slave_1: entered promiscuous mode [ 596.140260][T15948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.144803][T15948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.180688][T15948] team0: Port device team_slave_0 added [ 596.187398][T15948] team0: Port device team_slave_1 added [ 596.207182][T15948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.209133][T15948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.217198][T15948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.220822][T15948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.223019][T15948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.229918][T15948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.269221][T15948] hsr_slave_0: entered promiscuous mode [ 596.271122][T15948] hsr_slave_1: entered promiscuous mode [ 596.273779][T15948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 596.275900][T15948] Cannot create hsr debugfs directory [ 596.377581][T15948] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.451741][T15948] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.543755][T15948] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.624045][T15948] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.704226][T15948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 596.708393][T15948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 596.711611][T15948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 596.716939][T15948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 596.752893][ T5303] Bluetooth: hci1: command tx timeout [ 596.761717][T15948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.769086][T15948] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.781061][T12044] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.783065][T12044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.789647][T12044] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.791708][T12044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.891678][T15948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.907802][T15948] veth0_vlan: entered promiscuous mode [ 596.911889][T15948] veth1_vlan: entered promiscuous mode [ 596.940248][T15948] veth0_macvtap: entered promiscuous mode [ 596.944168][T15948] veth1_macvtap: entered promiscuous mode [ 596.950758][T15948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.954646][T15948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.957893][T15948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.961496][T15948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.964526][T15948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 596.967362][T15948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.970743][T15948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.975729][T15948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.978601][T15948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.981237][T15948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.984576][T15948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.987230][T15948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.990070][T15948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.993452][T15948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.998754][T15948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.001254][T15948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.004739][T15948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.007986][T15948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.062073][T12043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.072201][T12043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.072807][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 597.085829][T12044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.090054][T12044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.252464][T15988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2410'. [ 597.299401][T15992] pim6reg1: entered promiscuous mode [ 597.301145][T15992] pim6reg1: entered allmulticast mode [ 597.872937][ T5303] Bluetooth: hci0: command tx timeout [ 598.113454][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 598.812602][T16027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2420'. [ 598.832893][ T5303] Bluetooth: hci1: command tx timeout [ 598.931848][T16025] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.162806][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 599.336509][T16043] program syz.0.2425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.599104][T16056] loop6: detected capacity change from 0 to 524287999 [ 599.701103][T16059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2429'. [ 599.923130][T16063] netlink: 'syz.2.2430': attribute type 1 has an invalid length. [ 599.925603][T16063] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2430'. [ 599.947402][T16063] FAULT_INJECTION: forcing a failure. [ 599.947402][T16063] name failslab, interval 1, probability 0, space 0, times 0 [ 599.951714][T16063] CPU: 1 UID: 0 PID: 16063 Comm: syz.2.2430 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 599.951748][T16063] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 599.951759][T16063] Call Trace: [ 599.951765][T16063] [ 599.951772][T16063] dump_stack_lvl+0x16c/0x1f0 [ 599.951800][T16063] should_fail_ex+0x50a/0x650 [ 599.951817][T16063] ? fs_reclaim_acquire+0xae/0x150 [ 599.951841][T16063] should_failslab+0xc2/0x120 [ 599.951857][T16063] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 599.951883][T16063] ? __alloc_skb+0x2b1/0x380 [ 599.951909][T16063] __alloc_skb+0x2b1/0x380 [ 599.951933][T16063] ? __pfx___alloc_skb+0x10/0x10 [ 599.951954][T16063] ? kasan_quarantine_put+0x10a/0x240 [ 599.951977][T16063] ? local_clock_noinstr+0xe0/0xe0 [ 599.952006][T16063] inet_netconf_notify_devconf+0x8b/0x1f0 [ 599.952032][T16063] inetdev_event+0xed7/0x18a0 [ 599.952057][T16063] ? ib_netdevice_event+0xfd/0x330 [ 599.952083][T16063] ? __pfx_inetdev_event+0x10/0x10 [ 599.952104][T16063] ? cfg802154_netdev_notifier_call+0x391/0xa00 [ 599.952125][T16063] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 599.952155][T16063] notifier_call_chain+0xb7/0x410 [ 599.952174][T16063] ? __pfx_inetdev_event+0x10/0x10 [ 599.952202][T16063] call_netdevice_notifiers_info+0xbe/0x140 [ 599.952221][T16063] unregister_netdevice_many_notify+0xc8a/0x1f30 [ 599.952248][T16063] ? preempt_schedule_common+0x44/0xc0 [ 599.952273][T16063] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 599.952291][T16063] ? preempt_schedule_thunk+0x1a/0x30 [ 599.952321][T16063] ? trace_contention_end+0xee/0x140 [ 599.952343][T16063] ? ieee802154_remove_interfaces+0x2d/0x250 [ 599.952372][T16063] ? __pfx___mutex_lock+0x10/0x10 [ 599.952400][T16063] unregister_netdevice_queue+0x307/0x3f0 [ 599.952420][T16063] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 599.952448][T16063] ieee802154_remove_interfaces+0x179/0x250 [ 599.952480][T16063] ieee802154_unregister_hw+0x55/0x100 [ 599.952501][T16063] hwsim_del+0x33d/0x5f0 [ 599.952535][T16063] hwsim_del_radio_nl+0x161/0x200 [ 599.952556][T16063] genl_family_rcv_msg_doit+0x202/0x2f0 [ 599.952578][T16063] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 599.952605][T16063] ? trace_cap_capable+0x1a2/0x210 [ 599.952633][T16063] ? bpf_lsm_capable+0x9/0x10 [ 599.952650][T16063] ? security_capable+0x7e/0x260 [ 599.952668][T16063] ? ns_capable+0xd7/0x110 [ 599.952693][T16063] genl_rcv_msg+0x565/0x800 [ 599.952713][T16063] ? __pfx_genl_rcv_msg+0x10/0x10 [ 599.952731][T16063] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 599.952753][T16063] ? __pfx___lock_acquire+0x10/0x10 [ 599.952783][T16063] netlink_rcv_skb+0x16b/0x440 [ 599.952806][T16063] ? __pfx_genl_rcv_msg+0x10/0x10 [ 599.952826][T16063] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 599.952861][T16063] ? down_read+0xc9/0x330 [ 599.952883][T16063] ? __pfx_down_read+0x10/0x10 [ 599.952905][T16063] ? netlink_deliver_tap+0x1ae/0xd30 [ 599.952933][T16063] genl_rcv+0x28/0x40 [ 599.952954][T16063] netlink_unicast+0x53c/0x7f0 [ 599.952981][T16063] ? __pfx_netlink_unicast+0x10/0x10 [ 599.953005][T16063] ? __phys_addr_symbol+0x30/0x80 [ 599.953023][T16063] ? __check_object_size+0x488/0x710 [ 599.953045][T16063] netlink_sendmsg+0x8b8/0xd70 [ 599.953074][T16063] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.953108][T16063] ____sys_sendmsg+0xaaf/0xc90 [ 599.953129][T16063] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.953150][T13885] Bluetooth: hci0: command tx timeout [ 599.953147][T16063] ? get_compat_msghdr+0x11b/0x170 [ 599.953181][T16063] ___sys_sendmsg+0x135/0x1e0 [ 599.953206][T16063] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.953242][T16063] ? __pfx_lock_release+0x10/0x10 [ 599.953284][T16063] ? trace_lock_acquire+0x14e/0x1f0 [ 599.953315][T16063] ? __fget_files+0x206/0x3a0 [ 599.953348][T16063] __sys_sendmsg+0x16e/0x220 [ 599.953372][T16063] ? __pfx___sys_sendmsg+0x10/0x10 [ 599.953417][T16063] __do_fast_syscall_32+0x73/0x120 [ 599.953444][T16063] do_fast_syscall_32+0x32/0x80 [ 599.953468][T16063] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 599.953495][T16063] RIP: 0023:0xf7f43579 [ 599.953509][T16063] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 599.953523][T16063] RSP: 002b:00000000f502455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 599.953539][T16063] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000080000040 [ 599.953549][T16063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 599.953558][T16063] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.953568][T16063] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 599.953577][T16063] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 599.953600][T16063] [ 600.192855][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 601.242890][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 601.963034][T13885] Bluetooth: hci1: command tx timeout [ 602.112838][ T5303] Bluetooth: hci0: command tx timeout [ 602.272799][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 602.680132][T16105] ISOFS: Unable to identify CD-ROM format. [ 603.312765][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 604.192864][ T5303] Bluetooth: hci0: command tx timeout [ 604.362772][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 604.529449][T16128] Bluetooth: MGMT ver 1.23 [ 604.586511][ T40] audit: type=1326 audit(1742357741.911:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.1.2449" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 604.598534][ T40] audit: type=1326 audit(1742357741.911:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.1.2449" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 604.610776][ T40] audit: type=1326 audit(1742357741.911:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.1.2449" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 604.622160][ T40] audit: type=1326 audit(1742357741.911:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.1.2449" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 604.944691][T16144] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 604.946657][T16144] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 604.954865][T16144] vhci_hcd vhci_hcd.0: Device attached [ 604.996284][T16144] netlink: 'syz.3.2451': attribute type 10 has an invalid length. [ 605.011182][T16144] team0: Device ipvlan1 failed to register rx_handler [ 