last executing test programs: 11.798296997s ago: executing program 3 (id=2405): pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x92, 0x1, 0x2, 0xd59f80, 0x19ef, 0x5, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x13, {0x8, 0xfffffffb}, 0xd0, 0x9}}) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000700)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94db6c966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef00678522f270e045c8dd9675b1e6c2e04254b7ac4fd4a15b96b5aa50309bff7cf1471717c983241f2c1cbd80b5865f5720f0f0321fa363dda", 0xeb) r6 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) connect$unix(r6, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 11.016072662s ago: executing program 1 (id=2406): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000013c0)=[0x0, 0x0], &(0x7f0000001400)=[0x0], 0x0, 0x64, &(0x7f0000001440)=[{}], 0x8, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x60, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)='U\x00\x00\x00 \x00', 0x6}], 0x1}, 0x4000) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4f) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001740)={'syztnl1\x00', &(0x7f00000016c0)={'syztnl0\x00', 0x0, 0x29, 0x5f, 0xf9, 0x1, 0x38, @mcast1, @private0, 0x20, 0x8, 0xffffff60, 0xf}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002800)={&(0x7f0000001780)={0x1068, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff7e30}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff, 0x8, 0x1, 0x5}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4fc8}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9a44}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x55a}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3d}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x38b78127}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4, 0x4a, 0xa, 0xffffffff}, {0x5a, 0x1, 0x5, 0x3}, {0xffff, 0xfd, 0x0, 0x5}, {0x1, 0x0, 0x5f, 0xff}, {0x6, 0x2, 0x3, 0x2}, {0x2, 0xa, 0x5, 0x8}, {0x2, 0x7, 0x9, 0x2ac}, {0x35, 0x8, 0xff, 0x808}]}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x2a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x400, 0x4, 0x9, 0x3}, {0xfffd, 0x10, 0x5, 0x81}, {0x5, 0x9, 0x3, 0x5}, {0x5, 0x4, 0x0, 0x9}, {0x7, 0x10, 0x0, 0xa}, {0x9, 0x7, 0x81, 0x4}, {0xca5f, 0x9, 0x2, 0x2749}, {0x5, 0x1, 0xf4, 0x2}]}}}]}}]}, 0x1068}, 0x1, 0x0, 0x0, 0x8001}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r11 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000000020a0700000000000000000000000004140000001100010000000000000000000700000a0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 9.505558199s ago: executing program 3 (id=2409): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0), 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) r5 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) pipe(0x0) 9.225638222s ago: executing program 1 (id=2410): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0), 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) r5 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) pipe(0x0) 8.996741439s ago: executing program 0 (id=2411): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0), 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x10, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) r5 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) pipe(0x0) 7.116851212s ago: executing program 2 (id=2413): pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240), 0x0, 0xfffffffffffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x92, 0x1, 0x2, 0xd59f80, 0x19ef, 0x5, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x13, {0x8, 0xfffffffb}, 0xd0, 0x9}}) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r6 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) connect$unix(r6, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 6.137395153s ago: executing program 2 (id=2414): mlockall(0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x172831) keyctl$search(0xa, r1, &(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x0}, 0xfffffffffffffffc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r3) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket(0x2, 0x3, 0x7f) bind$inet(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, 0x0, 0x0) sendto$inet(r4, 0x0, 0xa00, 0x48890, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB], 0x44}, 0x1, 0x1000000}, 0x200000000000000) 5.647565405s ago: executing program 0 (id=2415): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x10, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) r5 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) pipe(0x0) 5.057082961s ago: executing program 1 (id=2416): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x10, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) r6 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) write$uinput_user_dev(r6, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) pipe(0x0) 4.506537752s ago: executing program 3 (id=2417): pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x92, 0x1, 0x2, 0xd59f80, 0x19ef, 0x5, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x13, {0x8, 0xfffffffb}, 0xd0, 0x9}}) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000700)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94db6c966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef00678522f270e045c8dd9675b1e6c2e04254b7ac4fd4a15b96b5aa50309bff7cf1471717c983241f2c1cbd80b5865f5720f0f0321fa363dda", 0xeb) r6 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) connect$unix(r6, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 3.044496961s ago: executing program 2 (id=2418): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000013c0)=[0x0, 0x0], &(0x7f0000001400)=[0x0], 0x0, 0x64, &(0x7f0000001440)=[{}], 0x8, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x60, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)='U\x00\x00\x00 \x00', 0x6}], 0x1}, 0x4000) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4f) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001740)={'syztnl1\x00', &(0x7f00000016c0)={'syztnl0\x00', 0x0, 0x29, 0x5f, 0xf9, 0x1, 0x38, @mcast1, @private0, 0x20, 0x8, 0xffffff60, 0xf}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r8, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002800)={&(0x7f0000001780)={0x1068, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff7e30}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff, 0x8, 0x1, 0x5}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4fc8}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9a44}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x55a}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3d}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x38b78127}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4, 0x4a, 0xa, 0xffffffff}, {0x5a, 0x1, 0x5, 0x3}, {0xffff, 0xfd, 0x0, 0x5}, {0x1, 0x0, 0x5f, 0xff}, {0x6, 0x2, 0x3, 0x2}, {0x2, 0xa, 0x5, 0x8}, {0x2, 0x7, 0x9, 0x2ac}, {0x35, 0x8, 0xff, 0x808}]}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x2a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x400, 0x4, 0x9, 0x3}, {0xfffd, 0x10, 0x5, 0x81}, {0x5, 0x9, 0x3, 0x5}, {0x5, 0x4, 0x0, 0x9}, {0x7, 0x10, 0x0, 0xa}, {0x9, 0x7, 0x81, 0x4}, {0xca5f, 0x9, 0x2, 0x2749}, {0x5, 0x1, 0xf4, 0x2}]}}}]}}]}, 0x1068}, 0x1, 0x0, 0x0, 0x8001}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000000020a0700000000000000000000000004140000001100010000000000000000000700000a0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 2.67576579s ago: executing program 3 (id=2419): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000013c0)=[0x0, 0x0], &(0x7f0000001400)=[0x0], 0x0, 0x64, &(0x7f0000001440)=[{}], 0x8, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x60, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)='U\x00\x00\x00 \x00', 0x6}], 0x1}, 0x4000) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4f) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001740)={'syztnl1\x00', &(0x7f00000016c0)={'syztnl0\x00', 0x0, 0x29, 0x5f, 0xf9, 0x1, 0x38, @mcast1, @private0, 0x20, 0x8, 0xffffff60, 0xf}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r8, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002800)={&(0x7f0000001780)={0x1068, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff7e30}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff, 0x8, 0x1, 0x5}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4fc8}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9a44}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x55a}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3d}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x38b78127}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4, 0x4a, 0xa, 0xffffffff}, {0x5a, 0x1, 0x5, 0x3}, {0xffff, 0xfd, 0x0, 0x5}, {0x1, 0x0, 0x5f, 0xff}, {0x6, 0x2, 0x3, 0x2}, {0x2, 0xa, 0x5, 0x8}, {0x2, 0x7, 0x9, 0x2ac}, {0x35, 0x8, 0xff, 0x808}]}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x2a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x400, 0x4, 0x9, 0x3}, {0xfffd, 0x10, 0x5, 0x81}, {0x5, 0x9, 0x3, 0x5}, {0x5, 0x4, 0x0, 0x9}, {0x7, 0x10, 0x0, 0xa}, {0x9, 0x7, 0x81, 0x4}, {0xca5f, 0x9, 0x2, 0x2749}, {0x5, 0x1, 0xf4, 0x2}]}}}]}}]}, 0x1068}, 0x1, 0x0, 0x0, 0x8001}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000000020a0700000000000000000000000004140000001100010000000000000000000700000a0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 2.579007201s ago: executing program 1 (id=2420): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wg0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000013c0)=[0x0, 0x0], &(0x7f0000001400)=[0x0], 0x0, 0x64, &(0x7f0000001440)=[{}], 0x8, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x60, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)='U\x00\x00\x00 \x00', 0x6}], 0x1}, 0x4000) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4f) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001740)={'syztnl1\x00', &(0x7f00000016c0)={'syztnl0\x00', 0x0, 0x29, 0x5f, 0xf9, 0x1, 0x38, @mcast1, @private0, 0x20, 0x8, 0xffffff60, 0xf}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r11, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r11, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002800)={&(0x7f0000001780)={0x1068, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff7e30}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff, 0x8, 0x1, 0x5}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4fc8}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9a44}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x55a}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3d}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x38b78127}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4, 0x4a, 0xa, 0xffffffff}, {0x5a, 0x1, 0x5, 0x3}, {0xffff, 0xfd, 0x0, 0x5}, {0x1, 0x0, 0x5f, 0xff}, {0x6, 0x2, 0x3, 0x2}, {0x2, 0xa, 0x5, 0x8}, {0x2, 0x7, 0x9, 0x2ac}, {0x35, 0x8, 0xff, 0x808}]}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x2a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x400, 0x4, 0x9, 0x3}, {0xfffd, 0x10, 0x5, 0x81}, {0x5, 0x9, 0x3, 0x5}, {0x5, 0x4, 0x0, 0x9}, {0x7, 0x10, 0x0, 0xa}, {0x9, 0x7, 0x81, 0x4}, {0xca5f, 0x9, 0x2, 0x2749}, {0x5, 0x1, 0xf4, 0x2}]}}}]}}]}, 0x1068}, 0x1, 0x0, 0x0, 0x8001}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r13 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r13, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000000020a0700000000000000000000000004140000001100010000000000000000000700000a0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 2.406113982s ago: executing program 2 (id=2421): pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x92, 0x1, 0x2, 0xd59f80, 0x19ef, 0x5, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x13, {0x8, 0xfffffffb}, 0xd0, 0x9}}) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r6 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) connect$unix(r6, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 2.400370167s ago: executing program 0 (id=2429): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000013c0)=[0x0, 0x0], &(0x7f0000001400)=[0x0], 0x0, 0x64, &(0x7f0000001440)=[{}], 0x8, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x60, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)='U\x00\x00\x00 \x00', 0x6}], 0x1}, 0x4000) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4f) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001740)={'syztnl1\x00', &(0x7f00000016c0)={'syztnl0\x00', 0x0, 0x29, 0x5f, 0xf9, 0x1, 0x38, @mcast1, @private0, 0x20, 0x8, 0xffffff60, 0xf}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r8, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002800)={&(0x7f0000001780)={0x1068, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff7e30}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff, 0x8, 0x1, 0x5}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4fc8}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9a44}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x55a}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3d}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x38b78127}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4, 0x4a, 0xa, 0xffffffff}, {0x5a, 0x1, 0x5, 0x3}, {0xffff, 0xfd, 0x0, 0x5}, {0x1, 0x0, 0x5f, 0xff}, {0x6, 0x2, 0x3, 0x2}, {0x2, 0xa, 0x5, 0x8}, {0x2, 0x7, 0x9, 0x2ac}, {0x35, 0x8, 0xff, 0x808}]}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x2a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x400, 0x4, 0x9, 0x3}, {0xfffd, 0x10, 0x5, 0x81}, {0x5, 0x9, 0x3, 0x5}, {0x5, 0x4, 0x0, 0x9}, {0x7, 0x10, 0x0, 0xa}, {0x9, 0x7, 0x81, 0x4}, {0xca5f, 0x9, 0x2, 0x2749}, {0x5, 0x1, 0xf4, 0x2}]}}}]}}]}, 0x1068}, 0x1, 0x0, 0x0, 0x8001}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000000020a0700000000000000000000000004140000001100010000000000000000000700000a0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 2.076900275s ago: executing program 3 (id=2422): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000280)={@rand_addr=0x64010101, @private=0xa0100fe, 0x0, "7ea97ddb6fe75ebaa2853f422a8bf8ec6caf0009000000000000000400", 0x0, 0x80, 0xc299, 0x6}, 0x3c) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0xffffffff) write$dsp(r2, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)}], 0x1) 1.956425656s ago: executing program 0 (id=2423): pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000700)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94db6c966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef00678522f270e045c8dd9675b1e6c2e04254b7ac4fd4a15b96b5aa50309bff7cf1471717c983241f2c1cbd80b5865f5720f0f0321fa363dda", 0xeb) r6 = fcntl$dupfd(r3, 0x406, r3) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) connect$unix(r6, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 1.87671018s ago: executing program 1 (id=2424): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) r1 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x20000008}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f00000003c0)={0x8, 0x1, 0xc1, 0x7, 0xb1d4, 0x20, 0x2}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="7400000009060101a000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={0x0, 0x48}}, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(r3, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000200)="fac018eb16b101afa5ed62a2bf8b4574c1159a5e7e3bd01749d0", 0x1a}, {&(0x7f0000000300)}, {&(0x7f0000001b00)="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", 0x1000}], 0x3}, 