605.135124][T16145] vhci_hcd: connection closed [ 605.135338][ T99] vhci_hcd: stop threads [ 605.138047][ T99] vhci_hcd: release socket [ 605.141114][ T99] vhci_hcd: disconnect device [ 605.192789][ T6388] usb 43-1: new low-speed USB device number 21 using vhci_hcd [ 605.194975][ T6388] usb 43-1: enqueue for inactive port 0 [ 605.262814][ T6388] vhci_hcd: vhci_device speed not set [ 605.392816][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 606.432922][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 606.500871][ T5956] libceph: connect (1)[c::]:6789 error -101 [ 606.502693][ T5956] libceph: mon0 (1)[c::]:6789 connect error [ 606.548134][T16165] ceph: No mds server is up or the cluster is laggy [ 607.194329][T16183] syz.2.2461: attempt to access beyond end of device [ 607.194329][T16183] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 607.198638][T16183] syz.2.2461: attempt to access beyond end of device [ 607.198638][T16183] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 607.482770][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 607.964952][T16199] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 608.461001][T13885] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 608.472834][T13885] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 608.475642][T13885] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 608.478775][T13885] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 608.481015][T13885] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 608.483730][T13885] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 608.522854][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 608.601334][T16205] lo speed is unknown, defaulting to 1000 [ 608.674630][T16205] chnl_net:caif_netlink_parms(): no params data found [ 608.722376][T16205] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.727875][T16205] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.729955][T16205] bridge_slave_0: entered allmulticast mode [ 608.732508][T16205] bridge_slave_0: entered promiscuous mode [ 608.736986][T16205] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.739546][T16205] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.741735][T16205] bridge_slave_1: entered allmulticast mode [ 608.744896][T16205] bridge_slave_1: entered promiscuous mode [ 608.765075][T16205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.768897][T16205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.791011][T16205] team0: Port device team_slave_0 added [ 608.795196][T16205] team0: Port device team_slave_1 added [ 608.813493][T16205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.815515][T16205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.822522][T16205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.827317][T16205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.829246][T16205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.837033][T16205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.872456][T16205] hsr_slave_0: entered promiscuous mode [ 608.874540][T16205] hsr_slave_1: entered promiscuous mode [ 608.876676][T16205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 608.878756][T16205] Cannot create hsr debugfs directory [ 608.956820][T16205] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.032850][T16205] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.111252][T16205] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.165060][T16205] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.293581][T16205] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 609.325155][T16205] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 609.329433][T16205] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 609.332613][T16205] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 609.346500][T16205] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.348567][T16205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.350681][T16205] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.352747][T16205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.386717][T13885] Bluetooth: hci5: ACL packet for unknown connection handle 4 [ 609.400811][T16205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.422761][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.426979][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.495064][T16205] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.552842][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 609.556169][T12043] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.558148][T12043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.565783][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.567906][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.613160][T16224] input: syz0 as /devices/virtual/input/input20 [ 609.677082][T16227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2472'. [ 609.685256][T16227] bond1: entered promiscuous mode [ 609.687238][T16227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 609.984295][T16227] bond1 (unregistering): Released all slaves [ 610.290589][T16205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.475850][T16205] veth0_vlan: entered promiscuous mode [ 610.524068][T13885] Bluetooth: hci2: command tx timeout [ 610.527816][T16205] veth1_vlan: entered promiscuous mode [ 610.585716][T16205] veth0_macvtap: entered promiscuous mode [ 610.592820][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 610.603875][T16205] veth1_macvtap: entered promiscuous mode [ 610.619105][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.622992][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.626304][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.629758][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.638079][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.641607][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.645355][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.648891][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.654144][T16205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.664494][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.668102][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.671365][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.678838][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.682151][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.689729][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.697523][T16205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.700979][T16205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.705529][T16205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.712150][T16205] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.717982][T16205] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.721018][T16205] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.724387][T16205] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.809078][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.811276][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.828186][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.830394][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.037380][ T40] audit: type=1326 audit(1742358260.368:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16249 comm="syz.2.2475" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x0 [ 611.632852][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 612.492823][ T57] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 612.593815][T13885] Bluetooth: hci2: command tx timeout [ 612.642807][ T57] usb 5-1: Using ep0 maxpacket: 16 [ 612.654373][ T57] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 612.657753][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 612.672872][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 612.953288][ T57] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 612.956843][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.959341][ T57] usb 5-1: Product: syz [ 612.960531][ T57] usb 5-1: Manufacturer: syz [ 612.961866][ T57] usb 5-1: SerialNumber: syz [ 612.974184][ T57] usb 5-1: config 0 descriptor?? [ 613.212996][T16286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.235354][ T57] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 613.239891][ T57] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 613.249722][ T6008] usb 5-1: USB disconnect, device number 14 [ 613.275728][T16292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.296375][T16296] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.2487'. [ 613.299110][T16296] netlink: zone id is out of range [ 613.300694][T16296] netlink: zone id is out of range [ 613.320361][ T40] audit: type=1804 audit(1742358262.648:2255): pid=16296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2487" name="/newroot/3/file0/cpu.stat" dev="9p" ino=36832001 res=1 errno=0 [ 613.712768][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 614.682850][T13885] Bluetooth: hci2: command tx timeout [ 614.757537][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 615.792776][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 616.753011][T13885] Bluetooth: hci2: command tx timeout [ 616.832799][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 617.202248][T16359] dlm: no local IP address has been set [ 617.204795][T16359] dlm: cannot start dlm midcomms -107 [ 617.872603][T16362] syzkaller1: entered promiscuous mode [ 617.874339][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 617.878838][T16362] syzkaller1: entered allmulticast mode [ 617.971545][T16367] FAULT_INJECTION: forcing a failure. [ 617.971545][T16367] name failslab, interval 1, probability 0, space 0, times 0 [ 617.975684][T16367] CPU: 1 UID: 0 PID: 16367 Comm: syz.2.2506 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 617.975708][T16367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 617.975716][T16367] Call Trace: [ 617.975719][T16367] [ 617.975724][T16367] dump_stack_lvl+0x16c/0x1f0 [ 617.975744][T16367] should_fail_ex+0x50a/0x650 [ 617.975757][T16367] should_failslab+0xc2/0x120 [ 617.975769][T16367] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 617.975786][T16367] ? skb_clone+0x190/0x3f0 [ 617.975798][T16367] skb_clone+0x190/0x3f0 [ 617.975808][T16367] netlink_deliver_tap+0xabd/0xd30 [ 617.975827][T16367] netlink_unicast+0x6b4/0x7f0 [ 617.975844][T16367] ? __pfx_netlink_unicast+0x10/0x10 [ 617.975863][T16367] netlink_ack+0x6ac/0xb80 [ 617.975882][T16367] netlink_rcv_skb+0x348/0x440 [ 617.975897][T16367] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 617.975916][T16367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 617.975931][T16367] ? __pfx_aa_get_newest_label+0x10/0x10 [ 617.975948][T16367] ? bpf_lsm_capable+0x9/0x10 [ 617.975960][T16367] ? security_capable+0x7e/0x260 [ 617.975984][T16367] ? ns_capable+0xd7/0x110 [ 617.976001][T16367] nfnetlink_rcv+0x1b4/0x430 [ 617.976018][T16367] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 617.976034][T16367] ? rcu_is_watching+0x12/0xc0 [ 617.976048][T16367] netlink_unicast+0x53c/0x7f0 [ 617.976065][T16367] ? __pfx_netlink_unicast+0x10/0x10 [ 617.976081][T16367] ? __phys_addr_symbol+0x30/0x80 [ 617.976092][T16367] ? __check_object_size+0x488/0x710 [ 617.976109][T16367] netlink_sendmsg+0x8b8/0xd70 [ 617.976127][T16367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.976147][T16367] ____sys_sendmsg+0xaaf/0xc90 [ 617.976161][T16367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 617.976173][T16367] ? get_compat_msghdr+0x11b/0x170 [ 617.976193][T16367] ___sys_sendmsg+0x135/0x1e0 [ 617.976210][T16367] ? __pfx____sys_sendmsg+0x10/0x10 [ 617.976232][T16367] ? __pfx_lock_release+0x10/0x10 [ 617.976247][T16367] ? trace_lock_acquire+0x14e/0x1f0 [ 617.976264][T16367] ? __fget_files+0x206/0x3a0 [ 617.976283][T16367] __sys_sendmsg+0x16e/0x220 [ 617.976299][T16367] ? __pfx___sys_sendmsg+0x10/0x10 [ 617.976324][T16367] __do_fast_syscall_32+0x73/0x120 [ 617.976340][T16367] do_fast_syscall_32+0x32/0x80 [ 617.976355][T16367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 617.976373][T16367] RIP: 0023:0xf7f43579 [ 617.976382][T16367] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 617.976393][T16367] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 617.976404][T16367] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 617.976410][T16367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 617.976417][T16367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 617.976423][T16367] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 617.976429][T16367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 617.976442][T16367] [ 618.912855][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 619.950284][ T40] audit: type=1326 audit(1742358781.262:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.3.2514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 619.956252][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 619.960490][ T40] audit: type=1326 audit(1742358781.262:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.3.2514" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 619.967435][ T40] audit: type=1326 audit(1742358781.262:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.3.2514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 619.975497][ T40] audit: type=1326 audit(1742358781.262:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.3.2514" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 619.981102][ T40] audit: type=1326 audit(1742358781.262:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.3.2514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 619.987289][ T40] audit: type=1326 audit(1742358781.262:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.3.2514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 619.995199][ T40] audit: type=1326 audit(1742358781.262:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.3.2514" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 620.001446][ T40] audit: type=1326 audit(1742358781.262:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.3.2514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 620.008056][ T40] audit: type=1326 audit(1742358781.262:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.3.2514" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 620.016060][ T40] audit: type=1326 audit(1742358781.262:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16393 comm="syz.3.2514" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 620.992781][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 622.032790][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 622.417441][T16431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2522'. [ 622.927083][T16440] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 622.928971][T16440] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 622.931675][T16440] vhci_hcd vhci_hcd.0: Device attached [ 623.083153][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 623.192838][ T6008] usb 39-1: new low-speed USB device number 28 using vhci_hcd [ 623.804176][T16441] vhci_hcd: connection reset by peer [ 623.811140][ T78] vhci_hcd: stop threads [ 623.812423][ T78] vhci_hcd: release socket [ 623.830724][ T78] vhci_hcd: disconnect device [ 624.122772][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 624.275624][T16464] vxfs: WRONG superblock magic 00000000 at 1 [ 624.280166][T16464] vxfs: WRONG superblock magic 00000000 at 8 [ 624.282349][T16464] vxfs: can't find superblock. [ 625.152775][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 625.411013][T16475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2535'. [ 626.192772][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 627.232818][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 627.320274][T16503] netlink: 'syz.0.2540': attribute type 2 has an invalid length. [ 627.322486][T16503] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2540'. [ 628.272799][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 628.342866][ T6008] vhci_hcd: vhci_device speed not set [ 629.131565][T16524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2544'. [ 629.312773][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 629.620386][T16533] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 629.622764][T16533] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 629.638485][T16533] vhci_hcd vhci_hcd.0: Device attached [ 629.882914][ T57] usb 37-1: new low-speed USB device number 20 using vhci_hcd [ 629.998041][T16543] ISOFS: Unable to identify CD-ROM format. [ 630.362806][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 630.449132][T16535] vhci_hcd: connection reset by peer [ 630.450920][ T12] vhci_hcd: stop threads [ 630.452177][ T12] vhci_hcd: release socket [ 630.453580][ T12] vhci_hcd: disconnect device [ 630.594944][T13885] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 630.598270][T13885] Bluetooth: hci5: Injecting HCI hardware error event [ 630.601830][T13885] Bluetooth: hci5: hardware error 0x00 [ 631.113003][T16556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2553'. [ 631.402799][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 632.432776][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 632.672859][T13885] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 632.830546][T16581] xt_CT: No such helper "pptp" [ 632.899305][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 632.899394][ T40] audit: type=1326 audit(1742359818.229:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.2.2560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 632.905515][T16583] FAULT_INJECTION: forcing a failure. [ 632.905515][T16583] name failslab, interval 1, probability 0, space 0, times 0 [ 632.910588][T16583] CPU: 1 UID: 0 PID: 16583 Comm: syz.2.2560 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 632.910611][T16583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 632.910618][T16583] Call Trace: [ 632.910622][T16583] [ 632.910626][T16583] dump_stack_lvl+0x16c/0x1f0 [ 632.910646][T16583] should_fail_ex+0x50a/0x650 [ 632.910657][T16583] ? fs_reclaim_acquire+0xae/0x150 [ 632.910673][T16583] should_failslab+0xc2/0x120 [ 632.910684][T16583] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 632.910701][T16583] ? audit_log_start+0x2bc/0x7e0 [ 632.910717][T16583] audit_log_start+0x2bc/0x7e0 [ 632.910732][T16583] ? __pfx_audit_log_start+0x10/0x10 [ 632.910745][T16583] ? finish_task_switch.isra.0+0x217/0xcc0 [ 632.910761][T16583] ? lockdep_hardirqs_on+0x7c/0x110 [ 632.910775][T16583] ? finish_task_switch.isra.0+0x217/0xcc0 [ 632.910790][T16583] ? __switch_to+0x749/0x1190 [ 632.910803][T16583] ? migrate_enable+0x1ef/0x260 [ 632.910817][T16583] ? __pfx_migrate_enable+0x10/0x10 [ 632.910832][T16583] audit_seccomp+0x61/0x280 [ 632.910846][T16583] __seccomp_filter+0x816/0xf40 [ 632.910860][T16583] ? __pfx___schedule+0x10/0x10 [ 632.910872][T16583] ? __pfx___seccomp_filter+0x10/0x10 [ 632.910887][T16583] ? fput+0x67/0x440 [ 632.910897][T16583] ? ksys_write+0x1ba/0x250 [ 632.910913][T16583] __secure_computing+0x26c/0x3f0 [ 632.910927][T16583] syscall_trace_enter+0x8b/0x260 [ 632.910944][T16583] __do_fast_syscall_32+0xc2/0x120 [ 632.910960][T16583] do_fast_syscall_32+0x32/0x80 [ 632.910975][T16583] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 632.910993][T16583] RIP: 0023:0xf7f43579 [ 632.911001][T16583] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 632.911011][T16583] RSP: 002b:00000000f5024590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 632.911022][T16583] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f5024620 [ 632.911029][T16583] RDX: 000000000000000f RSI: 00000000f73ccff4 RDI: 0000000000000000 [ 632.911035][T16583] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 632.911041][T16583] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 632.911051][T16583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 632.911063][T16583] [ 632.911085][T16583] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 632.913259][ T40] audit: type=1326 audit(1742359818.229:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.2.2560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 632.914049][T16583] audit: out of memory in audit_log_start [ 632.932834][ T40] audit: type=1326 audit(1742359818.229:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.2.2560" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 633.002796][ T40] audit: type=1326 audit(1742359818.229:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.2.2560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 633.008754][ T40] audit: type=1326 audit(1742359818.229:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.2.2560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 633.017165][ T40] audit: type=1326 audit(1742359818.229:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.2.2560" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 633.024064][ T40] audit: type=1326 audit(1742359818.229:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.2.2560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 633.029665][ T40] audit: type=1326 audit(1742359818.229:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16576 comm="syz.2.2560" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 633.154535][T16591] overlayfs: missing 'lowerdir' [ 633.166073][T16591] overlayfs: missing 'lowerdir' [ 633.167741][T16591] overlayfs: missing 'lowerdir' [ 633.169381][T16591] overlayfs: missing 'lowerdir' [ 633.171034][T16591] overlayfs: missing 'lowerdir' [ 633.177747][T16591] overlayfs: missing 'lowerdir' [ 633.179344][T16591] overlayfs: missing 'lowerdir' [ 633.181120][T16591] overlayfs: missing 'lowerdir' [ 633.183188][T16591] overlayfs: missing 'lowerdir' [ 633.185138][T16591] overlayfs: missing 'lowerdir' [ 633.186883][T16591] overlayfs: missing 'lowerdir' [ 633.472770][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 634.288832][T16617] Cannot find add_set index 3 as target [ 634.512844][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 634.593345][T16621] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 634.989886][ T57] vhci_hcd: vhci_device speed not set [ 634.996355][T16638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2576'. [ 635.552774][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 635.816214][T16656] cgroup2: Unknown parameter 'pids_localevents' [ 636.456338][T16665] 9pnet_fd: Insufficient options for proto=fd [ 636.592800][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 636.924421][T16678] FAULT_INJECTION: forcing a failure. [ 636.924421][T16678] name failslab, interval 1, probability 0, space 0, times 0 [ 636.928764][T16678] CPU: 3 UID: 0 PID: 16678 Comm: syz.3.2587 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 