0x880) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x6c, r7, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x6c}}, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) close(0x3) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 1.486046972s ago: executing program 2 (id=2425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) r1 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x20000008}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x48}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f00000003c0)={0x8, 0x1, 0xc1, 0x7, 0xb1d4, 0x20, 0x2}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="7400000009060101a000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={0x0, 0x48}}, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(r3, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000200)="fac018eb16b101afa5ed62a2bf8b4574c1159a5e7e3bd01749d0", 0x1a}, {&(0x7f0000000300)}, {&(0x7f0000001b00)="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", 0x1000}], 0x3}, 0x880) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x6c, r7, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x6c}}, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) close(0x3) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 1.049921523s ago: executing program 0 (id=2426): pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x92, 0x1, 0x2, 0xd59f80, 0x19ef, 0x5, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x13, {0x8, 0xfffffffb}, 0xd0, 0x9}}) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000700)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94db6c966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef00678522f270e045c8dd9675b1e6c2e04254b7ac4fd4a15b96b5aa50309bff7cf1471717c983241f2c1cbd80b5865f5720f0f0321fa363dda", 0xeb) r6 = fcntl$dupfd(r3, 0x406, r3) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) connect$unix(r6, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 626.531155ms ago: executing program 1 (id=2427): pipe(&(0x7f00000001c0)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x92, 0x1, 0x2, 0xd59f80, 0x19ef, 0x5, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x13, {0x8, 0xfffffffb}, 0xd0, 0x9}}) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000700)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94db6c966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef00678522f270e045c8dd9675b1e6c2e04254b7ac4fd4a15b96b5aa50309bff7cf1471717c983241f2c1cbd80b5865f5720f0f0321fa363dda", 0xeb) r6 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) connect$unix(r6, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 211.288171ms ago: executing program 2 (id=2428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) r1 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x20000008}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, 0x0) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f00000003c0)={0x8, 0x1, 0xc1, 0x7, 0xb1d4, 0x20, 0x2}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="7400000009060101a000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={0x0, 0x48}}, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(r3, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000200)="fac018eb16b101afa5ed62a2bf8b4574c1159a5e7e3bd01749d0", 0x1a}, {&(0x7f0000000300)}, {&(0x7f0000001b00)="c440a91851f5e8e40217e9663deb200371eaaf02acc87d65bfaffd4db093ace5910b8195bfc14b2a038ab2907496fb601c475f8e74879cc9447a3125a93b3f3515db6150d47cdb645c2f0767c2dd54e1e80c421caa40ac8bdc78cbd453404197b1430965af96763e11279c826e4021fcdb0902b14f039498d57c3e199991522983054d561826bf2d67ba0ecd47296dc387e1ca7848b928c074fedbd7c1d76e3642a47cb7052d1e96dc7d26efd431aaa45ac916c31fc435493e04d353480f48e2aebe9e9ec009151bdbc4edeb2b47b19c49d03e7852c5080a1ba79a9491bb3f693afe2b4dbd5a69f36835d836ea1280a315f81393376e508e4c4b69d5d2dc8d8677a493172663df967db474d60ec726768ea7436032f45397c0075f4683838d2bfd094e751cd959070d285eca8286d1067a25aa22a2671a1917f1fefd944fda2a357837e727662c8d77004631202ec5a7f86037b7815aa9fe0f247538a11f6e2d43b73698f8fe909c21d4ec8bdc240f4d13b71aab76a621e42c86cd1b3020159e3e2a6a7f5b0e40b32f6ff8c0919827b6607cdbd8c0c9e0b76ff70dab92043a4659d7c10d326be73bc775784eb0947482fff43300e44fb80041b99dcb46e9339aaeb34e852b6388050c49c482c9377229db1af8030ee1628ce1ec585db269a07fbbf8e826ef2923c6a34b6d462de07e52b510fcc86dd37aa3ee5e162ee582fb14ca2b2f109c181f601aea382c5d6d696f8d8ca3c1651a5191cbae15af0c670304e75ddd4abd4587f07ae0faff381660dbb10e8e76a1d62b96067b876c4d1ba1cbc79210c0d4a417bf067a93bd89d9c49b3fcfd7b622f77e765e90414769bd688ae8a17988ad6a3fac16f88bb324c122e017f3b9e2617664504c1e229c1e8809a059944dd96cc2d1246fde1741b12c8131e59eb9de07f8d7852d6094a1fbd0cd3c91c2ccb0549c2e3ce6765fd088e6e623529cf36b4ddff6c3b3934acc8ff22c25c50859e2975a8dca28dd3b0b0b68e50fa4b1659e88bffc5d824a635d141c60f62f2871112acd0fca47f0b99f87202c2861857031df17e997c57f222f1e9c16c0f631c802f58c695621144dea608f2655dde0ee4ed4d2625d65ed3d813ca54f172d2c2b64ca7b352c55b99a40f6be034dd425d63010c550a29815748cbb77809adadd5c4bd00bc994ccdeb1727ecdbfb6c4db26482f2432630b704f669917603c3fd2e7fe19018efb2ad3664f0f9034f7322b02ab7c0002ffb3763e0f37b1ec20e96669d6bcbb7d7179aae8a522f08f83c603b6ef4186dbe8166ddcac918c56b6a91d85e04534854f857492b5d0c178c69dc87a4e0afe9a3d615caf00f0f71429da8934ec6ade7b1798a01e26f09e3f3fdcdfb3d089b93eba51f5f96c2c2007243a0e30c1acc8732bcd7a0af5f53cd2c1730a0132db0a847fc1559c4ca4c26686ff2292a39cc652b00d3eced3c4921e15b52932ac51ae8daa10bee093d4942ad4092c6619b25dd76ea72a7006b8afcf2a32262f39462d071719ad164ca9973ebe45bc4bc559338cf4ed055ba26c3aca35abd6a5ca1e4aafb7f2e30d96f479e189e2f3ebc2614e854c4d449dadd30386edc9e3934c186a935aaa3f8273b713941c541076c0f103f17ce0ad767726978d9e2f78dc0aace85283ed011736c1c4bb5716d6c48a945846e263aa2b66855527958681d3a8d8c3aae4e0c7bbfc73384c6068165127b849aab135ec10d4c213d82c1d946c9662ce2fc736ba3c3daff93f99d329b920925adeae996837ab98ad51edc2f3ed38b9844da08c621b06c5c378648340bb56ce0a466bf5202525338ae5b922f38ee082928a0644580b5ec5f0b7e31d0e0cc906de79b6884ccaebfcb9a4ce866fcbefd9aebb5ab80b87852319a6fe53a4385a0656f74e08d34d9e6cd6bfa044b6ed2bdd42ca52730f34793e83fbc06673d99b5688a1d0cc3fcd6e261bcfbf6ad142c094c3acea3a8ac5da52231bb41af4475ec74e97e913447f7932ba6069412b40868641a68992553a31efa632687b8cc3ad16767c1e629e749603807a80323c1ff3afc7bc5153b310c57de69267686e7feca967bfd4b74717ca8da72f7e8c6ac2ce28ba485e2774fc4785ae34c192866b2951e040a9721e5f5f2d3e7d059c8a19faa66e43f51b7514c837ef64fb0a48d4326c3fd4d3141e17ebc83e89162dfd8ec5546947a8c8a521161d47b4c04357dff8bffdaa22a6627efbfd053094c3d1df95834598caab81b8f60c03dededdb73078b74cd988d4c3007dc1f6da190955d614648bd5b9a3a41ff261d35dbec2d75989f12ff3d79142e2f90b5c99b0ea99202a49e333b18facd3a10251f0d9ecd1ebf41e6c315415ab917d89214d4ddb4a2d8e8ccf65b1962a9129107179a6258df099ba1335938fedf7a76cb9dcdd3f2056e2f8c52e6f016f356910e50a5c731eff804234140996f060e4c803d45b4afcba97573dc26a133abacedd22c3848f032bb3d21a37290c9deb22df134c633a6e911811a4642eaa89552123e99693dc6115ae52ec51a79f47db9a1e5f84eb7cddf0adf61623b49ad01b8a24149ff12c7e25470eff1a7d95d879e329f573d154afed42c7eec5e0dde29f2ef53c9e03be7cf172f061f33132e32d51a35df0a1d2caefeafc05ed65eaf0c9c6413a5a5d5ac4aba41eabf7cad9c9ca537d478c7fb251b7db1c7b36372f9ca0a8e9c340b6bff6632609c399bcfd5998cf5ba61f7648b7c0c4a2d9c7ea5f9c31b596301fa1f213a434e4831d6e84e4c9fe00d011be5d12b8cedc8466a9a3c467352a677a435118bcad6b9996fbafcfdd5c84dfa5742db6df9344ee1f4f945bcbb207e4b8ee50925a82e5ee26d5af93b4ed883e8b05b0cf8ab2f578a3ca7e46cfdac9117cc8effe1ba78e8dc3c6cd1e1f58a19e69c9d0fc55c4750e3ea55ab00c5980b0c6ed59fbca9a15b6ebdbfbb19ba83254932c5cef4d4d02575e42f29120ff915db70558c0d83f22089737ff3c42cc6d73413b8ed87797e034560fa746ab64400859faeaa7fd5b29d0d8028402db9104ca50875ae989000e6553bf70fadfe79a3207cfd6914977d9c69edc9aae979dad195804889e8ce66ba18d453db64fa4d33985fd2d783077117b619bad5f1af2ab714929f6c82708bfb93cc113a4d72ad15d8fd395b69ca9fdd05cf7eb86bd7392c41864dc714306919e4a25a78270e0ad75b8914618aafd00754234fa26d955d4553293387d20e7514ba0bd0040bdc55e02e5b092a06844c52a0c32b875ee3b94a5efbbe846e0146dbdfcc5350287303eabfbdde7cf7c97f98918d496bb94d55d550c11e9149321d8d720ff15b67f78cbf6d8222f88a21f683a806ae0ddb3ff13dec0f174e9d8eae4863642c1545e65b503061e9ca386ca8432dbf65683e0cac3c5f3d5d8da54f3714d8572d29f8c00a6a4bc7d068030980029e3e898e9de09dd0d035c7fc4d311669fa77bbf39dd8dd94b1d168179107c485fd3bf286b08f302c3db57c81c622d7dfee14c8b77255b2d05cea4eea26d46b3b784168bddf754715ddc41244d92b82534088c948b2ea637d37bd75a3f984cc92a5a487e4052cc87cdeb004906dd4cd6c75fa2d12bdb6f85f4f724a6dcb2046a6fb924a2c93ebd956fc042c34a6f45c92cd3aff61fab19a30ee840d3a5f34cad03b8ab94125f0c0fe3202993c663c08618d8ad30616e9cb915435ca344967910feadcf92caa308b756fb88f1b93a98980b04feb1afb87c108fa6b0ef90906777a74c0361e1adff031fccd71af267fbd9c3d736a762dc617a8ab24cd1a27569a95d2880246d47bf5439d0196c53ce33ef5e6bd579b8e86f6694135c1c5804f619fdd7a6b801064a001b86abeef811f1b09f6e7b06d4cf48fc5bbec5fec6788cfe5600654e67092a267d8d298d77a27bab0676f4116bc59186782db3d36ec46c7fc310a23b2c29dcc08fd80375e62604ee567098fecee425060ccb1979797eefc837630d01ec1e87e1cf1deeeccee472bea731cdc879f4101a244355f85ff46c152623bf36b4933eddbb72c5b216ab84ebf828602e05f30d81c87566423dc36436c94dd3d309b642f2eba97cdac42be8c4b0bcad10508f020a9c078e295afe00c2a43ebd749feb4d21004a8ff6d0a4fd24746c8106e911ecabfefcb4a697896085f1986df23b383ab6879b9c6064c44d41ca5c3e37a3e612b62c5cffa20f73366e6fc84bb32db7fb4e27858845f542e87c4f4098fb1667bc4e0739234f74c396238c96c5fee79e930eef3096a053b9ead983c9d304db67afcee3fb94a9be0fa3a58eee0fddef74a29f8ad5ac78a67f2a0b273fd0dc18b90227dea5597d85636e63c115990306c2e6e9e1649336dca7fbeea983ee8426484b8cb0730b905a14982942bdbdaac0cd656df76668a28b181aa11db2b74b645bca125893cd044a6274af4540a7a081d17adb6dc9bf6d1f8a9a2b966b1effaf793b36e90f50588dc996587ed55e774f0d2471cbdfcad998a0c72c965435dc20b88f5b0a401d34ea1c5201dd20009466f521d0cc278f7a095810795e9ec8cf60d8f14ffae43fe0f7ddd44cee9aee08daab9d69b2b54eb9dca70b42736e79fb6ba9c88af5d87519d65dba8fc953a17aa8166adb1ade5415b6709c59fbc33d27db48191dc13b023815bd63470204ed404c9abbe99efd67e877f1ff01106468c7c65fdb36b3e6f2047d9d9928e2cdf7d2e362b91eae8a94528e76140ed23c1c6ed34fbe42a7a76359ae68a552ef0ed2568e516fc91ad9008333d6c09ea037cf28705254de9aab39d667f797deb2c0ede374411b5aea5b08b42b4e50ca1fde3f7584a7d787a6864239eb0f53d28fa36d0b1e365a0a53d7fc1e3dff873d8a4b9ed76b5f2849b421d82acd05b5ed50558ae9705f954bcecff334df6f074a2a3d4f06887377e9453369cd3e6d8edac63272d185a2caddf876bf030be0a285089cab3f98dcb63a7040dea8b7dd6aaf8030e319e6b9cbc8d584cf46bdd4812efc4b5a8a8b94c169d8ce84eb9f17f58ef269b5786015ffa1b85d9c67fd63fe2ea3413b90265f50e8469d9f775bae606eca5c17957fc2ad03bc3b2be747651ae9687bc90d39a0b0c057d1d90816259aa1a4973b030d665dae733d47b6139841281bc213adbd3d1f52c4ae83be93d67b4f8daf15be9d12f1deb44723e0569103be1d829c059d7668faff44d98e179ab212e0b9e246386b90b9ec3abd1ee0e7fdfc567d2894536ac30a7e5f675633d628cafb47f65ea5d1cd20b01cc46342e7a6d3a008a0ee453a71edde9cd43d97531e4d8ad1ddd0d7024ee4b305a08957d8992446e531214ac1d8b3ec49cf4ccca138205a6713fa4cbc4e821a3b1977487f090103b60d04d17514d609f3b9b9630fd55f4ffce0c080ad648e9067498e43af91542dba3815515165f986f73d9444d2afecc8924a163cc4c8029d94577c1e67f0d3dd4457833f474da2db3254014401f5e33c0af57123a37ccb9face69079b27f9664e1bf164b26831eea75765c7377e0442d08025f477827bd502c96fbb092d88cb3f576db1e7849a5c5a64ca07defbae58c1455806856941784939768052ca8844ffc27b695f7ad38604f936b878639ec0b28d3b6e5c233dde47ee29b2cf474c801ca6f66b0f9b068cbe9f32b5bdac558948eeb152f60945c49e750ff8ce81e3e2cca476278af8af46bf53e8b98aaaa28c8b3f05057a4cc2c8ae9670d4b54dfc26cf83f7f5a750603a3f265e77dfe6d59568ea07d6366c0e3a5fc2799296a5aff9c9e036833f797aac1fa35", 0x1000}], 0x3}, 0x880) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x6c, r7, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x6c}}, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) close(0x3) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 8.530966ms ago: executing program 3 (id=2430): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000040)={0xfffffff8, 0x0, '\x00', {0x0, @bt={0x6, 0x9f, 0x0, 0x2, 0x7, 0x8, 0x6, 0x11, 0x1, 0x5, 0x6, 0x983, 0x0, 0x10, 0x1c, 0x21, {0x5, 0x3}, 0x8, 0x5}}}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) r5 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x87, 0x3, 0x1, 0x9}, 0xb, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x3, 0xa9ba, 0xc1f, 0x1, 0x7f5b, 0x3, 0x4, 0x5, 0x10004, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x0, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x4, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0xa, 0x7, 0x8, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x6, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0xb, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x8, 0x10d, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x4, 0x6f, 0x80b, 0x1, 0x1, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0xfffffffd, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x200, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xa9, 0x7, 0x49, 0x6, 0x4, 0x5, 0xa3, 0x40003, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x4, 0xd21e, 0x9, 0x12, 0x0, 0x2, 0xfff, 0x926, 0x800100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x81, 0x47, 0x7, 0x0, 0x11, 0x2, 0xffd, 0x7, 0x7, 0x7ffd, 0x7ff, 0x10, 0x9, 0x10001, 0x8000001, 0x10001, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x7, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x4, 0x9, 0x6, 0xc41f, 0x5, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0x9, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400400, 0x8, 0x0, 0x8, 0x7, 0x9, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) pipe(0x0) 0s ago: executing program 0 (id=2431): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000013c0)=[0x0, 0x0], &(0x7f0000001400)=[0x0], 0x0, 0x64, &(0x7f0000001440)=[{}], 0x8, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x60, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)='U\x00\x00\x00 \x00', 0x6}], 0x1}, 0x4000) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4f) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001740)={'syztnl1\x00', &(0x7f00000016c0)={'syztnl0\x00', 0x0, 0x29, 0x5f, 0xf9, 0x1, 0x38, @mcast1, @private0, 0x20, 0x8, 0xffffff60, 0xf}}) r8 = dup(0xffffffffffffffff) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r9, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002800)={&(0x7f0000001780)={0x1068, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff7e30}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xff, 0x8, 0x1, 0x5}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4fc8}}}]}}, {{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9a44}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x55a}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3d}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x38b78127}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4, 0x4a, 0xa, 0xffffffff}, {0x5a, 0x1, 0x5, 0x3}, {0xffff, 0xfd, 0x0, 0x5}, {0x1, 0x0, 0x5f, 0xff}, {0x6, 0x2, 0x3, 0x2}, {0x2, 0xa, 0x5, 0x8}, {0x2, 0x7, 0x9, 0x2ac}, {0x35, 0x8, 0xff, 0x808}]}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x2a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x400, 0x4, 0x9, 0x3}, {0xfffd, 0x10, 0x5, 0x81}, {0x5, 0x9, 0x3, 0x5}, {0x5, 0x4, 0x0, 0x9}, {0x7, 0x10, 0x0, 0xa}, {0x9, 0x7, 0x81, 0x4}, {0xca5f, 0x9, 0x2, 0x2749}, {0x5, 0x1, 0xf4, 0x2}]}}}]}}]}, 0x1068}, 0x1, 0x0, 0x0, 0x8001}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r11 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000000020a0700000000000000000000000004140000001100010000000000000000000700000a0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) kernel console output (not intermixed with test programs): inactive_anon:4620kB active_file:9336kB inactive_file:33064kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:103164kB