636.928784][T16678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 636.928794][T16678] Call Trace: [ 636.928799][T16678] [ 636.928805][T16678] dump_stack_lvl+0x16c/0x1f0 [ 636.928829][T16678] should_fail_ex+0x50a/0x650 [ 636.928845][T16678] ? fs_reclaim_acquire+0xae/0x150 [ 636.928867][T16678] should_failslab+0xc2/0x120 [ 636.928882][T16678] __kmalloc_node_noprof+0xd1/0x510 [ 636.928906][T16678] ? __pfx___debug_object_init+0x10/0x10 [ 636.928922][T16678] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 636.928948][T16678] ? lockdep_init_map_type+0x16d/0x7d0 [ 636.928973][T16678] __kvmalloc_node_noprof+0xad/0x1a0 [ 636.928995][T16678] bucket_table_alloc.isra.0+0x86/0x460 [ 636.929021][T16678] rhashtable_init_noprof+0x41a/0x7e0 [ 636.929045][T16678] br_mdb_hash_init+0x26/0x80 [ 636.929066][T16678] br_dev_init+0x5f/0x400 [ 636.929086][T16678] ? kasan_save_track+0x14/0x30 [ 636.929108][T16678] ? __pfx_br_dev_init+0x10/0x10 [ 636.929126][T16678] register_netdevice+0x672/0x1eb0 [ 636.929145][T16678] ? __pfx_validate_linkmsg+0x10/0x10 [ 636.929168][T16678] ? __pfx_register_netdevice+0x10/0x10 [ 636.929188][T16678] ? __pfx_br_dev_newlink+0x10/0x10 [ 636.929207][T16678] br_dev_newlink+0x27/0x110 [ 636.929228][T16678] ? __pfx_br_dev_newlink+0x10/0x10 [ 636.929250][T16678] rtnl_newlink+0xb95/0x1d60 [ 636.929278][T16678] ? __pfx_rtnl_newlink+0x10/0x10 [ 636.929301][T16678] ? __pfx___lock_acquire+0x10/0x10 [ 636.929321][T16678] ? kfree_skbmem+0x1a4/0x1f0 [ 636.929342][T16678] ? aa_get_newest_label+0x376/0x680 [ 636.929363][T16678] ? find_held_lock+0x2d/0x110 [ 636.929383][T16678] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 636.929404][T16678] ? __pfx_lock_release+0x10/0x10 [ 636.929422][T16678] ? trace_lock_acquire+0x14e/0x1f0 [ 636.929445][T16678] ? __pfx_rtnl_newlink+0x10/0x10 [ 636.929469][T16678] rtnetlink_rcv_msg+0x95b/0xea0 [ 636.929495][T16678] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 636.929526][T16678] netlink_rcv_skb+0x16b/0x440 [ 636.929550][T16678] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 636.929575][T16678] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 636.929610][T16678] ? netlink_deliver_tap+0x1ae/0xd30 [ 636.929632][T16678] netlink_unicast+0x53c/0x7f0 [ 636.929657][T16678] ? __pfx_netlink_unicast+0x10/0x10 [ 636.929680][T16678] ? __phys_addr_symbol+0x30/0x80 [ 636.929695][T16678] ? __check_object_size+0x488/0x710 [ 636.929714][T16678] netlink_sendmsg+0x8b8/0xd70 [ 636.929736][T16678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.929767][T16678] ____sys_sendmsg+0xaaf/0xc90 [ 636.929788][T16678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.929805][T16678] ? get_compat_msghdr+0x11b/0x170 [ 636.929834][T16678] ___sys_sendmsg+0x135/0x1e0 [ 636.929856][T16678] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.929889][T16678] ? __pfx_lock_release+0x10/0x10 [ 636.929909][T16678] ? trace_lock_acquire+0x14e/0x1f0 [ 636.929937][T16678] ? __fget_files+0x206/0x3a0 [ 636.929963][T16678] __sys_sendmsg+0x16e/0x220 [ 636.929987][T16678] ? __pfx___sys_sendmsg+0x10/0x10 [ 636.930025][T16678] __do_fast_syscall_32+0x73/0x120 [ 636.930050][T16678] do_fast_syscall_32+0x32/0x80 [ 636.930067][T16678] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 636.930092][T16678] RIP: 0023:0xf73de579 [ 636.930105][T16678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 636.930120][T16678] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 636.930135][T16678] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 636.930146][T16678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 636.930155][T16678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 636.930163][T16678] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 636.930169][T16678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 636.930189][T16678] [ 636.935269][T16679] Cannot find add_set index 3 as target [ 637.057744][T16682] erofs (device loop1): cannot find valid erofs superblock [ 637.505582][T16692] FAULT_INJECTION: forcing a failure. [ 637.505582][T16692] name failslab, interval 1, probability 0, space 0, times 0 [ 637.510385][T16692] CPU: 3 UID: 0 PID: 16692 Comm: syz.2.2590 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 637.510399][T16692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 637.510406][T16692] Call Trace: [ 637.510410][T16692] [ 637.510415][T16692] dump_stack_lvl+0x16c/0x1f0 [ 637.510433][T16692] should_fail_ex+0x50a/0x650 [ 637.510445][T16692] ? fs_reclaim_acquire+0xae/0x150 [ 637.510460][T16692] should_failslab+0xc2/0x120 [ 637.510471][T16692] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 637.510488][T16692] ? can_rx_register+0x585/0x700 [ 637.510502][T16692] can_rx_register+0x585/0x700 [ 637.510512][T16692] ? __pfx_raw_rcv+0x10/0x10 [ 637.510526][T16692] ? __pfx_can_rx_register+0x10/0x10 [ 637.510539][T16692] ? raw_setsockopt+0x994/0x15d0 [ 637.510552][T16692] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 637.510565][T16692] raw_enable_filters+0xde/0x210 [ 637.510580][T16692] raw_setsockopt+0x1014/0x15d0 [ 637.510594][T16692] ? aa_sk_perm+0x2f5/0xb20 [ 637.510607][T16692] ? __pfx_raw_setsockopt+0x10/0x10 [ 637.510626][T16692] ? __pfx_raw_setsockopt+0x10/0x10 [ 637.510639][T16692] do_sock_setsockopt+0x222/0x480 [ 637.510652][T16692] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 637.510664][T16692] ? lock_acquire+0x2f/0xb0 [ 637.510685][T16692] __sys_setsockopt+0x1a0/0x230 [ 637.510703][T16692] __ia32_sys_setsockopt+0xbc/0x160 [ 637.510719][T16692] ? lockdep_hardirqs_on+0x7c/0x110 [ 637.510733][T16692] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 637.510749][T16692] __do_fast_syscall_32+0x73/0x120 [ 637.510765][T16692] do_fast_syscall_32+0x32/0x80 [ 637.510780][T16692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 637.510798][T16692] RIP: 0023:0xf7f43579 [ 637.510807][T16692] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 637.510819][T16692] RSP: 002b:00000000f506655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 637.510830][T16692] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000065 [ 637.510837][T16692] RDX: 0000000000000001 RSI: 00000000800000c0 RDI: 0000000000000f00 [ 637.510843][T16692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 637.510849][T16692] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 637.510855][T16692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 637.510868][T16692] [ 637.632776][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 638.523079][T16704] syzkaller1: entered promiscuous mode [ 638.524560][T16704] syzkaller1: entered allmulticast mode [ 638.528429][T16704] netlink: 'syz.1.2594': attribute type 10 has an invalid length. [ 638.579289][T16704] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 638.672802][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 638.997284][T16709] netlink: 'syz.1.2595': attribute type 41 has an invalid length. [ 639.016041][T16709] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.018211][T16709] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.076833][T16709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.082508][T16709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.177415][T16709] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.180718][T16709] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.281704][T16709] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.289243][T16709] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.420486][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 639.420501][ T40] audit: type=1326 audit(1742359824.749:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16723 comm="syz.1.2600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 639.431182][ T40] audit: type=1326 audit(1742359824.749:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16723 comm="syz.1.2600" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 639.440232][ T40] audit: type=1326 audit(1742359824.749:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16723 comm="syz.1.2600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 639.449681][ T40] audit: type=1326 audit(1742359824.749:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16723 comm="syz.1.2600" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 639.458254][ T40] audit: type=1326 audit(1742359824.749:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16723 comm="syz.1.2600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 639.465306][ T40] audit: type=1326 audit(1742359824.749:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16723 comm="syz.1.2600" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 639.472407][ T40] audit: type=1326 audit(1742359824.749:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16723 comm="syz.1.2600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 639.487051][ T40] audit: type=1326 audit(1742359824.749:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16723 comm="syz.1.2600" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 639.495573][ T40] audit: type=1326 audit(1742359824.749:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16723 comm="syz.1.2600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 639.507280][ T40] audit: type=1326 audit(1742359824.749:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16723 comm="syz.1.2600" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 639.713158][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 640.752812][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 641.384807][T16756] 9pnet_fd: Insufficient options for proto=fd [ 641.706649][T13789] IPVS: starting estimator thread 0... [ 641.802765][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 641.823484][T16762] IPVS: using max 37 ests per chain, 88800 per kthread [ 641.950806][T16770] netlink: 'syz.3.2611': attribute type 1 has an invalid length. [ 642.832885][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 642.948820][T16787] lo speed is unknown, defaulting to 1000 [ 643.233396][ T5956] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 643.817501][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2619'. [ 643.872801][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 644.014269][T16807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2621'. [ 644.912784][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 645.325241][T16823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2625'. [ 645.952778][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 645.963973][T16828] xt_SECMARK: invalid mode: 0 [ 645.997423][T13885] Bluetooth: hci1: ISO packet for unknown connection handle 2905 [ 646.700111][T16846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2631'. [ 647.002812][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 647.711894][T16855] [U] : [ 647.712785][T16855] [U] [ 647.713575][T16855] [U] [ 647.714366][T16855] [U] [ 647.715162][T16855] [U] [ 647.715983][T16855] [U] [ 647.716763][T16855] [U] [ 647.717546][T16855] [U] [ 647.718680][T16855] [U] [ 647.719486][T16855] [U] [ 647.720276][T16855] [U] [ 647.721065][T16855] [U] [ 647.721847][T16855] [U] [ 647.722639][T16855] [U] [ 647.723445][T16855] [U] [ 647.724255][T16855] [U] [ 647.725276][T16855] [U] [ 647.726074][T16855] [U] [ 647.726849][T16855] [U] [ 647.727639][T16855] [U] [ 647.728424][T16855] [U] [ 647.729206][T16855] [U] [ 647.729988][T16855] [U] [ 647.730769][T16855] [U] [ 647.731623][T16855] [U] [ 