dirty:660kB writeback:0kB shmem:15012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:24784kB pagetables:3608kB sec_pagetables:144kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 439.584222][T12890] Node 0 DMA free:2276kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:32kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 439.593791][T12890] lowmem_reserve[]: 0 280 280 280 280 [ 439.595641][T12890] Node 0 DMA32 free:18980kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16kB inactive_anon:100kB active_file:12kB inactive_file:1688kB unevictable:3536kB writepending:4kB zspages:192kB present:1032196kB managed:287172kB mlocked:0kB bounce:0kB free_pcp:2908kB local_pcp:2628kB free_cma:0kB [ 439.607891][T12890] lowmem_reserve[]: 0 0 0 0 0 [ 439.610097][T12890] Node 1 DMA32 free:94788kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12752kB inactive_anon:4620kB active_file:9336kB inactive_file:33064kB unevictable:3536kB writepending:660kB zspages:6796kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:38520kB local_pcp:8044kB free_cma:0kB [ 439.623130][T12890] lowmem_reserve[]: 0 0 0 0 0 [ 439.625275][T12890] Node 0 DMA: 121*4kB (UM) 16*8kB (UM) 2*16kB (UM) 5*32kB (UM) 9*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2276kB [ 439.632016][T12890] Node 0 DMA32: 637*4kB (UME) 118*8kB (UME) 68*16kB (UME) 90*32kB (UME) 20*64kB (UME) 14*128kB (UME) 5*256kB (UME) 6*512kB (M) 0*1024kB 0*2048kB 1*4096kB (M) = 18980kB [ 439.752302][T12890] Node 1 DMA32: 1150*4kB (UME) 56*8kB (UM) 273*16kB (UME) 390*32kB (ME) 118*64kB (UME) 79*128kB (ME) 34*256kB (UME) 7*512kB (ME) 2*1024kB (UM) 12*2048kB (M) 4*4096kB (M) = 94856kB [ 439.760476][T12890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 439.764303][T12890] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 439.768107][T12890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 439.771957][T12890] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 439.775636][T12890] 16455 total pagecache pages [ 439.777657][T12890] 792 pages in swap cache [ 439.779458][T12890] Free swap = 98304kB [ 439.781155][T12890] Total swap = 124996kB [ 439.782998][T12890] 524155 pages RAM [ 439.784602][T12890] 0 pages HighMem/MovableOnly [ 439.786723][T12890] 211469 pages reserved [ 439.788675][T12890] 0 pages cma reserved [ 440.307432][ T5826] usb usb8-port1: attempt power cycle [ 440.590702][ T7692] usb usb38-port1: unable to enumerate USB device [ 440.879265][ T5826] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 440.908292][ T5826] usb 8-1: device descriptor read/8, error -71 [ 441.278174][T12906] block nbd108: Receive control failed (result -32) [ 441.427655][ T5826] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 441.449401][ T5826] usb 8-1: device descriptor read/8, error -71 [ 441.560302][ T5826] usb usb8-port1: unable to enumerate USB device [ 441.936869][T12924] netlink: 'syz.2.1751': attribute type 1 has an invalid length. [ 442.606728][T12940] netlink: 'syz.3.1756': attribute type 1 has an invalid length. [ 443.998746][T12972] block nbd109: Receive control failed (result -32) [ 444.550085][T12979] netlink: 'syz.3.1762': attribute type 1 has an invalid length. [ 444.898401][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.629441][T13014] netlink: 'syz.0.1771': attribute type 1 has an invalid length. [ 446.693673][T13014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1771'. [ 447.619396][T13032] block nbd110: Receive control failed (result -32) [ 447.947820][T13043] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 448.847969][ T1004] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 449.187685][ T1004] usb 5-1: Using ep0 maxpacket: 8 [ 449.191946][ T1004] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.195859][ T1004] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.200970][ T1004] usb 5-1: config 0 interface 0 has no altsetting 0 [ 449.203262][ T1004] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 449.206096][ T1004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.219704][ T1004] usb 5-1: config 0 descriptor?? [ 449.310115][T13063] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 449.812958][ T1004] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 449.821943][ T1004] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 449.824635][ T1004] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 449.826884][ T1004] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 449.829249][ T1004] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 449.834440][ T1004] mcp2221 0003:04D8:00DD.0021: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 450.096808][ T1004] usb 5-1: USB disconnect, device number 38 [ 452.147668][T13097] block nbd111: Receive control failed (result -32) [ 453.030497][T13122] netlink: 'syz.0.1794': attribute type 1 has an invalid length. [ 453.064913][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'. [ 453.068737][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1794'. [ 453.225086][T13118] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 454.215413][T13138] warn_alloc: 1 callbacks suppressed [ 454.215462][T13138] syz.3.1797: vmalloc error: size 3449536512, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 454.222114][T13138] CPU: 1 UID: 0 PID: 13138 Comm: syz.3.1797 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.222144][T13138] Tainted: [L]=SOFTLOCKUP [ 454.222151][T13138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 454.222163][T13138] Call Trace: [ 454.222186][T13138] [ 454.222194][T13138] dump_stack_lvl+0x100/0x190 [ 454.222223][T13138] warn_alloc.cold+0x94/0xa8 [ 454.222244][T13138] ? __pfx_warn_alloc+0x10/0x10 [ 454.222263][T13138] ? __pfx_stack_trace_save+0x10/0x10 [ 454.222290][T13138] ? kasan_save_stack+0x3f/0x50 [ 454.222314][T13138] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 454.222342][T13138] ? vb2_vmalloc_alloc+0xf9/0x410 [ 454.222370][T13138] ? __vb2_queue_alloc+0x8d5/0x1160 [ 454.222394][T13138] ? vb2_core_create_bufs+0x5fa/0xa30 [ 454.222418][T13138] ? vb2_create_bufs+0x40c/0x830 [ 454.222439][T13138] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 454.222462][T13138] ? vidioc_create_bufs+0x7d/0xf0 [ 454.222489][T13138] ? v4l_create_bufs+0x17d/0x270 [ 454.222507][T13138] ? video_usercopy+0x3d3/0x14c0 [ 454.222531][T13138] ? v4l2_ioctl+0x1bd/0x250 [ 454.222552][T13138] ? v4l2_compat_ioctl32+0x20f/0x2d0 [ 454.222584][T13138] ? vb2_vmalloc_alloc+0x135/0x410 [ 454.222614][T13138] __vmalloc_node_range_noprof+0x136c/0x1630 [ 454.222652][T13138] ? vb2_vmalloc_alloc+0x135/0x410 [ 454.222688][T13138] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 454.222719][T13138] ? kasan_save_track+0x14/0x30 [ 454.222739][T13138] ? __kasan_kmalloc+0xaa/0xb0 [ 454.222759][T13138] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 454.222788][T13138] ? vb2_vmalloc_alloc+0x135/0x410 [ 454.222815][T13138] vmalloc_user_noprof+0x9e/0xe0 [ 454.222840][T13138] ? vb2_vmalloc_alloc+0x135/0x410 [ 454.222868][T13138] vb2_vmalloc_alloc+0x135/0x410 [ 454.222894][T13138] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 454.222922][T13138] __vb2_queue_alloc+0x8d5/0x1160 [ 454.222962][T13138] vb2_core_create_bufs+0x5fa/0xa30 [ 454.222992][T13138] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 454.223023][T13138] ? lock_acquire+0x1b9/0x370 [ 454.223055][T13138] vb2_create_bufs+0x40c/0x830 [ 454.223083][T13138] ? __pfx_vb2_create_bufs+0x10/0x10 [ 454.223108][T13138] ? v4l_sanitize_colorspace+0x220/0x410 [ 454.223138][T13138] vb2_ioctl_create_bufs+0x244/0x3e0 [ 454.223162][T13138] ? v4l2_compat_get_user+0x883/0x11f0 [ 454.223178][T13138] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 454.223205][T13138] vidioc_create_bufs+0x7d/0xf0 [ 454.223237][T13138] v4l_create_bufs+0x17d/0x270 [ 454.223257][T13138] __video_do_ioctl+0xb2a/0xdf0 [ 454.223282][T13138] ? trace_kmalloc+0xeb/0x110 [ 454.223304][T13138] ? __pfx___video_do_ioctl+0x10/0x10 [ 454.223328][T13138] ? video_usercopy+0x145/0x14c0 [ 454.223353][T13138] video_usercopy+0x3d3/0x14c0 [ 454.223375][T13138] ? __pfx___video_do_ioctl+0x10/0x10 [ 454.223399][T13138] ? __pfx_video_usercopy+0x10/0x10 [ 454.223430][T13138] ? __fget_files+0x215/0x3d0 [ 454.223455][T13138] ? hook_file_ioctl_common+0x140/0x440 [ 454.223482][T13138] v4l2_ioctl+0x1bd/0x250 [ 454.223507][T13138] v4l2_compat_ioctl32+0x20f/0x2d0 [ 454.223542][T13138] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 454.223572][T13138] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 454.223601][T13138] __do_fast_syscall_32+0xe7/0x970 [ 454.223632][T13138] ? lockdep_hardirqs_on+0x78/0x100 [ 454.223661][T13138] do_fast_syscall_32+0x32/0x70 [ 454.223688][T13138] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 454.223712][T13138] RIP: 0023:0xf707efec [ 454.223734][T13138] Code: Unable to access opcode bytes at 0xf707efc2. [ 454.223744][T13138] RSP: 002b:00000000f542b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 454.223763][T13138] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0f8565c [ 454.223775][T13138] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 454.223787][T13138] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 454.223798][T13138] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 454.223810][T13138] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 454.223837][T13138] [ 454.223904][T13138] Mem-Info: [ 454.414972][T13138] active_anon:9028 inactive_anon:1382 isolated_anon:0 [ 454.414972][T13138] active_file:5284 inactive_file:11772 isolated_file:0 [ 454.414972][T13138] unevictable:1768 dirty:23 writeback:0 [ 454.414972][T13138] slab_reclaimable:11841 slab_unreclaimable:71978 [ 454.414972][T13138] mapped:31922 shmem:10394 pagetables:1256 [ 454.414972][T13138] sec_pagetables:315 bounce:0 [ 454.414972][T13138] kernel_misc_reclaimable:0 [ 454.414972][T13138] free:22905 free_pcp:2927 free_cma:0 [ 454.432472][T13138] Node 0 active_anon:60kB inactive_anon:132kB active_file:16kB inactive_file:1688kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:0kB shmem:3580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9248kB pagetables:1288kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 454.446070][T13138] Node 1 active_anon:36052kB inactive_anon:5396kB active_file:21120kB inactive_file:45400kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:127616kB dirty:92kB writeback:0kB shmem:37996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:25636kB pagetables:3736kB sec_pagetables:148kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 454.460360][T13138] Node 0 DMA free:2276kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:32kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 454.582129][T13138] lowmem_reserve[]: 0 280 280 280 280 [ 454.584607][T13138] Node 0 DMA32 free:18080kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60kB inactive_anon:100kB active_file:12kB inactive_file:1688kB unevictable:3536kB writepending:0kB zspages:192kB present:1032196kB managed:287172kB mlocked:0kB bounce:0kB free_pcp:3804kB local_pcp:2576kB free_cma:0kB [ 454.597303][T13138] lowmem_reserve[]: 0 0 0 0 0 [ 454.601418][T13138] Node 1 DMA32 free:70828kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36164kB inactive_anon:5396kB active_file:21120kB inactive_file:45400kB unevictable:3536kB writepending:100kB zspages:6708kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:8076kB local_pcp:704kB free_cma:0kB [ 454.616012][T13138] lowmem_reserve[]: 0 0 0 0 0 [ 454.620335][T13138] Node 0 DMA: 121*4kB (UM) 16*8kB (UM) 2*16kB (UM) 5*32kB (UM) 9*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2276kB [ 454.674340][T13138] Node 0 DMA32: 604*4kB (UME) 98*8kB (UME) 66*16kB (UME) 94*32kB (UME) 27*64kB (UME) 11*128kB (UME) 10*256kB (UME) 2*512kB (M) 0*1024kB 0*2048kB 1*4096kB (M) = 18080kB [ 454.764352][T13138] Node 1 DMA32: 60*4kB (UME) 37*8kB (UE) 20*16kB (UME) 77*32kB (UME) 82*64kB (UME) 90*128kB (UME) 36*256kB (UME) 9*512kB (UME) 2*1024kB (ME) 13*2048kB (ME) 2*4096kB (M) = 70776kB [ 454.841085][T13138] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.847346][T13138] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 454.854347][T13138] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 454.859996][T13138] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 454.873335][T13138] 28495 total pagecache pages [ 454.886335][T13138] 1046 pages in swap cache [ 454.896211][T13138] Free swap = 98304kB [ 454.905049][T13138] Total swap = 124996kB [ 454.910335][T13138] 524155 pages RAM [ 454.913732][T13138] 0 pages HighMem/MovableOnly [ 454.915963][T13138] 211469 pages reserved [ 454.917954][T13138] 0 pages cma reserved [ 457.801840][T13183] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 457.821743][T13179] block nbd112: Receive control failed (result -32) [ 458.816171][T13195] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 458.818275][T13195] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 458.836532][T13195] vhci_hcd vhci_hcd.0: Device attached [ 459.427790][ T60] usb 42-1: SetAddress Request (62) to port 0 [ 459.427894][ T60] usb 42-1: new SuperSpeed USB device number 62 using vhci_hcd [ 459.703212][T13204] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1810'. [ 459.740413][T13206] netlink: 'syz.1.1811': attribute type 1 has an invalid length. [ 460.897281][T13221] netlink: 'syz.0.1815': attribute type 1 has an invalid length. [ 461.267640][ T1004] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 461.384201][T13182] block nbd113: Receive control failed (result -32) [ 461.436137][ T1004] usb 5-1: unable to get BOS descriptor or descriptor too short [ 461.441196][ T1004] usb 5-1: no configurations [ 461.443264][ T1004] usb 5-1: can't read configurations, error -22 [ 461.686798][T13243] netlink: 'syz.2.1820': attribute type 1 has an invalid length. [ 464.367756][T13196] vhci_hcd: connection reset by peer [ 464.370490][ T12] vhci_hcd vhci_hcd.2: stop threads [ 464.375389][ T12] vhci_hcd vhci_hcd.2: release socket [ 464.379196][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 464.542759][ T60] usb 42-1: device descriptor read/8, error -110 [ 464.578173][T13287] netlink: 'syz.1.1831': attribute type 1 has an invalid length. [ 464.585577][T13288] warn_alloc: 3 callbacks suppressed [ 464.585608][T13288] syz.0.1830: vmalloc error: size 3449536512, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 464.591891][T13288] CPU: 1 UID: 0 PID: 13288 Comm: syz.0.1830 Tainted: G L syzkaller #0 PREEMPT(full) [ 464.591924][T13288] Tainted: [L]=SOFTLOCKUP [ 464.591929][T13288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 464.591937][T13288] Call Trace: [ 464.591943][T13288] [ 464.591948][T13288] dump_stack_lvl+0x100/0x190 [ 464.591968][T13288] warn_alloc.cold+0x94/0xa8 [ 464.591981][T13288] ? __pfx_warn_alloc+0x10/0x10 [ 464.591993][T13288] ? __pfx_stack_trace_save+0x10/0x10 [ 464.592010][T13288] ? kasan_save_stack+0x3f/0x50 [ 464.592024][T13288] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 464.592060][T13288] ? vb2_vmalloc_alloc+0xf9/0x410 [ 464.592078][T13288] ? __vb2_queue_alloc+0x8d5/0x1160 [ 464.592094][T13288] ? vb2_core_create_bufs+0x5fa/0xa30 [ 464.592110][T13288] ? vb2_create_bufs+0x40c/0x830 [ 464.592123][T13288] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 464.592137][T13288] ? vidioc_create_bufs+0x7d/0xf0 [ 464.592155][T13288] ? v4l_create_bufs+0x17d/0x270 [ 464.592170][T13288] ? video_usercopy+0x3d3/0x14c0 [ 464.592182][T13288] ? v4l2_ioctl+0x1bd/0x250 [ 464.592195][T13288] ? v4l2_compat_ioctl32+0x20f/0x2d0 [ 464.592213][T13288] ? vb2_vmalloc_alloc+0x135/0x410 [ 