647.732427][T16855] [U] [ 647.733221][T16855] [U] [ 647.734006][T16855] [U] [ 647.734787][T16855] [U] [ 647.735580][T16855] [U] [ 647.736383][T16855] [U] [ 647.737169][T16855] [U] [ 647.738135][T16855] FAULT_INJECTION: forcing a failure. [ 647.738135][T16855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.741722][T16855] CPU: 0 UID: 0 PID: 16855 Comm: syz.0.2633 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 647.741753][T16855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 647.741760][T16855] Call Trace: [ 647.741763][T16855] [ 647.741768][T16855] dump_stack_lvl+0x16c/0x1f0 [ 647.741786][T16855] should_fail_ex+0x50a/0x650 [ 647.741800][T16855] _copy_from_iter+0x2a1/0x1560 [ 647.741813][T16855] ? trace_lock_acquire+0x14e/0x1f0 [ 647.741827][T16855] ? __pfx__copy_from_iter+0x10/0x10 [ 647.741838][T16855] ? __virt_addr_valid+0x1a4/0x590 [ 647.741852][T16855] ? __virt_addr_valid+0x5e/0x590 [ 647.741862][T16855] ? __phys_addr+0xc6/0x150 [ 647.741872][T16855] ? __phys_addr_symbol+0x30/0x80 [ 647.741883][T16855] ? __check_object_size+0x488/0x710 [ 647.741896][T16855] file_tty_write.constprop.0+0x48d/0x9a0 [ 647.741919][T16855] do_iter_readv_writev+0x655/0x950 [ 647.741933][T16855] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 647.741949][T16855] ? bpf_lsm_file_permission+0x9/0x10 [ 647.741966][T16855] ? security_file_permission+0x71/0x210 [ 647.741982][T16855] ? rw_verify_area+0xcf/0x680 [ 647.741996][T16855] vfs_writev+0x363/0xdd0 [ 647.742009][T16855] ? __schedule+0x3c6a/0x5890 [ 647.742022][T16855] ? lockdep_hardirqs_on+0x7c/0x110 [ 647.742036][T16855] ? __schedule+0x3c6a/0x5890 [ 647.742050][T16855] ? __pfx_vfs_writev+0x10/0x10 [ 647.742063][T16855] ? find_held_lock+0x2d/0x110 [ 647.742077][T16855] ? __pfx_lock_release+0x10/0x10 [ 647.742092][T16855] ? trace_lock_acquire+0x14e/0x1f0 [ 647.742109][T16855] ? __fget_files+0x206/0x3a0 [ 647.742127][T16855] ? do_writev+0x133/0x340 [ 647.742140][T16855] do_writev+0x133/0x340 [ 647.742153][T16855] ? __pfx_do_writev+0x10/0x10 [ 647.742171][T16855] __do_fast_syscall_32+0x73/0x120 [ 647.742186][T16855] do_fast_syscall_32+0x32/0x80 [ 647.742202][T16855] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 647.742219][T16855] RIP: 0023:0xf7fa3579 [ 647.742228][T16855] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 647.742239][T16855] RSP: 002b:00000000f50a555c EFLAGS: 00000296 ORIG_RAX: 0000000000000092 [ 647.742249][T16855] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000b00 [ 647.742255][T16855] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 647.742261][T16855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 647.742267][T16855] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 647.742273][T16855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 647.742286][T16855] [ 648.032996][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 648.365132][T16853] [U] [ 649.072804][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 649.245362][T16877] loop2: detected capacity change from 0 to 7 [ 649.257093][T16877] Dev loop2: unable to read RDB block 7 [ 649.258779][T16877] loop2: unable to read partition table [ 649.261126][T16877] loop2: partition table beyond EOD, truncated [ 649.263028][T16877] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 649.303903][T16877] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2639'. [ 649.421286][T16879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2640'. [ 650.112787][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 651.152793][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 651.727882][T16899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2645'. [ 652.192771][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 652.635791][T13885] Bluetooth: hci0: ACL packet for unknown connection handle 175 [ 653.232780][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 653.440786][T16912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2649'. [ 654.090590][T16944] [U] :”øŠO¬ýLsZ 0|szú-`9”s)kƒ½“=“™K£By± Åƒ?AñWê#™=¾C;££vmT9„ô‘•2dÒp ƒ¢Ç³BR`õ•TåÜê9Ë1; [ 654.114958][T16944] [U] —–ê,ML 9Œ"5˜ [ 654.116091][T16944] [U] “³Õ½;úÿÐ¥Ûí(©p [ 654.117355][T16944] [U] õa¬Œk [ 654.118275][T16944] [U] ù1 ëîrä6?Q¯b¯o²¦ß;쉂*z g€Xú?ï†úì!n¶™!bøÜ¿qœŒÒùÅ_I :šŠ,>ó”=¼6 [ 654.120562][T16944] [U] Ip [ 654.121421][T16944] [U] ûömiöû¯Pl‹Ìè» [ 654.122541][T16944] [U] ‡* [ 654.123408][T16944] [U] [ 654.124235][T16944] [U] [ 654.125035][T16944] [U] [ 654.126277][T16944] [U] [ 654.127093][T16944] [U] [ 654.127888][T16944] [U] [ 654.128675][T16944] [U] [ 654.129462][T16944] [U] [ 654.130261][T16944] [U] [ 654.131062][T16944] [U] [ 654.131855][T16944] [U] [ 654.132648][T16944] [U] [ 654.133845][T16944] [U] [ 654.134634][T16944] [U] [ 654.135422][T16944] [U] |+Áœ­¬±»[“Úw'çñ [ 654.136604][T16944] [U] ™œNqfØÇùÄrÚ%‘y [ 654.137775][T16944] [U] [ 654.138567][T16944] [U] [ 654.139375][T16944] [U] [ 654.140165][T16944] [U] [ 654.140953][T16944] [U] [ 654.141815][T16944] [U] [ 654.142625][T16944] [U] [ 654.143440][T16944] [U] [ 654.144232][T16944] [U] [ 654.145022][T16944] [U] [ 654.145830][T16944] [U] [ 654.146619][T16944] [U] [ 654.147426][T16944] [U] [ 654.148396][T16944] [U] [ 654.149202][T16944] [U] [ 654.149992][T16944] [U] [ 654.150784][T16944] [U] [ 654.151579][T16944] [U] [ 654.152382][T16944] [U] [ 654.153185][T16944] [U] [ 654.153981][T16944] [U] [ 654.156033][T16944] [U] [ 654.156842][T16944] [U] [ 654.157627][T16944] [U] [ 654.158418][T16944] [U] [ 654.159218][T16944] [U] [ 654.160009][T16944] [U] [ 654.160801][T16944] [U] [ 654.161587][T16944] [U] [ 654.162446][T16944] [U] [ 654.163272][T16944] [U] [ 654.164176][T16944] [U] [ 654.164979][T16944] [U] [ 654.165763][T16944] [U] [ 654.166551][T16944] [U] [ 654.167346][T16944] [U] [ 654.168148][T16944] [U] [ 654.169266][T16944] [U] [ 654.170061][T16944] [U] [ 654.170856][T16944] [U] [ 654.171645][T16944] [U] [ 654.172440][T16944] [U] [ 654.173242][T16944] [U] [ 654.174029][T16944] [U] [ 654.174813][T16944] [U] [ 654.175603][T16944] [U] [ 654.176668][T16944] [U] [ 654.177461][T16944] [U] [ 654.178256][T16944] [U] [ 654.179055][T16944] [U] [ 654.179851][T16944] [U] [ 654.180640][T16944] [U] [ 654.181431][T16944] [U] [ 654.182227][T16944] [U] [ 654.182592][T16948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2658'. [ 654.183187][T16944] [U] [ 654.183219][T16944] [U] [ 654.183239][T16944] [U] [ 654.183257][T16944] [U] [ 654.183275][T16944] [U] [ 654.183293][T16944] [U] [ 654.183311][T16944] [U] [ 654.183328][T16944] [U] [ 654.183396][T16944] [U] [ 654.183428][T16944] [U] [ 654.183447][T16944] [U] [ 654.183464][T16944] [U] [ 654.183480][T16944] [U] [ 654.183497][T16944] [U] [ 654.183514][T16944] [U] [ 654.183532][T16944] [U] [ 654.183599][T16944] [U] [ 654.183617][T16944] [U] [ 654.183641][T16944] [U] [ 654.183667][T16944] [U] [ 654.183684][T16944] [U] [ 654.183701][T16944] [U] [ 654.183718][T16944] [U] [ 654.183736][T16944] [U] [ 654.183806][T16944] [U] [ 654.206740][T16944] [U] [ 654.207548][T16944] [U] [ 654.208380][T16944] [U] [ 654.209178][T16944] [U] [ 654.209973][T16944] [U] [ 654.210774][T16944] [U] [ 654.211580][T16944] [U] [ 654.213492][T16944] [U] [ 654.214312][T16944] [U] [ 654.215113][T16944] [U] [ 654.215934][T16944] [U] [ 654.216726][T16944] [U] [ 654.217524][T16944] [U] [ 654.218320][T16944] [U] [ 654.218839][T16950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2659'. [ 654.219122][T16944] [U] [ 654.223253][T16944] [U] [ 654.224062][T16944] [U] [ 654.224857][T16944] [U] [ 654.225655][T16944] [U] [ 654.226450][T16944] [U] [ 654.227255][T16944] [U] [ 654.228051][T16944] [U] [ 654.228846][T16944] [U] [ 654.231118][T16944] [U] [ 654.231929][T16944] [U] [ 654.232737][T16944] [U] [ 654.233531][T16944] [U] [ 654.234325][T16944] [U] [ 654.235135][T16944] [U] [ 654.235976][T16944] [U] [ 654.272769][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 655.008332][T16956] FAULT_INJECTION: forcing a failure. [ 655.008332][T16956] name failslab, interval 1, probability 0, space 0, times 0 [ 655.011787][T16956] CPU: 3 UID: 0 PID: 16956 Comm: syz.2.2661 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 655.011801][T16956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 655.011808][T16956] Call Trace: [ 655.011812][T16956] [ 655.011817][T16956] dump_stack_lvl+0x16c/0x1f0 [ 655.011837][T16956] should_fail_ex+0x50a/0x650 [ 655.011852][T16956] ? fs_reclaim_acquire+0xae/0x150 [ 655.011867][T16956] ? sock_kmalloc+0x111/0x170 [ 655.011878][T16956] should_failslab+0xc2/0x120 [ 655.011889][T16956] __kmalloc_noprof+0xcb/0x510 [ 655.011906][T16956] ? __pfx_af_alg_wait_for_data+0x10/0x10 [ 655.011925][T16956] sock_kmalloc+0x111/0x170 [ 655.011938][T16956] af_alg_alloc_areq+0xbc/0x2e0 [ 655.011955][T16956] skcipher_recvmsg+0x326/0x1020 [ 655.011969][T16956] ? lock_acquire+0x2f/0xb0 [ 655.011986][T16956] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 655.012001][T16956] sock_recvmsg+0x1f6/0x250 [ 655.012014][T16956] __sys_recvfrom+0x204/0x310 [ 655.012030][T16956] ? __pfx___sys_recvfrom+0x10/0x10 [ 655.012051][T16956] ? __might_fault+0x13b/0x190 [ 655.012070][T16956] __do_compat_sys_socketcall+0x384/0x700 [ 655.012085][T16956] ? __fget_files+0x206/0x3a0 [ 655.012101][T16956] ? __pfx___do_compat_sys_socketcall+0x10/0x10 [ 655.012117][T16956] ? fput+0x67/0x440 [ 655.012133][T16956] __do_fast_syscall_32+0x73/0x120 [ 655.012149][T16956] do_fast_syscall_32+0x32/0x80 [ 655.012164][T16956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 655.012183][T16956] RIP: 0023:0xf7f43579 [ 655.012191][T16956] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 655.012202][T16956] RSP: 002b:00000000f5065440 EFLAGS: 00000293 ORIG_RAX: 0000000000000066 [ 655.012213][T16956] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f506545c [ 655.012220][T16956] RDX: 0000000000000000 RSI: 00000000f5065560 RDI: 00000000f73ccff4 [ 655.012226][T16956] RBP: 00000000f5065560 R08: 0000000000000000 R09: 0000000000000000 [ 655.012233][T16956] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 655.012239][T16956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 655.012251][T16956] [ 655.016000][T16939] [U] [ 655.312776][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 655.614136][T16968] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2663'. [ 656.352868][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 656.926046][T16991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2667'. [ 657.392783][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 657.569889][T17011] FAULT_INJECTION: forcing a failure. [ 657.569889][T17011] name failslab, interval 1, probability 0, space 0, times 0 [ 657.574593][T17011] CPU: 2 UID: 0 PID: 17011 Comm: syz.0.2675 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 657.574616][T17011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 657.574627][T17011] Call Trace: [ 657.574632][T17011] [ 657.574639][T17011] dump_stack_lvl+0x16c/0x1f0 [ 657.574666][T17011] should_fail_ex+0x50a/0x650 [ 657.574688][T17011] ? inet6_dump_fib+0x8b6/0x1050 [ 657.574707][T17011] should_failslab+0xc2/0x120 [ 657.574724][T17011] __kmalloc_cache_noprof+0x68/0x410 [ 657.574748][T17011] ? lock_acquire+0x2f/0xb0 [ 657.574776][T17011] inet6_dump_fib+0x8b6/0x1050 [ 657.574801][T17011] ? __pfx_inet6_dump_fib+0x10/0x10 [ 657.574833][T17011] ? __pfx_inet6_dump_fib+0x10/0x10 [ 657.574852][T17011] rtnl_dump_all+0x28f/0x5d0 [ 657.574880][T17011] ? __pfx_rtnl_dump_all+0x10/0x10 [ 657.574900][T17011] rtnl_dumpit+0x198/0x1f0 [ 657.574921][T17011] netlink_dump+0x53c/0xd00 [ 657.574948][T17011] ? __pfx_netlink_dump+0x10/0x10 [ 657.574970][T17011] ? __pfx_lock_release+0x10/0x10 [ 657.575023][T17011] ? __pfx_netlink_lookup+0x10/0x10 [ 657.575044][T17011] ? __pfx_lock_release+0x10/0x10 [ 657.575069][T17011] __netlink_dump_start+0x6ca/0x970 [ 657.575088][T17011] ? __pfx_rtnl_dump_all+0x10/0x10 [ 657.575101][T17011] rtnetlink_rcv_msg+0xb44/0xea0 [ 657.575119][T17011] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 657.575136][T17011] ? __pfx_rtnl_dumpit+0x10/0x10 [ 657.575148][T17011] ? __pfx_rtnl_dump_all+0x10/0x10 [ 657.575166][T17011] netlink_rcv_skb+0x16b/0x440 [ 657.575182][T17011] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 657.575199][T17011] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 657.575222][T17011] ? netlink_deliver_tap+0x1ae/0xd30 [ 657.575240][T17011] netlink_unicast+0x53c/0x7f0 [ 657.575257][T17011] ? __pfx_netlink_unicast+0x10/0x10 [ 657.575273][T17011] ? __phys_addr_symbol+0x30/0x80 [ 657.575284][T17011] ? __check_object_size+0x488/0x710 [ 657.575297][T17011] netlink_sendmsg+0x8b8/0xd70 [ 657.575315][T17011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.575336][T17011] sock_write_iter+0x4fe/0x5b0 [ 657.575350][T17011] ? __pfx_sock_write_iter+0x10/0x10 [ 657.575367][T17011] ? bpf_lsm_file_permission+0x9/0x10 [ 657.575384][T17011] ? security_file_permission+0x71/0x210 [ 657.575400][T17011] ? rw_verify_area+0xcf/0x680 [ 657.575415][T17011] vfs_write+0x5ae/0x1150 [ 657.575430][T17011] ? __pfx_sock_write_iter+0x10/0x10 [ 657.575444][T17011] ? __pfx_vfs_write+0x10/0x10 [ 657.575459][T17011] ? __fget_files+0x40/0x3a0 [ 657.575481][T17011] ksys_write+0x207/0x250 [ 657.575495][T17011] ? __pfx_ksys_write+0x10/0x10 [ 657.575514][T17011] __do_fast_syscall_32+0x73/0x120 [ 657.575530][T17011] do_fast_syscall_32+0x32/0x80 [ 657.575545][T17011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 657.575563][T17011] RIP: 0023:0xf7fa3579 [ 657.575573][T17011] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 657.575583][T17011] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 657.575594][T17011] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 657.575610][T17011] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 657.575616][T17011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 657.575622][T17011] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 657.575628][T17011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 657.575641][T17011] [ 657.783396][T17015] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2677'. [ 658.097643][T17025] netlink: 'syz.3.2681': attribute type 32 has an invalid length. [ 658.101188][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2681'. [ 658.104112][T17025] (unnamed net_device) (uninitialized): Setting coupled_control to on (1) [ 658.131122][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 658.131132][ T40] audit: type=1326 audit(1742359843.459:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 658.139259][ T40] audit: type=1326 audit(1742359843.459:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 658.152868][ T40] audit: type=1326 audit(1742359843.479:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 658.168274][ T40] audit: type=1326 audit(1742359843.479:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 658.174761][ T40] audit: type=1326 audit(1742359843.479:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 658.180972][ T40] audit: type=1326 audit(1742359843.479:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 658.186894][ T40] audit: type=1326 audit(1742359843.479:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 658.196414][ T40] audit: type=1326 audit(1742359843.479:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 658.202507][ T40] audit: type=1326 audit(1742359843.479:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 658.208797][ T40] audit: type=1326 audit(1742359843.479:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.2682" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x7ffc0000 [ 658.252311][T17038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2686'. [ 658.442787][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 658.806953][T17048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2689'. [ 659.300033][T17057] bond0: entered promiscuous mode [ 659.301469][T17057] bond_slave_0: entered promiscuous mode [ 659.312869][T17063] xt_CT: No such helper "pptp" [ 659.313284][ T5956] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 659.335625][T17057] bond_slave_1: entered promiscuous mode [ 659.472780][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 659.968625][ T6007] libceph: connect (1)[c::]:6789 error -101 [ 659.970709][ T6007] libceph: mon0 (1)[c::]:6789 connect error [ 659.983459][T17073] ceph: No mds server is up or the cluster is laggy [ 660.361216][T17089] Cannot find add_set index 3 as target [ 660.364540][T17089] erofs (device loop3): cannot find valid erofs superblock [ 660.522771][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 660.865089][T17100] futex_wake_op: syz.1.2700 tries to shift op by -1; fix this program [ 661.546330][T17105] FAULT_INJECTION: forcing a failure. [ 661.546330][T17105] name failslab, interval 1, probability 0, space 0, times 0 [ 661.549622][T17105] CPU: 1 UID: 0 PID: 17105 Comm: syz.0.2702 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 661.549637][T17105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 661.549644][T17105] Call Trace: [ 661.549648][T17105] [ 661.549652][T17105] dump_stack_lvl+0x16c/0x1f0 [ 661.549670][T17105] should_fail_ex+0x50a/0x650 [ 661.549682][T17105] ? fs_reclaim_acquire+0xae/0x150 [ 661.549697][T17105] should_failslab+0xc2/0x120 [ 661.549712][T17105] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 661.549730][T17105] ? __alloc_skb+0x2b1/0x380 [ 661.549748][T17105] __alloc_skb+0x2b1/0x380 [ 661.549763][T17105] ? __pfx___alloc_skb+0x10/0x10 [ 661.549780][T17105] ? ethnl_parse_header_dev_get+0x35e/0x9a0 [ 661.549798][T17105] netlink_dump+0x699/0xd00 [ 661.549815][T17105] ? __pfx_netlink_dump+0x10/0x10 [ 661.549829][T17105] ? rcu_is_watching+0x12/0xc0 [ 661.549845][T17105] ? ethnl_default_start+0x2dd/0x420 [ 661.549860][T17105] ? __pfx_ethnl_default_start+0x10/0x10 [ 661.549874][T17105] ? genl_start+0x67d/0x960 [ 661.549885][T17105] __netlink_dump_start+0x6ca/0x970 [ 661.549902][T17105] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 661.549915][T17105] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 661.549929][T17105] ? __pfx_genl_get_cmd+0x10/0x10 [ 661.549945][T17105] ? __pfx_genl_start+0x10/0x10 [ 661.549953][T17105] ? __pfx_genl_dumpit+0x10/0x10 [ 661.549963][T17105] ? __pfx_genl_done+0x10/0x10 [ 661.549974][T17105] ? __radix_tree_lookup+0x21f/0x2c0 [ 661.549990][T17105] genl_rcv_msg+0x470/0x800 [ 661.550002][T17105] ? __pfx_genl_rcv_msg+0x10/0x10 [ 661.550012][T17105] ? __pfx_ethnl_default_start+0x10/0x10 [ 661.550025][T17105] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 661.550038][T17105] ? __pfx_ethnl_default_done+0x10/0x10 [ 661.550056][T17105] netlink_rcv_skb+0x16b/0x440 [ 661.550071][T17105] ? __pfx_genl_rcv_msg+0x10/0x10 [ 661.550082][T17105] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 661.550104][T17105] ? down_read+0xc9/0x330 [ 661.550119][T17105] ? __pfx_down_read+0x10/0x10 [ 661.550136][T17105] ? netlink_deliver_tap+0x1ae/0xd30 [ 661.550152][T17105] genl_rcv+0x28/0x40 [ 661.550168][T17105] netlink_unicast+0x53c/0x7f0 [ 661.550186][T17105] ? __pfx_netlink_unicast+0x10/0x10 [ 661.550202][T17105] ? __phys_addr_symbol+0x30/0x80 [ 661.550213][T17105] ? __check_object_size+0x488/0x710 [ 661.550225][T17105] netlink_sendmsg+0x8b8/0xd70 [ 661.550243][T17105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.550263][T17105] ____sys_sendmsg+0xaaf/0xc90 [ 661.550278][T17105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.550290][T17105] ? get_compat_msghdr+0x11b/0x170 [ 661.550310][T17105] ___sys_sendmsg+0x135/0x1e0 [ 661.550328][T17105] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.550349][T17105] ? __pfx_lock_release+0x10/0x10 [ 661.550364][T17105] ? trace_lock_acquire+0x14e/0x1f0 [ 661.550381][T17105] ? __fget_files+0x206/0x3a0 [ 661.550400][T17105] __sys_sendmsg+0x16e/0x220 [ 661.550417][T17105] ? __pfx___sys_sendmsg+0x10/0x10 [ 661.550441][T17105] __do_fast_syscall_32+0x73/0x120 [ 661.550457][T17105] do_fast_syscall_32+0x32/0x80 [ 661.550473][T17105] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 661.550491][T17105] RIP: 0023:0xf7fa3579 [ 661.550499][T17105] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 661.550510][T17105] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 661.550520][T17105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 661.550526][T17105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 661.550532][T17105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 661.550538][T17105] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 661.550544][T17105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 661.550557][T17105] [ 661.552830][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 661.559280][T17111] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2704'. [ 661.665696][T17111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2704'. [ 661.668257][T17111] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 662.556051][T17130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2707'. [ 662.558649][T17130] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 662.592777][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 663.539334][T17146] Cannot find add_set index 3 as target [ 663.542557][T17146] erofs (device loop3): cannot find valid erofs superblock [ 663.632830][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 664.672994][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 665.404401][T17188] overlayfs: missing 'workdir' [ 665.712799][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 666.074100][T17194] Cannot find add_set index 3 as target [ 666.082632][T17194] erofs (device loop0): cannot find valid erofs superblock [ 666.305918][T17202] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 666.752849][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 667.541893][ T5956] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 667.692934][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 667.695651][ T5956] usb 5-1: config 0 has an invalid interface number: 194 but max is 0 [ 667.697919][ T5956] usb 5-1: config 0 has no interface number 0 [ 667.700006][ T5956] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=3d.96 [ 667.706091][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.709631][ T5956] usb 5-1: config 0 descriptor?? [ 667.792807][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 667.915138][ T5956] ath6kl: Failed to submit usb control message: -71 [ 667.917026][ T5956] ath6kl: unable to send the bmi data to the device: -71 [ 667.919088][ T5956] ath6kl: Unable to send get target info: -71 [ 667.921176][ T5956] ath6kl: Failed to init ath6kl core: -71 [ 667.923083][ T5956] ath6kl_usb 5-1:0.194: probe with driver ath6kl_usb failed with error -71 [ 667.933586][ T5956] usb 5-1: USB disconnect, device number 15 [ 668.369976][T17232] wireguard0: entered promiscuous mode [ 