464.592231][T13288] __vmalloc_node_range_noprof+0x136c/0x1630 [ 464.592255][T13288] ? vb2_vmalloc_alloc+0x135/0x410 [ 464.592276][T13288] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 464.592296][T13288] ? kasan_save_track+0x14/0x30 [ 464.592308][T13288] ? __kasan_kmalloc+0xaa/0xb0 [ 464.592321][T13288] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 464.592338][T13288] ? vb2_vmalloc_alloc+0x135/0x410 [ 464.592355][T13288] vmalloc_user_noprof+0x9e/0xe0 [ 464.592370][T13288] ? vb2_vmalloc_alloc+0x135/0x410 [ 464.592387][T13288] vb2_vmalloc_alloc+0x135/0x410 [ 464.592403][T13288] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 464.592421][T13288] __vb2_queue_alloc+0x8d5/0x1160 [ 464.592444][T13288] vb2_core_create_bufs+0x5fa/0xa30 [ 464.592462][T13288] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 464.592481][T13288] ? lock_acquire+0x1b9/0x370 [ 464.592500][T13288] vb2_create_bufs+0x40c/0x830 [ 464.592517][T13288] ? __pfx_vb2_create_bufs+0x10/0x10 [ 464.592532][T13288] ? v4l_sanitize_colorspace+0x220/0x410 [ 464.592550][T13288] vb2_ioctl_create_bufs+0x244/0x3e0 [ 464.592565][T13288] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 464.592581][T13288] vidioc_create_bufs+0x7d/0xf0 [ 464.592600][T13288] v4l_create_bufs+0x17d/0x270 [ 464.592613][T13288] __video_do_ioctl+0xb2a/0xdf0 [ 464.592628][T13288] ? trace_kmalloc+0xeb/0x110 [ 464.592641][T13288] ? __pfx___video_do_ioctl+0x10/0x10 [ 464.592655][T13288] ? video_usercopy+0x145/0x14c0 [ 464.592670][T13288] video_usercopy+0x3d3/0x14c0 [ 464.592683][T13288] ? __pfx___video_do_ioctl+0x10/0x10 [ 464.592697][T13288] ? __pfx_video_usercopy+0x10/0x10 [ 464.592714][T13288] ? __fget_files+0x215/0x3d0 [ 464.592730][T13288] ? hook_file_ioctl_common+0x140/0x440 [ 464.592746][T13288] v4l2_ioctl+0x1bd/0x250 [ 464.592761][T13288] v4l2_compat_ioctl32+0x20f/0x2d0 [ 464.592780][T13288] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 464.592798][T13288] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 464.592816][T13288] __do_fast_syscall_32+0xe7/0x970 [ 464.592838][T13288] ? lockdep_hardirqs_on+0x78/0x100 [ 464.592862][T13288] do_fast_syscall_32+0x32/0x70 [ 464.592887][T13288] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 464.592907][T13288] RIP: 0023:0xf7f86fec [ 464.592930][T13288] Code: Unable to access opcode bytes at 0xf7f86fc2. [ 464.592940][T13288] RSP: 002b:00000000f540450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 464.592957][T13288] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0f8565c [ 464.592969][T13288] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 464.592979][T13288] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 464.592990][T13288] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 464.593000][T13288] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 464.593024][T13288] [ 464.593074][T13288] Mem-Info: [ 464.743068][T13288] active_anon:10470 inactive_anon:6700 isolated_anon:0 [ 464.743068][T13288] active_file:1031 inactive_file:5983 isolated_file:0 [ 464.743068][T13288] unevictable:1768 dirty:240 writeback:0 [ 464.743068][T13288] slab_reclaimable:12067 slab_unreclaimable:72433 [ 464.743068][T13288] mapped:33926 shmem:17446 pagetables:1153 [ 464.743068][T13288] sec_pagetables:315 bounce:0 [ 464.743068][T13288] kernel_misc_reclaimable:0 [ 464.743068][T13288] free:20508 free_pcp:7436 free_cma:0 [ 464.761707][T13288] Node 0 active_anon:56kB inactive_anon:152kB active_file:16kB inactive_file:1664kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:0kB writeback:0kB shmem:3576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9248kB pagetables:1288kB sec_pagetables:1112kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 464.775562][T13288] Node 1 active_anon:41824kB inactive_anon:26648kB active_file:4108kB inactive_file:22268kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:135636kB dirty:960kB writeback:0kB shmem:66208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:25984kB pagetables:3324kB sec_pagetables:148kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 464.789892][T13288] Node 0 DMA free:2276kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:32kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 464.801860][T13288] lowmem_reserve[]: 0 280 280 280 280 [ 464.803772][T13288] Node 0 DMA32 free:16072kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56kB inactive_anon:120kB active_file:12kB inactive_file:1664kB unevictable:3536kB writepending:0kB zspages:208kB present:1032196kB managed:287172kB mlocked:0kB bounce:0kB free_pcp:5836kB local_pcp:3436kB free_cma:0kB [ 464.813795][T13288] lowmem_reserve[]: 0 0 0 0 0 [ 464.815456][T13288] Node 1 DMA32 free:63684kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41824kB inactive_anon:26648kB active_file:4108kB inactive_file:22268kB unevictable:3536kB writepending:960kB zspages:5956kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:23932kB local_pcp:15932kB free_cma:0kB [ 464.917602][T13288] lowmem_reserve[]: 0 0 0 0 0 [ 464.919297][T13288] Node 0 DMA: 121*4kB (UM) 16*8kB (UM) 2*16kB (UM) 5*32kB (UM) 9*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2276kB [ 464.924378][T13288] Node 0 DMA32: 670*4kB (UME) 118*8kB (UME) 68*16kB (UME) 91*32kB (UME) 20*64kB (UME) 2*128kB (UE) 3*256kB (UE) 4*512kB (M) 0*1024kB 0*2048kB 1*4096kB (M) = 16072kB [ 464.930026][T13288] Node 1 DMA32: 103*4kB (UME) 25*8kB (U) 42*16kB (UM) 172*32kB (UME) 128*64kB (UME) 66*128kB (UM) 13*256kB (UM) 9*512kB (UM) 2*1024kB (ME) 13*2048kB (ME) 1*4096kB (M) = 64132kB [ 464.936990][T13288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.940808][T13288] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 464.944412][T13288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 464.948230][T13288] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 464.951809][T13288] 25085 total pagecache pages [ 464.953699][T13288] 591 pages in swap cache [ 464.955408][T13288] Free swap = 69856kB [ 464.957022][T13288] Total swap = 124996kB [ 464.958730][T13288] 524155 pages RAM [ 464.960236][T13288] 0 pages HighMem/MovableOnly [ 464.962079][T13288] 211469 pages reserved [ 464.963763][T13288] 0 pages cma reserved [ 466.093221][ T60] usb usb42-port1: attempt power cycle [ 466.174957][T13297] netlink: 'syz.2.1833': attribute type 1 has an invalid length. [ 466.298634][T13238] block nbd114: Receive control failed (result -32) [ 466.648687][ T60] usb usb42-port1: unable to enumerate USB device [ 466.816890][T13322] netlink: 'syz.0.1840': attribute type 1 has an invalid length. [ 467.780410][T13331] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 467.782498][T13331] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 467.984168][T13331] vhci_hcd vhci_hcd.0: Device attached [ 468.559952][ T60] usb 38-1: SetAddress Request (66) to port 0 [ 468.563741][ T60] usb 38-1: new SuperSpeed USB device number 66 using vhci_hcd [ 468.666983][T13346] netlink: 'syz.2.1845': attribute type 1 has an invalid length. [ 469.084774][T13350] netlink: 'syz.2.1846': attribute type 1 has an invalid length. [ 469.717462][T13362] netlink: 'syz.0.1849': attribute type 1 has an invalid length. [ 470.075615][T13376] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 470.078404][T13376] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 470.123003][T13376] vhci_hcd vhci_hcd.0: Device attached [ 470.188210][ T6380] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 470.407899][ T6557] usb 42-1: SetAddress Request (66) to port 0 [ 470.428528][ T6557] usb 42-1: new SuperSpeed USB device number 66 using vhci_hcd [ 470.582704][T13386] block nbd115: Receive control failed (result -32) [ 470.634207][ T6380] usb 8-1: unable to get BOS descriptor or descriptor too short [ 470.636712][ T6380] usb 8-1: no configurations [ 470.638543][ T6380] usb 8-1: can't read configurations, error -22 [ 471.201553][T13393] netlink: 'syz.1.1854': attribute type 1 has an invalid length. [ 471.566208][T13402] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 471.569004][T13402] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 471.593384][T13402] vhci_hcd vhci_hcd.0: Device attached [ 471.975995][ T5833] usb 44-1: SetAddress Request (70) to port 0 [ 472.062284][ T5833] usb 44-1: new SuperSpeed USB device number 70 using vhci_hcd [ 472.325139][T13409] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 473.751507][T13438] netlink: 'syz.1.1865': attribute type 1 has an invalid length. [ 474.091796][T13419] block nbd116: Receive control failed (result -32) [ 474.891053][T13460] netlink: 'syz.0.1869': attribute type 1 has an invalid length. [ 476.086333][T13477] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 476.217844][T13335] vhci_hcd: connection reset by peer [ 476.400426][ T8888] vhci_hcd vhci_hcd.0: stop threads [ 476.403067][ T8888] vhci_hcd vhci_hcd.0: release socket [ 476.408005][ T8888] vhci_hcd vhci_hcd.0: disconnect device [ 476.499340][ T60] usb 38-1: device descriptor read/8, error -110 [ 477.043735][ T60] usb usb38-port1: attempt power cycle [ 477.494481][T13495] netlink: 'syz.3.1875': attribute type 1 has an invalid length. [ 477.678392][ T60] usb usb38-port1: unable to enumerate USB device [ 478.070922][T13509] netlink: 'syz.3.1878': attribute type 1 has an invalid length. [ 478.701380][T13403] vhci_hcd: connection reset by peer [ 478.707044][ T5791] vhci_hcd vhci_hcd.3: stop threads [ 478.713044][ T5791] vhci_hcd vhci_hcd.3: release socket [ 478.717284][ T5833] usb 44-1: device descriptor read/8, error -110 [ 478.717310][ T5791] vhci_hcd vhci_hcd.3: disconnect device [ 478.778453][T13517] block nbd117: Receive control failed (result -32) [ 478.988242][T13522] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 478.990328][T13522] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 479.007792][T13522] vhci_hcd vhci_hcd.0: Device attached [ 479.097571][T13377] vhci_hcd: connection reset by peer [ 479.106045][ T7308] vhci_hcd vhci_hcd.2: stop threads [ 479.110566][ T7308] vhci_hcd vhci_hcd.2: release socket [ 479.114727][ T6557] usb 42-1: device descriptor read/8, error -110 [ 479.114797][ T7308] vhci_hcd vhci_hcd.2: disconnect device [ 479.207652][ T5833] usb 44-1: SetAddress Request (71) to port 0 [ 479.209649][ T5833] usb 44-1: new SuperSpeed USB device number 71 using vhci_hcd [ 479.260329][T13493] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 479.260357][T13493] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 479.265023][T13493] vhci_hcd vhci_hcd.0: Device attached [ 479.446978][ T6557] usb 42-1: SetAddress Request (67) to port 0 [ 479.447021][ T6557] usb 42-1: new SuperSpeed USB device number 67 using vhci_hcd [ 479.688595][T13535] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 481.915260][T13553] netlink: 'syz.1.1887': attribute type 1 has an invalid length. [ 481.917947][T13555] netlink: 'syz.2.1885': attribute type 1 has an invalid length. [ 481.987100][T13559] netlink: 'syz.0.1888': attribute type 1 has an invalid length. [ 482.534023][T13567] netlink: 'syz.2.1890': attribute type 1 has an invalid length. [ 483.892492][T13585] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 483.894620][T13585] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 483.922800][T13585] vhci_hcd vhci_hcd.0: Device attached [ 484.207898][T13465] usb 38-1: SetAddress Request (70) to port 0 [ 484.212802][T13465] usb 38-1: new SuperSpeed USB device number 70 using vhci_hcd [ 484.647024][T13604] netlink: 'syz.2.1897': attribute type 1 has an invalid length. [ 484.656967][T13602] netlink: 'syz.1.1898': attribute type 1 has an invalid length. [ 484.735319][T13608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1897'. [ 485.315662][T13526] vhci_hcd: connection reset by peer [ 485.443640][ T7308] vhci_hcd vhci_hcd.2: stop threads [ 485.450677][ T7308] vhci_hcd vhci_hcd.2: release socket [ 485.454805][ T7308] vhci_hcd vhci_hcd.2: disconnect device [ 485.470292][ T6557] usb 42-1: device descriptor read/8, error -110 [ 485.653606][ T6557] usb usb42-port1: attempt power cycle [ 485.887818][ T1354] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 487.156958][ T1354] usb 6-1: Using ep0 maxpacket: 8 [ 487.214505][T13622] netlink: 'syz.3.1902': attribute type 1 has an invalid length. [ 487.263771][ T1354] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.268733][ T6557] usb usb42-port1: unable to enumerate USB device [ 487.278429][ T1354] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.292326][ T1354] usb 6-1: config 0 interface 0 has no altsetting 0 [ 487.296055][T13588] vhci_hcd: connection reset by peer [ 487.298473][ T1354] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 487.299364][ T8202] vhci_hcd vhci_hcd.0: stop threads [ 487.310433][ T8202] vhci_hcd vhci_hcd.0: release socket [ 487.315924][ T1354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.316939][ T8202] vhci_hcd vhci_hcd.0: disconnect device [ 487.335873][ T1354] usb 6-1: config 0 descriptor?? [ 487.341601][T13624] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 487.344115][T13624] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 487.389594][T13624] vhci_hcd vhci_hcd.0: Device attached [ 487.657683][ T60] usb 42-1: SetAddress Request (70) to port 0 [ 487.659622][ T60] usb 42-1: new SuperSpeed USB device number 70 using vhci_hcd [ 488.299979][ T1354] mcp2221 0003:04D8:00DD.0022: unknown main item tag 0x0 [ 488.307956][ T1354] mcp2221 0003:04D8:00DD.0022: unknown main item tag 0x0 [ 488.314483][ T1354] mcp2221 0003:04D8:00DD.0022: unknown main item tag 0x0 [ 488.321632][ T1354] mcp2221 0003:04D8:00DD.0022: unknown main item tag 0x0 [ 488.330853][ T1354] mcp2221 0003:04D8:00DD.0022: unknown main item tag 0x0 [ 488.337721][ T1354] mcp2221 0003:04D8:00DD.0022: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 488.914037][ T1354] usb 6-1: USB disconnect, device number 43 [ 489.188839][T13645] warn_alloc: 1 callbacks suppressed [ 489.188881][T13645] syz.3.1906: vmalloc error: size 3449536512, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 489.196244][T13645] CPU: 1 UID: 0 PID: 13645 Comm: syz.3.1906 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.196287][T13645] Tainted: [L]=SOFTLOCKUP [ 489.196294][T13645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 489.196305][T13645] Call Trace: [ 489.196314][T13645] [ 489.196322][T13645] dump_stack_lvl+0x100/0x190 [ 489.196348][T13645] warn_alloc.cold+0x94/0xa8 [ 489.196368][T13645] ? __pfx_warn_alloc+0x10/0x10 [ 489.196389][T13645] ? kasan_save_stack+0x3f/0x50 [ 489.196410][T13645] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 489.196436][T13645] ? vb2_vmalloc_alloc+0xf9/0x410 [ 489.196461][T13645] ? __vb2_queue_alloc+0x8d5/0x1160 [ 489.196482][T13645] ? vb2_core_create_bufs+0x5fa/0xa30 [ 489.196503][T13645] ? vb2_create_bufs+0x40c/0x830 [ 489.196521][T13645] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 489.196541][T13645] ? vidioc_create_bufs+0x7d/0xf0 [ 489.196567][T13645] ? v4l_create_bufs+0x17d/0x270 [ 489.196583][T13645] ? video_usercopy+0x3d3/0x14c0 [ 489.196601][T13645] ? v4l2_ioctl+0x1bd/0x250 [ 489.196619][T13645] ? v4l2_compat_ioctl32+0x20f/0x2d0 [ 489.196647][T13645] ? vb2_vmalloc_alloc+0x135/0x410 [ 489.196671][T13645] __vmalloc_node_range_noprof+0x136c/0x1630 [ 489.196704][T13645] ? vb2_vmalloc_alloc+0x135/0x410 [ 489.196734][T13645] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 489.196761][T13645] ? kasan_save_track+0x14/0x30 [ 489.196779][T13645] ? __kasan_kmalloc+0xaa/0xb0 [ 489.196797][T13645] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 489.196822][T13645] ? vb2_vmalloc_alloc+0x135/0x410 [ 489.196846][T13645] vmalloc_user_noprof+0x9e/0xe0 [ 489.196868][T13645] ? vb2_vmalloc_alloc+0x135/0x410 [ 489.196892][T13645] vb2_vmalloc_alloc+0x135/0x410 [ 489.196922][T13645] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 489.196949][T13645] __vb2_queue_alloc+0x8d5/0x1160 [ 489.196985][T13645] vb2_core_create_bufs+0x5fa/0xa30 [ 489.197011][T13645] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 489.197038][T13645] ? irqentry_exit+0x24d/0xa00 [ 489.197069][T13645] vb2_create_bufs+0x40c/0x830 [ 489.197096][T13645] ? __pfx_vb2_create_bufs+0x10/0x10 [ 489.197115][T13645] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 489.197138][T13645] ? v4l_sanitize_colorspace+0x220/0x410 [ 489.197165][T13645] vb2_ioctl_create_bufs+0x244/0x3e0 [ 489.197186][T13645] ? v4l2_compat_get_user+0x883/0x11f0 [ 489.197202][T13645] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 489.197224][T13645] vidioc_create_bufs+0x7d/0xf0 [ 489.197252][T13645] v4l_create_bufs+0x17d/0x270 [ 489.197271][T13645] __video_do_ioctl+0xb2a/0xdf0 [ 489.197293][T13645] ? trace_kmalloc+0xeb/0x110 [ 489.197313][T13645] ? __pfx___video_do_ioctl+0x10/0x10 [ 489.197335][T13645] ? video_usercopy+0x145/0x14c0 [ 489.197357][T13645] video_usercopy+0x3d3/0x14c0 [ 489.197377][T13645] ? __pfx___video_do_ioctl+0x10/0x10 [ 489.197398][T13645] ? __pfx_video_usercopy+0x10/0x10 [ 489.197424][T13645] ? __fget_files+0x215/0x3d0 [ 489.197447][T13645] ? hook_file_ioctl_common+0x140/0x440 [ 489.197471][T13645] v4l2_ioctl+0x1bd/0x250 [ 489.197493][T13645] v4l2_compat_ioctl32+0x20f/0x2d0 [ 489.197530][T13645] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 489.197550][T13645] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 489.197568][T13645] __do_fast_syscall_32+0xe7/0x970 [ 489.197587][T13645] ? lockdep_hardirqs_on+0x78/0x100 [ 489.197606][T13645] do_fast_syscall_32+0x32/0x70 [ 489.197624][T13645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 489.197639][T13645] RIP: 0023:0xf707efec [ 489.197654][T13645] Code: Unable to access opcode bytes at 0xf707efc2. [ 489.197659][T13645] RSP: 002b:00000000f542b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 489.197671][T13645] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0f8565c [ 489.197677][T13645] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 489.197683][T13645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 489.197690][T13645] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 489.197696][T13645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 489.197711][T13645] [ 489.215768][T13646] netlink: 'syz.0.1907': attribute type 1 has an invalid length. [ 489.218275][T13645] Mem-Info: [ 489.357611][T13645] active_anon:866 inactive_anon:6729 isolated_anon:0 [ 489.357611][T13645] active_file:909 inactive_file:10237 isolated_file:0 [ 489.357611][T13645] unevictable:1768 dirty:32 writeback:0 [ 489.357611][T13645] slab_reclaimable:12405 slab_unreclaimable:73912 [ 489.357611][T13645] mapped:31704 shmem:8066 pagetables:1224 [ 489.357611][T13645] sec_pagetables:322 bounce:0 [ 489.357611][T13645] kernel_misc_reclaimable:0 [ 489.357611][T13645] free:25405 free_pcp:5073 free_cma:0 [ 489.373015][T13645] Node 0 active_anon:104kB inactive_anon:180kB active_file:12kB inactive_file:3084kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:152kB dirty:0kB writeback:0kB shmem:3588kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9280kB pagetables:1284kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 489.384563][T13645] Node 1 active_anon:3360kB inactive_anon:26736kB active_file:3624kB inactive_file:37864kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:126664kB dirty:128kB writeback:0kB shmem:28676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:27148kB pagetables:3612kB sec_pagetables:156kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 489.396190][T13645] Node 0 DMA free:2036kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:32kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:220kB local_pcp:220kB free_cma:0kB [ 489.406804][T13645] lowmem_reserve[]: 0 280 280 280 280 [ 489.409437][T13645] Node 0 DMA32 free:18880kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:0KB free_highatomic:0KB active_anon:104kB inactive_anon:148kB active_file:12kB inactive_file:3084kB unevictable:3536kB writepending:0kB zspages:256kB present:1032196kB managed:287172kB mlocked:0kB bounce:0kB free_pcp:1084kB local_pcp:832kB free_cma:0kB [ 489.424444][T13645] lowmem_reserve[]: 0 0 0 0 0 [ 489.426810][T13645] Node 1 DMA32 free:80620kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048KB free_highatomic:1528KB active_anon:3428kB inactive_anon:26676kB active_file:3608kB inactive_file:37896kB unevictable:3536kB writepending:156kB zspages:6564kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:18948kB local_pcp:9108kB free_cma:0kB [ 489.438058][T13645] lowmem_reserve[]: 0 0 0 0 0 [ 489.440056][T13645] Node 0 DMA: 91*4kB (UM) 15*8kB (UM) 3*16kB (UM) 5*32kB (UM) 7*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2036kB [ 489.445842][T13645] Node 0 DMA32: 460*4kB (U) 118*8kB (UME) 89*16kB (UME) 96*32kB (UME) 29*64kB (UME) 18*128kB (UME) 11*256kB (UME) 7*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 18864kB [ 489.452578][T13645] Node 1 DMA32: 2167*4kB (UMEH) 624*8kB (UMEH) 677*16kB (UMEH) 387*32kB (UMEH) 110*64kB (UMEH) 53*128kB (UME) 25*256kB (UMEH) 10*512kB (UMH) 2*1024kB (UM) 8*2048kB (UM) 0*4096kB = 80652kB [ 489.459624][T13645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 489.462703][T13645] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 489.466350][T13645] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 489.469377][T13645] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 489.472936][T13645] 19951 total pagecache pages [ 489.474780][T13645] 747 pages in swap cache [ 489.476128][T13645] Free swap = 60108kB [ 489.477501][T13645] Total swap = 124996kB [ 489.479498][T13645] 524155 pages RAM [ 489.481033][T13645] 0 pages HighMem/MovableOnly [ 489.482625][T13645] 211469 pages reserved [ 489.483964][T13645] 0 pages cma reserved [ 489.807045][T13465] usb 38-1: device descriptor read/8, error -110 [ 489.814392][T13651] netlink: 'syz.0.1908': attribute type 1 has an invalid length. [ 490.791136][T13465] usb usb38-port1: attempt power cycle [ 490.882536][T13625] vhci_hcd: connection reset by peer [ 490.889843][ T5791] vhci_hcd vhci_hcd.2: stop threads [ 490.899475][ T5791] vhci_hcd vhci_hcd.2: release socket [ 490.906722][ T5791] vhci_hcd vhci_hcd.2: disconnect device [ 492.199823][T13465] usb usb38-port1: unable to enumerate USB device [ 492.210613][T13682] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 492.213390][T13682] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 492.227844][T13682] vhci_hcd vhci_hcd.0: Device attached [ 492.809017][T13685] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 492.809048][T13685] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 492.809676][T13685] vhci_hcd vhci_hcd.0: Device attached [ 492.834262][T13689] netlink: 'syz.3.1916': attribute type 1 has an invalid length. [ 492.838461][ T60] usb 42-1: device descriptor read/8, error -110 [ 493.103518][T13465] usb 38-1: SetAddress Request (74) to port 0 [ 493.106064][T13465] usb 38-1: new SuperSpeed USB device number 74 using vhci_hcd [ 493.157923][ T1354] usb 40-1: SetAddress Request (54) to port 0 [ 493.177712][ T1354] usb 40-1: new SuperSpeed USB device number 54 using vhci_hcd [ 493.312200][ T60] usb usb42-port1: attempt power cycle [ 494.048047][ T60] usb usb42-port1: unable to enumerate USB device [ 494.654061][T13704] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 494.778828][T13709] netlink: 'syz.1.1920': attribute type 1 has an invalid length. [ 494.902061][T13683] vhci_hcd: connection reset by peer [ 494.906163][ T8888] vhci_hcd vhci_hcd.0: stop threads [ 494.908476][ T8888] vhci_hcd vhci_hcd.0: release socket [ 494.910822][ T8888] vhci_hcd vhci_hcd.0: disconnect device [ 495.059477][T13523] vhci_hcd: connection reset by peer [ 495.067204][ T8888] vhci_hcd vhci_hcd.3: stop threads [ 495.069295][ T8888] vhci_hcd vhci_hcd.3: release socket [ 495.071444][ T8888] vhci_hcd vhci_hcd.3: disconnect device [ 495.071468][ T5833] usb 44-1: device descriptor read/8, error -110 [ 495.313801][ T5833] usb usb44-port1: attempt power cycle [ 495.852127][T13728] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 497.252456][ T5833] usb usb44-port1: unable to enumerate USB device [ 497.548678][T13744] netlink: 'syz.3.1928': attribute type 1 has an invalid length. [ 497.790281][T13686] vhci_hcd: connection reset by peer [ 497.792430][ T9348] vhci_hcd vhci_hcd.1: stop threads [ 497.800800][ T9348] vhci_hcd vhci_hcd.1: release socket [ 497.805386][ T9348] vhci_hcd vhci_hcd.1: disconnect device [ 498.278255][T13465] usb 38-1: device descriptor read/8, error -110 [ 498.281606][ T1354] usb 40-1: device descriptor read/8, error -110 [ 498.809711][ T1354] usb usb40-port1: attempt power cycle [ 498.814024][T13465] usb usb38-port1: attempt power cycle [ 498.939618][T13767] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 498.941642][T13767] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 498.972330][T13767] vhci_hcd vhci_hcd.0: Device attached [ 499.178249][T13465] usb 38-1: SetAddress Request (76) to port 0 [ 499.185108][T13778] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 499.187276][T13778] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 499.190503][T13778] vhci_hcd vhci_hcd.0: Device attached [ 499.196071][T13465] usb 38-1: new SuperSpeed USB device number 76 using vhci_hcd [ 499.233107][T13774] block nbd118: Receive control failed (result -32) [ 499.369967][ T1354] usb usb40-port1: unable to enumerate USB device [ 499.656881][ T60] usb 44-1: SetAddress Request (74) to port 0 [ 499.673362][ T60] usb 44-1: new SuperSpeed USB device number 74 using vhci_hcd [ 499.995768][T13789] warn_alloc: 2 callbacks suppressed [ 499.995810][T13789] syz.2.1933: vmalloc error: size 3449536512, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 500.003088][T13789] CPU: 1 UID: 0 PID: 13789 Comm: syz.2.1933 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.003121][T13789] Tainted: [L]=SOFTLOCKUP [ 500.003126][T13789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 500.003134][T13789] Call Trace: [ 500.003141][T13789] [ 500.003147][T13789] dump_stack_lvl+0x100/0x190 [ 500.003166][T13789] warn_alloc.cold+0x94/0xa8 [ 500.003180][T13789] ? __pfx_warn_alloc+0x10/0x10 [ 500.003192][T13789] ? __pfx_stack_trace_save+0x10/0x10 [ 500.003211][T13789] ? kasan_save_stack+0x3f/0x50 [ 500.003226][T13789] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 500.003245][T13789] ? vb2_vmalloc_alloc+0xf9/0x410 [ 500.003264][T13789] ? __vb2_queue_alloc+0x8d5/0x1160 [ 500.003278][T13789] ? vb2_core_create_bufs+0x5fa/0xa30 [ 500.003295][T13789] ? vb2_create_bufs+0x40c/0x830 [ 500.003315][T13789] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 500.003331][T13789] ? vidioc_create_bufs+0x7d/0xf0 [ 500.003348][T13789] ? v4l_create_bufs+0x17d/0x270 [ 500.003359][T13789] ? video_usercopy+0x3d3/0x14c0 [ 500.003371][T13789] ? v4l2_ioctl+0x1bd/0x250 [ 500.003384][T13789] ? v4l2_compat_ioctl32+0x20f/0x2d0 [ 500.003405][T13789] ? vb2_vmalloc_alloc+0x135/0x410 [ 500.003425][T13789] __vmalloc_node_range_noprof+0x136c/0x1630 [ 500.003449][T13789] ? vb2_vmalloc_alloc+0x135/0x410 [ 500.003470][T13789] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 500.003488][T13789] ? kasan_save_track+0x14/0x30 [ 500.003500][T13789] ? __kasan_kmalloc+0xaa/0xb0 [ 500.003512][T13789] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 500.003557][T13789] ? vb2_vmalloc_alloc+0x135/0x410 [ 500.003583][T13789] vmalloc_user_noprof+0x9e/0xe0 [ 500.003601][T13789] ? vb2_vmalloc_alloc+0x135/0x410 [ 500.003620][T13789] vb2_vmalloc_alloc+0x135/0x410 [ 500.003639][T13789] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 500.003657][T13789] __vb2_queue_alloc+0x8d5/0x1160 [ 500.003680][T13789] vb2_core_create_bufs+0x5fa/0xa30 [ 500.003698][T13789] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 500.003719][T13789] ? __pfx___schedule+0x10/0x10 [ 500.003737][T13789] vb2_create_bufs+0x40c/0x830 [ 500.003754][T13789] ? __pfx_vb2_create_bufs+0x10/0x10 [ 500.003774][T13789] vb2_ioctl_create_bufs+0x244/0x3e0 [ 500.003791][T13789] vidioc_create_bufs+0x7d/0xf0 [ 500.003812][T13789] v4l_create_bufs+0x17d/0x270 [ 500.003825][T13789] __video_do_ioctl+0xb2a/0xdf0 [ 500.003840][T13789] ? trace_kmalloc+0xeb/0x110 [ 500.003853][T13789] ? __pfx___video_do_ioctl+0x10/0x10 [ 500.003868][T13789] ? video_usercopy+0x145/0x14c0 [ 500.003883][T13789] video_usercopy+0x3d3/0x14c0 [ 500.003896][T13789] ? __pfx___video_do_ioctl+0x10/0x10 [ 500.003910][T13789] ? __pfx_video_usercopy+0x10/0x10 [ 500.003928][T13789] ? __fget_files+0x215/0x3d0 [ 500.003944][T13789] ? hook_file_ioctl_common+0x140/0x440 [ 500.003960][T13789] v4l2_ioctl+0x1bd/0x250 [ 500.003975][T13789] v4l2_compat_ioctl32+0x20f/0x2d0 [ 500.003993][T13789] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 500.004012][T13789] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 500.004029][T13789] __do_fast_syscall_32+0xe7/0x970 [ 500.004049][T13789] ? lockdep_hardirqs_on+0x78/0x100 [ 500.004067][T13789] do_fast_syscall_32+0x32/0x70 [ 500.004084][T13789] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 500.004100][T13789] RIP: 0023:0xf7fd6fec [ 500.004114][T13789] Code: Unable to access opcode bytes at 0xf7fd6fc2. [ 500.004120][T13789] RSP: 002b:00000000f545450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 500.004132][T13789] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0f8565c [ 500.004139][T13789] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.004145][T13789] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 500.004152][T13789] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 500.004158][T13789] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.004174][T13789] [ 500.004211][T13789] Mem-Info: [ 500.283298][T13789] active_anon:12638 inactive_anon:747 isolated_anon:0 [ 500.283298][T13789] active_file:1408 inactive_file:10861 isolated_file:0 [ 500.283298][T13789] unevictable:1768 dirty:243 writeback:0 [ 500.283298][T13789] slab_reclaimable:12440 slab_unreclaimable:73874 [ 500.283298][T13789] mapped:35578 shmem:13767 pagetables:1147 [ 500.283298][T13789] sec_pagetables:323 bounce:0 [ 500.283298][T13789] kernel_misc_reclaimable:0 [ 500.283298][T13789] free:20860 free_pcp:2445 free_cma:0 [ 500.298718][T13789] Node 0 active_anon:3520kB inactive_anon:216kB active_file:72kB inactive_file:2564kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:3672kB dirty:48kB writeback:0kB shmem:7012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9248kB pagetables:1292kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 500.310694][T13789] Node 1 active_anon:47032kB inactive_anon:2772kB active_file:5560kB inactive_file:40880kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:138640kB dirty:924kB writeback:0kB shmem:48056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:27516kB pagetables:3296kB sec_pagetables:160kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 500.322244][T13789] Node 0 DMA free:1924kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:32kB active_file:0kB inactive_file:104kB unevictable:0kB writepending:48kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:136kB free_cma:0kB [ 500.332094][T13789] lowmem_reserve[]: 0 280 280 280 280 [ 500.334095][T13789] Node 0 DMA32 free:13576kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:2048KB free_highatomic:76KB active_anon:3520kB