668.371555][T17232] wireguard0: entered allmulticast mode [ 668.832778][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 669.872773][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 670.405705][T17272] fuse: Unknown parameter 'group_i00000000000000000000' [ 670.922769][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 671.286499][T17295] lo speed is unknown, defaulting to 1000 [ 671.952776][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 672.477353][T17311] FAULT_INJECTION: forcing a failure. [ 672.477353][T17311] name failslab, interval 1, probability 0, space 0, times 0 [ 672.480854][T17311] CPU: 3 UID: 0 PID: 17311 Comm: syz.0.2754 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 672.480868][T17311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 672.480875][T17311] Call Trace: [ 672.480879][T17311] [ 672.480883][T17311] dump_stack_lvl+0x16c/0x1f0 [ 672.480903][T17311] should_fail_ex+0x50a/0x650 [ 672.480914][T17311] ? trace_contention_end+0xee/0x140 [ 672.480932][T17311] should_failslab+0xc2/0x120 [ 672.480943][T17311] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 672.480960][T17311] ? hci_sock_sendmsg+0xdee/0x25e0 [ 672.480970][T17311] ? __alloc_skb+0x2b1/0x380 [ 672.480986][T17311] ? __pfx___mutex_lock+0x10/0x10 [ 672.481002][T17311] __alloc_skb+0x2b1/0x380 [ 672.481018][T17311] ? __pfx___alloc_skb+0x10/0x10 [ 672.481038][T17311] hci_sock_sendmsg+0x1a47/0x25e0 [ 672.481051][T17311] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 672.481065][T17311] sock_write_iter+0x4fe/0x5b0 [ 672.481079][T17311] ? __pfx_sock_write_iter+0x10/0x10 [ 672.481096][T17311] ? bpf_lsm_file_permission+0x9/0x10 [ 672.481113][T17311] ? security_file_permission+0x71/0x210 [ 672.481128][T17311] ? rw_verify_area+0xcf/0x680 [ 672.481143][T17311] vfs_write+0x5ae/0x1150 [ 672.481158][T17311] ? __pfx_sock_write_iter+0x10/0x10 [ 672.481172][T17311] ? __pfx_vfs_write+0x10/0x10 [ 672.481188][T17311] ? __fget_files+0x40/0x3a0 [ 672.481210][T17311] ksys_write+0x207/0x250 [ 672.481224][T17311] ? __pfx_ksys_write+0x10/0x10 [ 672.481242][T17311] __do_fast_syscall_32+0x73/0x120 [ 672.481259][T17311] do_fast_syscall_32+0x32/0x80 [ 672.481274][T17311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.481292][T17311] RIP: 0023:0xf7fa3579 [ 672.481300][T17311] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 672.481311][T17311] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 672.481321][T17311] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 672.481328][T17311] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000000 [ 672.481334][T17311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 672.481340][T17311] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 672.481346][T17311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 672.481358][T17311] [ 672.992839][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 674.032833][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 674.279483][T17353] FAULT_INJECTION: forcing a failure. [ 674.279483][T17353] name failslab, interval 1, probability 0, space 0, times 0 [ 674.283010][T17353] CPU: 1 UID: 0 PID: 17353 Comm: syz.3.2765 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 674.283025][T17353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 674.283032][T17353] Call Trace: [ 674.283035][T17353] [ 674.283039][T17353] dump_stack_lvl+0x16c/0x1f0 [ 674.283058][T17353] should_fail_ex+0x50a/0x650 [ 674.283069][T17353] ? fs_reclaim_acquire+0xae/0x150 [ 674.283084][T17353] should_failslab+0xc2/0x120 [ 674.283095][T17353] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 674.283112][T17353] ? __alloc_skb+0x2b1/0x380 [ 674.283130][T17353] __alloc_skb+0x2b1/0x380 [ 674.283145][T17353] ? __pfx___alloc_skb+0x10/0x10 [ 674.283162][T17353] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 674.283181][T17353] netlink_alloc_large_skb+0x69/0x130 [ 674.283197][T17353] netlink_sendmsg+0x689/0xd70 [ 674.283214][T17353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.283235][T17353] ____sys_sendmsg+0xaaf/0xc90 [ 674.283248][T17353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.283261][T17353] ? get_compat_msghdr+0x11b/0x170 [ 674.283279][T17353] ___sys_sendmsg+0x135/0x1e0 [ 674.283297][T17353] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.283318][T17353] ? __pfx_lock_release+0x10/0x10 [ 674.283333][T17353] ? trace_lock_acquire+0x14e/0x1f0 [ 674.283350][T17353] ? __fget_files+0x206/0x3a0 [ 674.283368][T17353] __sys_sendmsg+0x16e/0x220 [ 674.283385][T17353] ? __pfx___sys_sendmsg+0x10/0x10 [ 674.283409][T17353] __do_fast_syscall_32+0x73/0x120 [ 674.283425][T17353] do_fast_syscall_32+0x32/0x80 [ 674.283441][T17353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 674.283458][T17353] RIP: 0023:0xf73de579 [ 674.283467][T17353] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 674.283478][T17353] RSP: 002b:00000000f502455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 674.283488][T17353] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000000 [ 674.283495][T17353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 674.283501][T17353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 674.283507][T17353] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 674.283513][T17353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 674.283525][T17353] [ 674.522938][ T5303] Bluetooth: hci0: command 0x0401 tx timeout [ 674.524804][T13885] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 674.537759][T17360] block device autoloading is deprecated and will be removed. [ 674.553518][T17363] overlay: Bad value for 'uuid' [ 674.572906][T17365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2770'. [ 674.643232][T17368] Cannot find add_set index 3 as target [ 674.646612][T17368] erofs (device loop1): cannot find valid erofs superblock [ 675.072769][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 675.365236][T17384] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 675.475829][T17388] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2776'. [ 675.481762][T17388] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.519801][T17397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2779'. [ 675.559895][T17400] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 675.573052][T17393] block nbd2: shutting down sockets [ 676.122806][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 676.730738][T17416] Cannot find add_set index 3 as target [ 676.737128][T17416] erofs (device loop3): cannot find valid erofs superblock [ 677.071226][T17427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.152770][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 677.302842][ T5956] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 677.452924][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 677.461072][ T5956] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 677.464022][ T5956] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 677.466340][ T5956] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 677.468847][ T5956] usb 5-1: config 250 has no interface number 0 [ 677.470614][ T5956] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 677.474069][ T5956] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 677.477007][ T5956] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 677.479824][ T5956] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 677.482746][ T5956] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 677.486472][ T5956] usb 5-1: config 250 interface 228 has no altsetting 0 [ 677.489534][ T5956] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 677.492075][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 677.494482][ T5956] usb 5-1: Product: syz [ 677.495703][ T5956] usb 5-1: SerialNumber: syz [ 677.498603][ T5956] hub 5-1:250.228: bad descriptor, ignoring hub [ 677.500371][ T5956] hub 5-1:250.228: probe with driver hub failed with error -5 [ 677.654585][T17447] netlink: 'syz.2.2795': attribute type 1 has an invalid length. [ 677.665937][T17447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 677.676280][T17447] bond1: (slave gretap1): making interface the new active one [ 677.680477][T17447] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 677.998997][T17454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.001458][T17454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.009250][ T5956] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 678.038025][ T5956] usb 5-1: USB disconnect, device number 16 [ 678.041593][ T5956] usblp0: removed [ 678.146399][T17459] lo speed is unknown, defaulting to 1000 [ 678.192789][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 678.719002][T17463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2799'. [ 678.892272][T17460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.899323][T17460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.904780][T17460] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 678.908532][T17460] bond0 (unregistering): Released all slaves [ 679.039157][T13885] Bluetooth: hci2: link tx timeout [ 679.041362][T13885] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 679.051332][ T5303] Bluetooth: hci2: link tx timeout [ 679.053806][ T5303] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 679.232784][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 680.114941][T17484] FAULT_INJECTION: forcing a failure. [ 680.114941][T17484] name failslab, interval 1, probability 0, space 0, times 0 [ 680.119302][T17484] CPU: 0 UID: 0 PID: 17484 Comm: syz.1.2804 Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 680.119317][T17484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 680.119323][T17484] Call Trace: [ 680.119327][T17484] [ 680.119332][T17484] dump_stack_lvl+0x16c/0x1f0 [ 680.119352][T17484] should_fail_ex+0x50a/0x650 [ 680.119363][T17484] ? fs_reclaim_acquire+0xae/0x150 [ 680.119378][T17484] ? p9_fid_create+0x41/0x260 [ 680.119390][T17484] should_failslab+0xc2/0x120 [ 680.119402][T17484] __kmalloc_cache_noprof+0x68/0x410 [ 680.119417][T17484] ? do_raw_spin_unlock+0x172/0x230 [ 680.119430][T17484] p9_fid_create+0x41/0x260 [ 680.119442][T17484] p9_client_walk+0xc6/0x530 [ 680.119458][T17484] ? __pfx_p9_client_walk+0x10/0x10 [ 680.119474][T17484] ? v9fs_fid_lookup+0xe9/0xec0 [ 680.119490][T17484] v9fs_vfs_lookup+0x208/0x5c0 [ 680.119507][T17484] ? __pfx_v9fs_vfs_lookup+0x10/0x10 [ 680.119524][T17484] ? lockdep_init_map_type+0x16d/0x7d0 [ 680.119543][T17484] __lookup_slow+0x24f/0x470 [ 680.119556][T17484] ? __pfx___lookup_slow+0x10/0x10 [ 680.119571][T17484] ? walk_component+0x342/0x5b0 [ 680.119595][T17484] ? lookup_fast+0x153/0x5f0 [ 680.119610][T17484] walk_component+0x350/0x5b0 [ 680.119625][T17484] path_lookupat+0x17f/0x770 [ 680.119642][T17484] path_openat+0x1754/0x2d80 [ 680.119656][T17484] ? hlock_class+0x4e/0x130 [ 680.119667][T17484] ? __lock_acquire+0x15a9/0x3c40 [ 680.119686][T17484] ? __pfx_path_openat+0x10/0x10 [ 680.119701][T17484] ? __pfx___lock_acquire+0x10/0x10 [ 680.119715][T17484] ? lock_acquire.part.0+0x11b/0x380 [ 680.119730][T17484] ? find_held_lock+0x2d/0x110 [ 680.119743][T17484] do_filp_open+0x20c/0x470 [ 680.119759][T17484] ? __pfx_do_filp_open+0x10/0x10 [ 680.119773][T17484] ? find_held_lock+0x2d/0x110 [ 680.119793][T17484] ? alloc_fd+0x41f/0x760 [ 680.119812][T17484] do_sys_openat2+0x17a/0x1e0 [ 680.119824][T17484] ? __pfx_do_sys_openat2+0x10/0x10 [ 680.119837][T17484] ? __fget_files+0x206/0x3a0 [ 680.119854][T17484] __ia32_compat_sys_openat+0x16e/0x210 [ 680.119867][T17484] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 680.119879][T17484] ? ksys_write+0x1ba/0x250 [ 680.119898][T17484] __do_fast_syscall_32+0x73/0x120 [ 680.119914][T17484] do_fast_syscall_32+0x32/0x80 [ 680.119930][T17484] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 680.119947][T17484] RIP: 0023:0xf743e579 [ 680.119956][T17484] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 680.119967][T17484] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 680.119977][T17484] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000580 [ 680.119984][T17484] RDX: 0000000000600002 RSI: 00000000000000a4 RDI: 0000000000000000 [ 680.119991][T17484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 680.119997][T17484] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 680.120003][T17484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 680.120015][T17484] [ 680.214829][T17486] netlink: 'syz.0.2805': attribute type 1 has an invalid length. [ 680.217028][T17486] netlink: 208284 bytes leftover after parsing attributes in process `syz.0.2805'. [ 680.219780][T17486] netlink: 'syz.0.2805': attribute type 2 has an invalid length. [ 680.229925][T17486] netlink: 'syz.0.2805': attribute type 1 has an invalid length. [ 680.272777][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 681.072849][ T5303] Bluetooth: hci2: command 0x0406 tx timeout [ 681.312824][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 682.342881][ T6388] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 682.352829][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 682.492799][ T6388] usb 7-1: Using ep0 maxpacket: 8 [ 682.495402][ T6388] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 682.497672][ T6388] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 682.500306][ T6388] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 682.503195][ T6388] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 682.505874][ T6388] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.509324][ T6388] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 682.511796][ T6388] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.720698][ T6388] usb 7-1: usb_control_msg returned -32 [ 682.722325][ T6388] usbtmc 7-1:16.0: can't read capabilities [ 683.075763][T17514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2808'. [ 683.392826][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 684.432792][ C3] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 685.073783][T15712] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000056: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 685.077315][T15712] KASAN: null-ptr-deref in range [0x00000000000002b0-0x00000000000002b7] [ 685.080809][T15712] CPU: 3 UID: 0 PID: 15712 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-00050-gfc444ada1310 #0 [ 685.084491][T15712] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 685.087442][T15712] RIP: 0010:afs_atcell_get_link+0x33e/0x480 [ 685.089084][T15712] Code: 89 c3 89 c6 e8 63 9b 3c fe 85 db 75 64 e8 5a a0 3c fe 48 8d bd b0 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1f 01 00 00 4c 89 f6 bf 03 00 00 00 4c 8b a5 b0 [ 685.094371][T15712] RSP: 0018:ffffc9000331f978 EFLAGS: 00010206 [ 685.096076][T15712] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff837d51da [ 685.098251][T15712] RDX: 0000000000000056 RSI: ffffffff837d5166 RDI: 00000000000002b0 [ 685.100428][T15712] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 685.102617][T15712] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 685.104785][T15712] R13: ffff88804d79b000 R14: 0000000000000003 R15: ffff88800dd71480 [ 685.106974][T15712] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:0000000057f59440 [ 685.109414][T15712] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 685.111288][T15712] CR2: 0000000057f6e9bc CR3: 000000004f2e4000 CR4: 0000000000352ef0 [ 685.113463][T15712] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 685.115666][T15712] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 685.117819][T15712] Call Trace: [ 685.118765][T15712] [ 685.119594][T15712] ? die_addr+0x3b/0xa0 [ 685.120758][T15712] ? exc_general_protection+0x155/0x230 [ 685.122298][T15712] ? asm_exc_general_protection+0x26/0x30 [ 685.123880][T15712] ? afs_atcell_get_link+0x39a/0x480 [ 685.125358][T15712] ? afs_atcell_get_link+0x326/0x480 [ 685.126833][T15712] ? afs_atcell_get_link+0x33e/0x480 [ 685.128294][T15712] ? afs_atcell_get_link+0x326/0x480 [ 685.129760][T15712] ? __pfx_afs_atcell_get_link+0x10/0x10 [ 685.131360][T15712] step_into+0x1982/0x2220 [ 685.132606][T15712] ? __pfx_step_into+0x10/0x10 [ 685.133937][T15712] ? lookup_fast+0x153/0x5f0 [ 685.135243][T15712] path_openat+0x74c/0x2d80 [ 685.136530][T15712] ? __pfx_path_openat+0x10/0x10 [ 685.137922][T15712] ? __pfx___lock_acquire+0x10/0x10 [ 685.139380][T15712] ? lock_acquire.part.0+0x11b/0x380 [ 685.140869][T15712] ? find_held_lock+0x2d/0x110 [ 685.142203][T15712] do_filp_open+0x20c/0x470 [ 685.143477][T15712] ? __pfx_do_filp_open+0x10/0x10 [ 685.144885][T15712] ? find_held_lock+0x2d/0x110 [ 685.146220][T15712] ? alloc_fd+0x41f/0x760 [ 685.147453][T15712] do_sys_openat2+0x17a/0x1e0 [ 685.148766][T15712] ? __pfx_do_sys_openat2+0x10/0x10 [ 685.150205][T15712] ? do_unlinkat+0x165/0x760 [ 685.151543][T15712] ? __virt_addr_valid+0x5e/0x590 [ 685.152948][T15712] ? __pfx_do_unlinkat+0x10/0x10 [ 685.154328][T15712] __ia32_compat_sys_openat+0x16e/0x210 [ 685.155888][T15712] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 685.157566][T15712] __do_fast_syscall_32+0x73/0x120 [ 685.159000][T15712] do_fast_syscall_32+0x32/0x80 [ 685.160356][T15712] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 685.162119][T15712] RIP: 0023:0xf7fa3579 [ 685.163255][T15712] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 685.168508][T15712] RSP: 002b:00000000ffebd1a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000127 [ 685.170801][T15712] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000ffebd270 [ 685.173003][T15712] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f742cff4 [ 685.175163][T15712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 685.177324][T15712] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 685.179495][T15712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 685.181676][T15712] [ 685.182543][T15712] Modules linked in: [ 685.183954][T15712] ---[ end trace 0000000000000000 ]--- [ 685.195518][ T6388] usb 7-1: USB disconnect, device number 9 [ 685.199760][T15712] RIP: 0010:afs_atcell_get_link+0x33e/0x480 [ 685.201516][T15712] Code: 89 c3 89 c6 e8 63 9b 3c fe 85 db 75 64 e8 5a a0 3c fe 48 8d bd b0 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1f 01 00 00 4c 89 f6 bf 03 00 00 00 4c 8b a5 b0 [ 685.206954][T15712] RSP: 0018:ffffc9000331f978 EFLAGS: 00010206 [ 685.208746][T15712] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff837d51da [ 685.211027][T15712] RDX: 0000000000000056 RSI: ffffffff837d5166 RDI: 00000000000002b0 [ 685.213455][T15712] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 685.215731][T15712] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 685.217972][T15712] R13: ffff88804d79b000 R14: 0000000000000003 R15: ffff88800dd71480 [ 685.220255][T15712] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:0000000057f59440 [ 685.222977][T15712] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 685.224885][T15712] CR2: 0000000057f6e9bc CR3: 000000004f2e4000 CR4: 0000000000352ef0 [ 685.227183][T15712] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 685.229420][T15712] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 685.231961][T15712] Kernel panic - not syncing: Fatal exception [ 685.234195][T15712] Kernel Offset: disabled [ 685.235430][T15712] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:12:14 Registers: info registers vcpu 0 CPU#0 RAX=00000000016a4474 RBX=0000000000000000 RCX=ffffffff8b556469 RDX=ffffed1005686f86 RSI=ffffffff8bd35aa0 RDI=ffffffff819084a9 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed1005686f85 R10=ffff88802b437c2b R11=ffff88802b53fb60 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90628b10 R15=0000000000000000 RIP=ffffffff8b55784f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032104ffc CR3=0000000022f02000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff81c1a895 RDX=fffffbfff20c5163 RSI=ffffffff8bd35aa0 RDI=ffffffff8bd35ae0 RBP=000000000003da8c RSP=ffffc90022a9f840 R8 =0000000000000000 R9 =fffffbfff20c5162 R10=ffffffff90628b17 R11=00000000000a5504 R12=0000000000000200 R13=ffff888069e1c000 R14=0000000000000cc0 R15=ffff8880237570b8 RIP=ffffffff8b556bf0 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c291003 CR3=0000000022f02000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff888020de8080 RCX=1ffff110056c7dcb RDX=0000000000000001 RSI=ffffffff81618d55 RDI=ffff888020de80d1 RBP=ffff88802b63ee00 RSP=ffffc9002218fb90 R8 =0000000000000000 R9 =ffff888024a6c4b8 R10=ffffffff90628b17 R11=0000000000000000 R12=ffff88802b63ed40 R13=ffffed10056c7dc2 R14=ffff88802b63ee00 R15=dffffc0000000000 RIP=ffffffff818e1043 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50c3288 CR3=0000000048778000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=93acbf50ec6f0776 a86ac0673c832bbc 93acbf50ec6f0776 a86ac0673c832bbc 93acbf50ec6f0776 a86ac0673c832bbc 93acbf50ec6f0776 a86ac0673c832bbc ZMM18=5d902e7da197f0dd 60e1e080f33620ad 5d902e7da197f0dd 60e1e080f33620ad 5d902e7da197f0dd 60e1e080f33620ad 5d902e7da197f0dd 60e1e080f33620ad ZMM19=5620000000000000 0000000000000004 5620000000000000 0000000000000003 5620000000000000 0000000000000002 5620000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=dfb10a66dfb10a66 dfb10a66dfb10a66 dfb10a66dfb10a66 dfb10a66dfb10a66 dfb10a66dfb10a66 dfb10a66dfb10a66 dfb10a66dfb10a66 dfb10a66dfb10a66 ZMM22=8705849487058494 8705849487058494 8705849487058494 8705849487058494 8705849487058494 8705849487058494 8705849487058494 8705849487058494 ZMM23=144a038e144a038e 144a038e144a038e 144a038e144a038e 144a038e144a038e 144a038e144a038e 144a038e144a038e 144a038e144a038e 144a038e144a038e ZMM24=725608be725608be 725608be725608be 725608be725608be 725608be725608be 725608be725608be 725608be725608be 725608be725608be 725608be725608be ZMM25=a62f762ca62f762c a62f762ca62f762c a62f762ca62f762c a62f762ca62f762c a62f762ca62f762c a62f762ca62f762c a62f762ca62f762c a62f762ca62f762c ZMM26=5ab55fe25ab55fe2 5ab55fe25ab55fe2 5ab55fe25ab55fe2 5ab55fe25ab55fe2 5ab55fe25ab55fe2 5ab55fe25ab55fe2 5ab55fe25ab55fe2 5ab55fe25ab55fe2 ZMM27=9bcfeb8b9bcfeb8b 9bcfeb8b9bcfeb8b 9bcfeb8b9bcfeb8b 9bcfeb8b9bcfeb8b 9bcfeb8b9bcfeb8b 9bcfeb8b9bcfeb8b 9bcfeb8b9bcfeb8b 9bcfeb8b9bcfeb8b ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5514000055140000 5514000055140000 5514000055140000 5514000055140000 5514000055140000 5514000055140000 5514000055140000 5514000055140000 info registers vcpu 3 CPU#3 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853e91d5 RDI=ffffffff9ab71ea0 RBP=ffffffff9ab71e60 RSP=ffffc9000331f2f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d7a7973203a5043 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9ab71e60 R15=0000000000000000 RIP=ffffffff853e91ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057f6e9bc CR3=000000004f2e4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000