inactive_anon:184kB active_file:72kB inactive_file:2460kB unevictable:3536kB writepending:0kB zspages:200kB present:1032196kB managed:287172kB mlocked:0kB bounce:0kB free_pcp:3588kB local_pcp:1004kB free_cma:0kB [ 500.347622][T13789] lowmem_reserve[]: 0 0 0 0 0 [ 500.350368][T13789] Node 1 DMA32 free:67940kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048KB free_highatomic:1608KB active_anon:47032kB inactive_anon:2772kB active_file:5560kB inactive_file:40880kB unevictable:3536kB writepending:924kB zspages:5692kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:5936kB local_pcp:2728kB free_cma:0kB [ 500.364172][T13789] lowmem_reserve[]: 0 0 0 0 0 [ 500.366548][T13789] Node 0 DMA: 105*4kB (UM) 18*8kB (UM) 3*16kB (UM) 3*32kB (UM) 5*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 1924kB [ 500.373207][T13789] Node 0 DMA32: 416*4kB (UH) 91*8kB (UEH) 51*16kB (UME) 102*32kB (UMEH) 37*64kB (UME) 23*128kB (UME) 7*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13576kB [ 500.527634][T13789] Node 1 DMA32: 1278*4kB (UMEH) 262*8kB (UMEH) 396*16kB (UMEH) 294*32kB (UMEH) 88*64kB (UMEH) 65*128kB (UMEH) 25*256kB (UMH) 11*512kB (UMH) 2*1024kB (UM) 8*2048kB (UM) 0*4096kB = 67368kB [ 500.536620][T13789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.540682][T13789] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 500.544631][T13789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.548601][T13789] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 500.552462][T13789] 26752 total pagecache pages [ 500.554540][T13789] 625 pages in swap cache [ 500.556431][T13789] Free swap = 102460kB [ 500.558275][T13789] Total swap = 124996kB [ 500.560082][T13789] 524155 pages RAM [ 500.561704][T13789] 0 pages HighMem/MovableOnly [ 500.563719][T13789] 211469 pages reserved [ 500.565485][T13789] 0 pages cma reserved [ 502.149578][T13768] vhci_hcd: connection reset by peer [ 502.152391][ T7308] vhci_hcd vhci_hcd.0: stop threads [ 502.156352][ T7308] vhci_hcd vhci_hcd.0: release socket [ 502.158476][ T7308] vhci_hcd vhci_hcd.0: disconnect device [ 502.467116][T13779] vhci_hcd: connection reset by peer [ 502.471668][ T8888] vhci_hcd vhci_hcd.3: stop threads [ 502.474000][ T8888] vhci_hcd vhci_hcd.3: release socket [ 502.476496][ T8888] vhci_hcd vhci_hcd.3: disconnect device [ 502.714296][T13814] netlink: 'syz.3.1939': attribute type 1 has an invalid length. [ 504.277768][T13465] usb 38-1: device descriptor read/8, error -110 [ 504.913208][T13837] block nbd119: Receive control failed (result -32) [ 504.923198][ T60] usb 44-1: device descriptor read/8, error -110 [ 504.931280][T13465] usb usb38-port1: unable to enumerate USB device [ 505.002057][T13859] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 505.004336][T13859] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 505.007316][T13859] vhci_hcd vhci_hcd.0: Device attached [ 505.319890][ T60] usb 44-1: SetAddress Request (75) to port 0 [ 505.331267][ T60] usb 44-1: new SuperSpeed USB device number 75 using vhci_hcd [ 505.755082][T13870] netlink: 'syz.2.1951': attribute type 1 has an invalid length. [ 506.199189][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.582232][T13885] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 506.584367][T13885] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 506.604545][T13885] vhci_hcd vhci_hcd.0: Device attached [ 506.823088][T13889] fuse: Bad value for 'fd' [ 506.917947][T13465] usb 38-1: SetAddress Request (78) to port 0 [ 506.929948][T13465] usb 38-1: new SuperSpeed USB device number 78 using vhci_hcd [ 508.100603][T13906] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 508.539066][T13917] netlink: 'syz.2.1961': attribute type 1 has an invalid length. [ 508.567279][T13917] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1961'. [ 508.903972][T13924] netlink: 'syz.1.1963': attribute type 1 has an invalid length. [ 509.249806][T13931] block nbd120: Receive control failed (result -32) [ 509.670458][T13886] vhci_hcd: connection reset by peer [ 509.672803][ T8888] vhci_hcd vhci_hcd.0: stop threads [ 509.675040][ T8888] vhci_hcd vhci_hcd.0: release socket [ 509.677174][ T8888] vhci_hcd vhci_hcd.0: disconnect device [ 510.573849][T13950] vhci_hcd vhci_hcd.0: port 0 already used [ 510.610536][T13957] netlink: 'syz.0.1970': attribute type 1 has an invalid length. [ 510.637424][T13957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1970'. [ 511.976485][T13976] block nbd121: Receive control failed (result -32) [ 512.047725][T13465] usb 38-1: device descriptor read/8, error -110 [ 512.494026][T13465] usb usb38-port1: attempt power cycle [ 512.523425][T13988] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 512.526132][T13988] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 512.657934][T13465] usb 38-1: SetAddress Request (80) to port 0 [ 512.926682][T13465] usb 38-1: new SuperSpeed USB device number 80 using vhci_hcd [ 512.934527][T13988] vhci_hcd vhci_hcd.0: Device attached [ 513.682349][T14004] netlink: 'syz.3.1978': attribute type 1 has an invalid length. [ 514.363213][T14012] netlink: 'syz.3.1979': attribute type 1 has an invalid length. [ 514.439850][T14010] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1979'. [ 516.079777][T14028] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 516.081992][T14028] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 516.342271][T13989] vhci_hcd: connection reset by peer [ 516.344368][ T7308] vhci_hcd vhci_hcd.0: stop threads [ 516.346067][ T7308] vhci_hcd vhci_hcd.0: release socket [ 516.350778][ T7308] vhci_hcd vhci_hcd.0: disconnect device [ 516.554393][T14028] vhci_hcd vhci_hcd.0: Device attached [ 516.898360][ T1354] usb 40-1: SetAddress Request (58) to port 0 [ 516.904855][ T1354] usb 40-1: new SuperSpeed USB device number 58 using vhci_hcd [ 517.122744][T14049] netlink: 'syz.2.1988': attribute type 1 has an invalid length. [ 518.078546][T13465] usb 38-1: device descriptor read/8, error -110 [ 518.320799][T14068] netlink: 'syz.0.1991': attribute type 1 has an invalid length. [ 518.362253][T14033] vhci_hcd: connection reset by peer [ 518.366841][ T9348] vhci_hcd vhci_hcd.1: stop threads [ 518.371781][ T9348] vhci_hcd vhci_hcd.1: release socket [ 518.378682][ T9348] vhci_hcd vhci_hcd.1: disconnect device [ 518.529644][T13465] usb usb38-port1: unable to enumerate USB device [ 518.643239][T14075] netlink: 'syz.1.1993': attribute type 1 has an invalid length. [ 518.682884][T13860] vhci_hcd: connection reset by peer [ 518.687467][ T9348] vhci_hcd vhci_hcd.3: stop threads [ 518.690128][ T9348] vhci_hcd vhci_hcd.3: release socket [ 518.695653][ T60] usb 44-1: device descriptor read/8, error -110 [ 518.701783][ T9348] vhci_hcd vhci_hcd.3: disconnect device [ 518.807845][ T60] usb usb44-port1: attempt power cycle [ 519.369012][T14086] netlink: 'syz.0.1997': attribute type 1 has an invalid length. [ 519.671299][ T60] usb usb44-port1: unable to enumerate USB device [ 519.774268][T14093] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 519.776371][T14093] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 519.808679][T14093] vhci_hcd vhci_hcd.0: Device attached [ 520.129438][ T5834] usb 44-1: SetAddress Request (78) to port 0 [ 520.132339][ T5834] usb 44-1: new SuperSpeed USB device number 78 using vhci_hcd [ 520.502563][T14105] netlink: 'syz.2.2001': attribute type 1 has an invalid length. [ 520.886416][T14111] netlink: 'syz.2.2003': attribute type 1 has an invalid length. [ 521.352075][T14121] netlink: 'syz.0.2007': attribute type 1 has an invalid length. [ 521.957890][ T1354] usb 40-1: device descriptor read/8, error -110 [ 522.820500][ T5754] Bluetooth: hci3: unexpected event for opcode 0x203d [ 522.889018][T14147] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 522.889037][T14147] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 522.889164][T14147] vhci_hcd vhci_hcd.0: Device attached [ 522.913888][T14158] netlink: 'syz.3.2017': attribute type 1 has an invalid length. [ 523.004649][ T1354] usb 40-1: SetAddress Request (59) to port 0 [ 523.004695][ T1354] usb 40-1: new SuperSpeed USB device number 59 using vhci_hcd [ 523.366505][T14169] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 523.368611][T14169] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 523.377846][T14169] vhci_hcd vhci_hcd.0: Device attached [ 523.681278][ T60] usb 38-1: SetAddress Request (82) to port 0 [ 523.684550][ T60] usb 38-1: new SuperSpeed USB device number 82 using vhci_hcd [ 525.067668][ T6380] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 525.242530][ T6380] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 525.249076][ T6380] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 525.258214][ T6380] usb 6-1: Product: syz [ 525.259787][ T6380] usb 6-1: Manufacturer: syz [ 525.263307][ T6380] usb 6-1: SerialNumber: syz [ 525.279890][ T6380] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 525.695215][ T6380] vp7045: USB control message 'in' went wrong. [ 525.702054][ T6380] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 525.709703][ T6380] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 525.722818][ T6380] usb 6-1: USB disconnect, device number 44 [ 526.577706][ T34] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 526.737391][T14155] vhci_hcd: connection reset by peer [ 526.739513][ T34] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 526.754161][ T34] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 526.764819][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.768785][ T8888] vhci_hcd vhci_hcd.1: stop threads [ 526.777740][ T8888] vhci_hcd vhci_hcd.1: release socket [ 526.782559][ T34] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 526.793689][ T8888] vhci_hcd vhci_hcd.1: disconnect device [ 526.969137][ T34] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 526.984216][T13804] udevd[13804]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 527.019465][ T6380] usb 6-1: USB disconnect, device number 45 [ 527.179970][T14206] syzkaller0: entered promiscuous mode [ 527.181695][T14206] syzkaller0: entered allmulticast mode [ 527.205121][T14170] vhci_hcd: connection reset by peer [ 527.208786][ T12] vhci_hcd vhci_hcd.0: stop threads [ 527.216741][ T12] vhci_hcd vhci_hcd.0: release socket [ 527.228878][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 527.423623][T14094] vhci_hcd: connection reset by peer [ 527.425614][ T12] vhci_hcd vhci_hcd.3: stop threads [ 527.427321][ T12] vhci_hcd vhci_hcd.3: release socket [ 527.429853][ T5834] usb 44-1: device descriptor read/8, error -110 [ 527.429864][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 527.818602][ T5834] usb usb44-port1: attempt power cycle [ 528.037698][ T1354] usb 40-1: device descriptor read/8, error -110 [ 528.147801][ T1354] usb usb40-port1: attempt power cycle [ 528.378454][ T5834] usb usb44-port1: unable to enumerate USB device [ 528.708599][ T1354] usb usb40-port1: unable to enumerate USB device [ 528.757692][ T60] usb 38-1: device descriptor read/8, error -110 [ 529.148612][ T60] usb usb38-port1: attempt power cycle [ 529.708707][ T60] usb usb38-port1: unable to enumerate USB device [ 529.869344][T14274] binder: 14273:14274 ioctl c0306201 80000180 returned -22 [ 529.904096][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2061'. [ 530.134408][T14283] lo speed is unknown, defaulting to 1000 [ 530.136989][T14283] lo speed is unknown, defaulting to 1000 [ 530.140271][T14283] lo speed is unknown, defaulting to 1000 [ 530.143200][T14283] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 530.148170][T14283] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 530.153868][T14283] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 530.163652][T14283] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 530.201816][T14283] lo speed is unknown, defaulting to 1000 [ 530.207711][T14283] lo speed is unknown, defaulting to 1000 [ 530.210490][T14283] lo speed is unknown, defaulting to 1000 [ 530.214185][T14283] lo speed is unknown, defaulting to 1000 [ 530.760528][T14287] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 533.184787][T14327] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIhë~"GQ†å‘â: [ 533.406944][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2078'. [ 533.454320][T13976] block nbd122: Receive control failed (result -107) [ 534.810839][T14357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2089'. [ 535.377108][ T5754] Bluetooth: hci3: Dropping invalid advertising data [ 535.380148][ T5754] Bluetooth: hci3: Malformed LE Event: 0x02 [ 535.919898][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2105'. [ 535.923767][T14401] netlink: 'syz.3.2105': attribute type 5 has an invalid length. [ 535.927080][T14401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2105'. [ 535.944709][ T5791] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.949356][ T5791] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.952625][ T5791] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 535.956304][ T5791] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.352426][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2111'. [ 536.355451][T14414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2111'. [ 536.427664][ T34] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 536.547284][T14420] bond0: (slave bond_slave_1): Releasing backup interface [ 536.670286][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 537.087095][ T34] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 537.511890][ T34] usb 8-1: config 0 has no interface number 0 [ 537.513890][ T34] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 537.517041][ T34] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 537.522668][ T34] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 537.527601][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.537734][ T34] usb 8-1: Product: syz [ 537.539138][ T34] usb 8-1: Manufacturer: syz [ 537.540960][ T34] usb 8-1: SerialNumber: syz [ 537.546319][ T34] usb 8-1: config 0 descriptor?? [ 537.549807][T14412] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 537.552464][T14412] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 537.781174][T14412] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 537.792358][T14412] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 537.998460][ T34] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 538.807072][ T34] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 538.813063][ T34] asix 8-1:0.34: probe with driver asix failed with error -71 [ 538.820334][ T34] usb 8-1: USB disconnect, device number 32 [ 540.187894][ T1004] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 540.347668][ T1004] usb 5-1: Using ep0 maxpacket: 32 [ 540.351265][ T1004] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 540.354052][ T1004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.359655][ T1004] usb 5-1: config 0 descriptor?? [ 540.384504][ T1004] as10x_usb: device has been detected [ 540.389036][ T1004] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 540.401828][ T1004] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 540.431024][ T1004] as10x_usb: error during firmware upload part1 [ 540.434041][ T1004] Registered device nBox DVB-T Dongle [ 540.574718][ T1004] usb 5-1: USB disconnect, device number 41 [ 540.595558][ T1004] Unregistered device nBox DVB-T Dongle [ 540.598505][ T1004] as10x_usb: device has been disconnected [ 541.461496][ T41] kauditd_printk_skb: 1 callbacks suppressed [ 541.461513][ T41] audit: type=1326 audit(1783125011.055:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14514 comm="syz.0.2147" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f86fec code=0x0 [ 542.327905][T14549] netlink: 'syz.2.2160': attribute type 1 has an invalid length. [ 542.370635][T14549] 8021q: adding VLAN 0 to HW filter on device bond41 [ 542.389632][T14549] bond41: (slave syz_tun): making interface the new active one [ 542.396108][T14549] bond41: (slave syz_tun): Enslaving as an active interface with an up link [ 542.420830][ T41] audit: type=1326 audit(1783125012.005:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fec code=0x7ffc0000 [ 542.432068][ T41] audit: type=1326 audit(1783125012.025:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fec code=0x7ffc0000 [ 542.444771][ T41] audit: type=1326 audit(1783125012.025:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fec code=0x7ffc0000 [ 542.454436][ T41] audit: type=1326 audit(1783125012.025:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71871eb code=0x7ffc0000 [ 542.472394][ T41] audit: type=1326 audit(1783125012.025:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fec code=0x7ffc0000 [ 542.491797][ T41] audit: type=1326 audit(1783125012.025:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fec code=0x7ffc0000 [ 542.498599][ T41] audit: type=1326 audit(1783125012.035:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f86fec code=0x7ffc0000 [ 542.505053][ T41] audit: type=1326 audit(1783125012.035:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f86fec code=0x7ffc0000 [ 542.511391][ T41] audit: type=1326 audit(1783125012.035:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14553 comm="syz.0.2162" exe="/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f86fec code=0x7ffc0000 [ 542.616613][T14565] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 542.807640][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 542.967807][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 542.976066][ T9] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.980111][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 542.982273][ T9] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 542.985765][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.990499][ T9] usb 5-1: config 0 descriptor?? [ 543.416187][ T9] nzxt-smart2 0003:1E71:2009.0023: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 543.851370][ T1004] usb 5-1: USB disconnect, device number 42 [ 544.002801][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2177'. [ 545.721868][T14663] binder: 14662:14663 ioctl c0306201 0 returned -14 [ 545.727719][ T5818] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 545.858107][T14674] netlink: 'syz.2.2204': attribute type 1 has an invalid length. [ 545.861216][T14674] netlink: 15638 bytes leftover after parsing attributes in process `syz.2.2204'. [ 545.886214][ T5818] usb 5-1: Using ep0 maxpacket: 16 [ 545.892540][ T5818] usb 5-1: config 0 has no interfaces? [ 545.894600][ T5818] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 545.900140][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.903974][ T5818] usb 5-1: config 0 descriptor?? [ 546.044769][T14687] nbd: nbd2 already in use [ 546.047341][T14687] block nbd2: NBD_DISCONNECT [ 546.054245][ T6021] block nbd2: Wrong magic (0x25609513) [ 546.056600][T14687] block nbd2: Send disconnect failed -32 [ 546.062409][ T5948] block nbd2: Wrong magic (0x25609513) [ 546.063343][ T6020] block nbd2: Wrong magic (0x0) [ 546.063364][ T5944] block nbd2: Wrong magic (0x0) [ 546.063416][T14687] block nbd2: Disconnected due to user request. [ 546.063431][T14687] block nbd2: shutting down sockets [ 546.502565][T14694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.511062][T14694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.516382][T14694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.520813][T14694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.483250][T14727] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2224'. [ 547.486642][T14727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2224'. [ 547.566573][ T1004] kernel write not supported for file /snd/seq (pid: 1004 comm: kworker/3:2) [ 548.519125][ T5818] usb 5-1: USB disconnect, device number 43 [ 548.808968][T14769] netlink: 'syz.1.2243': attribute type 1 has an invalid length. [ 549.149305][T14776] netlink: 'syz.1.2246': attribute type 1 has an invalid length. [ 549.192611][T14776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2246'. [ 550.272235][T14804] netlink: 'syz.3.2254': attribute type 1 has an invalid length. [ 550.460564][T14806] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 550.741512][T14811] netlink: 'syz.3.2255': attribute type 1 has an invalid length. [ 550.771512][T14811] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2255'. [ 551.917267][T14835] netlink: 'syz.0.2264': attribute type 1 has an invalid length. [ 552.451991][T14844] netlink: 'syz.1.2266': attribute type 1 has an invalid length. [ 552.470136][T14844] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2266'. [ 553.706213][T14868] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 553.708342][T14868] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 553.770062][ T5948] block nbd2: Receive control failed (result -32) [ 553.779125][T14868] vhci_hcd vhci_hcd.0: Device attached [ 553.987888][T14875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 553.993240][T14875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 553.994263][T14875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 553.996579][T14875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 553.997112][T14875] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 554.064034][T14878] netlink: 'syz.2.2273': attribute type 1 has an invalid length. [ 554.117937][ T5834] usb 40-1: SetAddress Request (62) to port 0 [ 554.118037][ T5834] usb 40-1: new SuperSpeed USB device number 62 using vhci_hcd [ 554.407020][T14873] lo speed is unknown, defaulting to 1000 [ 554.550326][T14895] netlink: 'syz.2.2275': attribute type 1 has an invalid length. [ 554.590219][T14895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2275'. [ 554.851633][T14873] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.857602][T14873] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.861379][T14873] bridge_slave_0: entered allmulticast mode [ 554.868078][T14873] bridge_slave_0: entered promiscuous mode [ 554.879124][T14873] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.884033][T14873] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.888705][T14873] bridge_slave_1: entered allmulticast mode [ 554.893785][T14873] bridge_slave_1: entered promiscuous mode [ 554.930354][T14873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.942195][T14873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.992841][T14873] team0: Port device team_slave_0 added [ 554.999340][T14873] team0: Port device team_slave_1 added [ 555.032041][T14873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.034204][T14873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.048109][T14873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.052996][T14873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.055617][T14873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.074411][T14873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.121873][T14873] hsr_slave_0: entered promiscuous mode [ 555.124424][T14873] hsr_slave_1: entered promiscuous mode [ 555.126725][T14873] debugfs: 'hsr0' already exists in 'hsr' [ 555.128720][T14873] Cannot create hsr debugfs directory [ 555.371394][T14873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.390719][T14873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.697032][T14873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.709822][T14873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.797737][ T1004] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 555.863498][T14873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.872484][T14873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.969123][T14873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.972499][T14873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.976251][ T1004] usb 6-1: Using ep0 maxpacket: 8 [ 555.981525][ T1004] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.995373][ T1004] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.998555][ T1004] usb 6-1: config 0 interface 0 has no altsetting 0 [ 556.000667][ T1004] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 556.003439][ T1004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.039474][ T5754] Bluetooth: hci4: command tx timeout [ 556.071652][ T1004] usb 6-1: config 0 descriptor?? [ 556.135715][T14873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 556.140790][T14873] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 556.143875][T14873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 556.150068][T14873] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 556.156170][T14873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 556.160539][T14873] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 556.163392][T14873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 556.168361][T14873] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 556.278909][T14873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.297103][T14873] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.323527][T14873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 556.326978][T14873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 556.387115][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.389983][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.407217][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.410520][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.737828][ T1004] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0 [ 556.748811][ T1004] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0 [ 556.755833][ T1004] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0 [ 556.762191][ T1004] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0 [ 556.777721][ T1004] mcp2221 0003:04D8:00DD.0024: unknown main item tag 0x0 [ 556.785417][ T1004] mcp2221 0003:04D8:00DD.0024: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 556.880651][ T1004] usb 6-1: USB disconnect, device number 46 [ 557.174352][T14873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.281517][T14869] vhci_hcd: connection reset by peer [ 557.290679][ T8888] vhci_hcd vhci_hcd.1: stop threads [ 557.293140][ T8888] vhci_hcd vhci_hcd.1: release socket [ 557.295071][ T8888] vhci_hcd vhci_hcd.1: disconnect device [ 557.310631][T14873] veth0_vlan: entered promiscuous mode [ 557.332725][T14873] veth1_vlan: entered promiscuous mode [ 557.381950][T14873] veth0_macvtap: entered promiscuous mode [ 557.401000][T14873] veth1_macvtap: entered promiscuous mode [ 557.441473][T14873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.458899][T14873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.476351][ T9348] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.481563][ T9348] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.485371][ T9348] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.490604][ T9348] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.551392][T14938] netlink: 'syz.1.2282': attribute type 1 has an invalid length. [ 557.654839][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.658489][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.696248][T14941] netlink: 'syz.0.2283': attribute type 1 has an invalid length. [ 557.722739][T14941] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2283'. [ 557.730609][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.735786][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.810781][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2284'. [ 558.182211][ T5754] Bluetooth: hci4: command tx timeout [ 558.222501][T14953] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 559.157746][ T5834] usb 40-1: device descriptor read/8, error -110 [ 559.974948][ T5834] usb usb40-port1: attempt power cycle [ 560.198346][ T5754] Bluetooth: hci4: command tx timeout [ 560.259718][T14967] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 560.262295][T14967] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 560.327881][T14967] vhci_hcd vhci_hcd.0: Device attached [ 560.538021][ T1354] usb 44-1: SetAddress Request (82) to port 0 [ 560.541522][ T1354] usb 44-1: new SuperSpeed USB device number 82 using vhci_hcd [ 560.568347][ T5834] usb usb40-port1: unable to enumerate USB device [ 561.141363][T14981] netlink: 'syz.0.2291': attribute type 1 has an invalid length. [ 561.190391][T14983] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2291'. [ 561.528949][T14988] netlink: 'syz.0.2293': attribute type 1 has an invalid length. [ 561.886667][T14989] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 561.889242][T14989] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 561.914199][T14989] vhci_hcd vhci_hcd.0: Device attached [ 562.223006][T15000] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 562.225084][T15000] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 562.242886][T15000] vhci_hcd vhci_hcd.0: Device attached [ 562.265789][T13465] usb 40-1: SetAddress Request (66) to port 0 [ 562.279016][ T5754] Bluetooth: hci4: command tx timeout [ 562.304778][T13465] usb 40-1: new SuperSpeed USB device number 66 using vhci_hcd [ 562.437615][T15006] vhci_hcd vhci_hcd.0: port 0 already used [ 562.557663][ T5834] usb 42-1: SetAddress Request (74) to port 0 [ 562.559709][ T5834] usb 42-1: new SuperSpeed USB device number 74 using vhci_hcd [ 562.578707][ T1004] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 562.737792][ T1004] usb 5-1: Using ep0 maxpacket: 8 [ 562.741353][ T1004] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.745667][ T1004] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.752321][ T1004] usb 5-1: config 0 interface 0 has no altsetting 0 [ 562.754941][ T1004] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 562.758865][ T1004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.766478][ T1004] usb 5-1: config 0 descriptor?? [ 563.185042][ T1004] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 563.187380][ T1004] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 563.190330][ T1004] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 563.193654][ T1004] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 563.196273][ T1004] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 563.199408][ T1004] mcp2221 0003:04D8:00DD.0025: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 563.387736][ T1004] usb 5-1: USB disconnect, device number 44 [ 564.174550][T15015] netlink: 'syz.0.2298': attribute type 1 has an invalid length. [ 564.303756][T15018] netlink: 'syz.2.2299': attribute type 1 has an invalid length. [ 566.810791][T15032] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 567.640237][ T5818] IPVS: starting estimator thread 0... [ 567.649573][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.747633][T15042] IPVS: using max 43 ests per chain, 103200 per kthread [ 567.810924][T15047] netlink: 'syz.0.2306': attribute type 1 has an invalid length. [ 570.552658][T15060] vhci_hcd vhci_hcd.0: port 0 already used [ 573.168862][T14975] vhci_hcd: connection reset by peer [ 573.171485][ T8202] vhci_hcd vhci_hcd.3: stop threads [ 573.184874][ T8202] vhci_hcd vhci_hcd.3: release socket [ 573.191670][ T8202] vhci_hcd vhci_hcd.3: disconnect device [ 573.194440][ T1354] usb 44-1: device descriptor read/8, error -110 [ 573.473874][T14993] vhci_hcd: connection reset by peer [ 573.475874][ T8202] vhci_hcd vhci_hcd.1: stop threads [ 573.478231][ T8202] vhci_hcd vhci_hcd.1: release socket [ 573.480135][ T8202] vhci_hcd vhci_hcd.1: disconnect device [ 573.480173][T13465] usb 40-1: device descriptor read/8, error -110 [ 573.608457][ T1354] usb usb44-port1: attempt power cycle [ 573.922294][T13465] usb usb40-port1: attempt power cycle [ 574.214574][ T1354] usb usb44-port1: unable to enumerate USB device [ 574.862826][T13465] usb usb40-port1: unable to enumerate USB device [ 575.651079][T15093] vhci_hcd vhci_hcd.0: port 0 already used [ 575.723274][T15002] vhci_hcd: connection reset by peer [ 575.728243][ T8202] vhci_hcd vhci_hcd.2: stop threads [ 575.730029][ T8202] vhci_hcd vhci_hcd.2: release socket [ 575.734031][ T8202] vhci_hcd vhci_hcd.2: disconnect device [ 575.734382][ T5834] usb 42-1: device descriptor read/8, error -110 [ 575.773171][T15099] netlink: 'syz.0.2319': attribute type 1 has an invalid length. [ 576.128256][ T5834] usb usb42-port1: attempt power cycle [ 576.311521][T14875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 576.320335][T14875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 576.325716][T14875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 576.337644][T14875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 576.359171][T14875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 576.421393][T15112] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 576.424236][T15112] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 576.710201][T15112] vhci_hcd vhci_hcd.0: Device attached [ 576.968076][ T7692] usb 44-1: SetAddress Request (86) to port 0 [ 576.984060][ T7692] usb 44-1: new SuperSpeed USB device number 86 using vhci_hcd [ 576.989262][ T5834] usb usb42-port1: unable to enumerate USB device [ 577.162177][T15109] lo speed is unknown, defaulting to 1000 [ 577.618585][T15109] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.621003][T15109] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.623753][T15109] bridge_slave_0: entered allmulticast mode [ 577.627765][T15109] bridge_slave_0: entered promiscuous mode [ 577.632818][T15109] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.636056][T15109] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.639269][T15109] bridge_slave_1: entered allmulticast mode [ 577.645265][T15109] bridge_slave_1: entered promiscuous mode [ 577.672341][T15109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.682783][T15109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.795417][T15109] team0: Port device team_slave_0 added [ 577.799481][T15109] team0: Port device team_slave_1 added [ 577.883703][T15109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.888605][T15109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.907815][T15109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.920102][T15109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.924832][T15109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.942093][T15109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.980723][T15109] hsr_slave_0: entered promiscuous mode [ 577.983689][T15109] hsr_slave_1: entered promiscuous mode [ 577.985974][T15109] debugfs: 'hsr0' already exists in 'hsr' [ 577.988053][T15109] Cannot create hsr debugfs directory [ 578.211961][T15109] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.447797][ T5754] Bluetooth: hci2: command tx timeout [ 578.450270][T15109] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.507328][T15150] comedi: valid board names for 8255 driver are: [ 578.513288][T15150] 8255 [ 578.515083][T15150] comedi: valid board names for vmk80xx driver are: [ 578.518068][T15150] vmk80xx [ 578.519372][T15150] comedi: valid board names for usbduxsigma driver are: [ 578.521615][T15150] usbduxsigma [ 578.522780][T15150] comedi: valid board names for usbduxfast driver are: [ 578.525524][T15150] usbduxfast [ 578.526649][T15150] comedi: valid board names for usbdux driver are: [ 578.528805][T15150] usbdux [ 578.529819][T15150] comedi: valid board names for ni6501 driver are: [ 578.531961][T15150] ni6501 [ 578.532946][T15150] comedi: valid board names for dt9812 driver are: [ 578.535156][T15150] dt9812 [ 578.536291][T15150] comedi: valid board names for ni_labpc_cs driver are: [ 578.538669][T15150] ni_labpc_cs [ 578.539897][T15150] comedi: valid board names for ni_daq_700 driver are: [ 578.542224][T15150] ni_daq_700 [ 578.543323][T15150] comedi: valid board names for labpc_pci driver are: [ 578.545562][T15150] labpc_pci [ 578.546808][T15150] comedi: valid board names for adl_pci9118 driver are: [ 578.549192][T15150] pci9118dg [ 578.550299][T15150] pci9118hg [ 578.551429][T15150] pci9118hr [ 578.552516][T15150] comedi: valid board names for 8255_pci driver are: [ 578.554696][T15150] 8255_pci [ 578.557941][T15150] comedi: valid board names for s526 driver are: [ 578.560073][T15150] s526 [ 578.560977][T15150] comedi: valid board names for multiq3 driver are: [ 578.563060][T15150] multiq3 [ 578.564071][T15150] comedi: valid board names for pcmuio driver are: [ 578.566435][T15150] pcmuio48 [ 578.567469][T15150] pcmuio96 [ 578.569526][T15150] comedi: valid board names for pcmmio driver are: [ 578.571590][T15150] pcmmio [ 578.572591][T15150] comedi: valid board names for pcmda12 driver are: [ 578.574803][T15150] pcmda12 [ 578.575866][T15150] comedi: valid board names for pcmad driver are: [ 578.577981][T15150] pcmad12 [ 578.579046][T15150] pcmad16 [ 578.580050][T15150] comedi: valid board names for ni_labpc driver are: [ 578.584159][T15150] lab-pc-1200 [ 578.585412][T15150] lab-pc-1200ai [ 578.586654][T15150] lab-pc+ [ 578.587783][T15150] comedi: valid board names for atmio16 driver are: [ 578.589961][T15150] atmio16 [ 578.591373][T15150] atmio16d [ 578.592460][T15150] comedi: valid board names for ni_at_ao driver are: [ 578.594645][T15150] at-ao-6 [ 578.595820][T15150] at-ao-10 [ 578.597169][T15150] comedi: valid board names for ni_at_a2150 driver are: [ 578.599772][T15150] ni_at_a2150 [ 578.601918][T15150] comedi: valid board names for adq12b driver are: [ 578.604643][T15150] adq12b [ 578.606019][T15150] comedi: valid board names for mpc624 driver are: [ 578.635838][T15150] mpc624 [ 578.636818][T15150] comedi: valid board names for c6xdigio driver are: [ 578.639165][T15150] c6xdigio [ 578.640361][T15150] comedi: valid board names for aio_iiro_16 driver are: [ 578.642719][T15150] aio_iiro_16 [ 578.643947][T15150] comedi: valid board names for aio_aio12_8 driver are: [ 578.646264][T15150] aio_aio12_8 [ 578.647410][T15150] aio_ai12_8 [ 578.648618][T15150] aio_ao12_4 [ 578.649711][T15150] comedi: valid board names for fl512 driver are: [ 578.651879][T15150] fl512 [ 578.652812][T15150] comedi: valid board names for dmm32at driver are: [ 578.654858][T15150] dmm32at [ 578.658100][T15150] comedi: valid board names for dt282x driver are: [ 578.660369][T15150] dt2821 [ 578.661757][T15150] dt2821-f [ 578.662963][T15150] dt2821-g [ 578.664028][T15150] dt2823 [ 578.666178][T15150] dt2824-pgh [ 578.668271][T15150] dt2824-pgl [ 578.669924][T15150] dt2825 [ 578.671223][T15150] dt2827 [ 578.672505][T15150] dt2828 [ 578.674066][T15150] dt2829 [ 578.675496][T15150] dt21-ez [ 578.677021][T15150] dt23-ez [ 578.678470][T15150] dt24-ez [ 578.679835][T15150] dt24-ez-pgl [ 578.681368][T15150] comedi: valid board names for dt2817 driver are: [ 578.684258][T15150] dt2817 [ 578.685607][T15150] comedi: valid board names for dt2815 driver are: [ 578.688351][T15150] dt2815 [ 578.689317][T15150] comedi: valid board names for dt2814 driver are: [ 578.691892][T15150] dt2814 [ 578.693173][T15150] comedi: valid board names for dt2811 driver are: [ 578.695793][T15150] dt2811-pgh [ 578.697399][T15150] dt2811-pgl [ 578.698860][T15150] comedi: valid board names for dt2801 driver are: [ 578.700963][T15150] dt2801 [ 578.702024][T15150] comedi: valid board names for das6402 driver are: [ 578.704172][T15150] das6402-12 [ 578.705304][T15150] das6402-16 [ 578.706501][T15150] comedi: valid board names for das1800 driver are: [ 578.708592][T15150] das-1701st [ 578.709755][T15150] das-1701st-da [ 578.710937][T15150] das-1702st [ 578.712069][T15150] das-1702st-da [ 578.713244][T15150] das-1702hr [ 578.714367][T15150] das-1702hr-da [ 578.715600][T15150] das-1701ao [ 578.717093][T15150] das-1702ao [ 578.718638][T15150] das-1801st [ 578.719929][T15150] das-1801st-da [ 578.721118][T15150] das-1802st [ 578.722313][T15150] das-1802st-da [ 578.723544][T15150] das-1802hr [ 578.724658][T15150] das-1802hr-da [ 578.725802][T15150] das-1801hc [ 578.726880][T15150] das-1802hc [ 578.728035][T15150] das-1801ao [ 578.729118][T15150] das-1802ao [ 578.730283][T15150] comedi: valid board names for das800 driver are: [ 578.732708][T15150] das-800 [ 578.733714][T15150] cio-das800 [ 578.735041][T15150] das-801 [ 578.736098][T15150] cio-das801 [ 578.737268][T15150] das-802 [ 578.738382][T15150] cio-das802 [ 578.739876][T15150] cio-das802/16 [ 578.741412][T15150] comedi: valid board names for isa-das08 driver are: [ 578.743539][T15150] isa-das08 [ 578.744560][T15150] das08-pgm [ 578.745731][T15150] das08-pgh [ 578.746798][T15150] das08-pgl [ 578.747952][T15150] das08-aoh [ 578.749004][T15150] das08-aol [ 578.750143][T15150] das08-aom [ 578.751271][T15150] das08/jr-ao [ 578.752422][T15150] das08jr-16-ao [ 578.753561][T15150] pc104-das08 [ 578.755321][T15150] das08jr/16 [ 578.756393][T15150] comedi: valid board names for das16m1 driver are: [ 578.758941][T15150] das16m1 [ 578.760398][T15150] comedi: valid board names for dac02 driver are: [ 578.763091][T15150] dac02 [ 578.764446][T15150] comedi: valid board names for rti802 driver are: [ 578.766568][T15150] rti802 [ 578.767591][T15150] comedi: valid board names for rti800 driver are: [ 578.769763][T15150] rti800 [ 578.770845][T15150] rti815 [ 578.771871][T15150] comedi: valid board names for pcm3724 driver are: [ 578.773956][T15150] pcm3724 [ 578.774989][T15150] comedi: valid board names for pcl818 driver are: [ 578.777083][T15150] pcl818l [ 578.778153][T15150] pcl818h [ 578.779135][T15150] pcl818hd [ 578.780242][T15150] pcl818hg [ 578.781272][T15150] pcl818 [ 578.782236][T15150] pcl718 [ 578.783335][T15150] pcm3718 [ 578.784731][T15150] comedi: valid board names for pcl816 driver are: [ 578.787608][T15150] pcl816 [ 578.792542][T15150] pcl814b [ 578.793969][T15150] comedi: valid board names for pcl812 driver are: [ 578.796676][T15150] pcl812 [ 578.798609][T15150] pcl812pg [ 578.800173][T15150] acl8112pg [ 578.803273][T15150] acl8112dg [ 578.804938][T15150] acl8112hg [ 578.806538][T15150] a821pgl [ 578.807808][T15150] a821pglnda [ 578.811588][T15150] a821pgh [ 578.812792][T15150] a822pgl [ 578.820336][T15150] a822pgh [ 578.821566][T15150] a823pgl [ 578.822698][T15150] a823pgh [ 578.823752][T15150] pcl813 [ 578.824746][T15150] pcl813b [ 578.825850][T15150] acl8113 [ 578.826998][T15150] iso813 [ 578.828081][T15150] acl8216 [ 578.840222][T15150] a826pg [ 578.845538][T15109] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.853089][T15150] comedi: valid board names for pcl730 driver are: [ 578.858624][T15150] pcl730 [ 578.861906][T15150] iso730 [ 578.865210][T15150] acl7130 [ 578.868028][T15150] pcm3730 [ 578.873629][T15150] pcl725 [ 578.877592][T15150] p8r8dio [ 578.880225][T15150] acl7225b [ 578.882237][T15150] p16r16dio [ 578.885317][T15150] pcl733 [ 578.887159][T15150] pcl734 [ 578.888804][T15150] opmm-1616-xt [ 578.890895][T15150] pearl-mm-p [ 578.895045][T15150] ir104-pbf [ 578.896239][T15150] comedi: valid board names for pcl726 driver are: [ 578.899129][T15150] pcl726 [ 578.900146][T15150] pcl727 [ 578.901148][T15150] pcl728 [ 578.902137][T15150] acl6126 [ 578.903140][T15150] acl6128 [ 578.904143][T15150] comedi: valid board names for pcl724 driver are: [ 578.906158][T15150] pcl724 [ 578.907122][T15150] pcl722 [ 578.908235][T15150] pcl731 [ 578.909318][T15150] acl7122 [ 578.912423][T15150] acl7124 [ 578.914845][T15150] pet48dio [ 578.916772][T15150] pcmio48 [ 578.923181][T15150] onyx-mm-dio [ 578.926948][T15150] comedi: valid board names for pcl711 driver are: [ 578.929714][T15150] pcl711 [ 578.931554][T15150] pcl711b [ 578.933846][T15150] acl8112hg [ 578.936794][T15150] acl8112dg [ 578.959375][T15150] comedi: valid board names for amplc_pc263 driver are: [ 578.967814][T15150] pc263 [ 578.969207][T15150] comedi: valid board names for amplc_pc236 driver are: [ 578.972247][T15150] pc36at [ 578.973616][T15150] comedi: valid board names for amplc_dio200 driver are: [ 578.976673][T15150] pc212e [ 578.978449][T15150] pc214e [ 578.979815][T15150] pc215e [ 578.980942][T15150] pc218e [ 578.982074][T15150] pc272e [ 578.983340][T15150] comedi: valid board names for comedi_parport driver are: [ 578.986391][T15150] comedi_parport [ 578.988184][T15150] comedi: valid board names for comedi_test driver are: [ 578.991368][T15150] comedi_test [ 578.992995][T15150] comedi: valid board names for comedi_bond driver are: [ 578.997654][T15150] comedi_bond [ 579.454564][T13978] block nbd123: Receive control failed (result -32) [ 579.534726][T15109] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.896498][T15109] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 579.901739][T15109] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 579.904615][T15109] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 579.914846][T15109] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 579.917846][T15109] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 579.921989][T15109] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 579.925787][T15109] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 579.931113][T15109] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 580.120474][T15109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.139793][T15109] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.153139][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.155456][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.164918][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.167222][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.527849][ T5754] Bluetooth: hci2: command tx timeout [ 580.765249][T15185] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 580.767514][T15185] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 580.771643][T15185] vhci_hcd vhci_hcd.0: Device attached [ 581.208153][ T60] usb 38-1: SetAddress Request (86) to port 0 [ 581.213266][ T60] usb 38-1: new SuperSpeed USB device number 86 using vhci_hcd [ 581.494094][T15109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.561750][T15109] veth0_vlan: entered promiscuous mode [ 581.577389][T15109] veth1_vlan: entered promiscuous mode [ 581.653579][T15109] veth0_macvtap: entered promiscuous mode [ 581.663769][T15109] veth1_macvtap: entered promiscuous mode [ 581.715628][T15109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.730408][T15109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.838618][ T9348] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.843832][ T9348] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.851367][ T9348] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.859546][ T9348] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.138224][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.146602][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.206454][T15204] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 582.208537][T15204] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 582.218955][T15204] vhci_hcd vhci_hcd.0: Device attached [ 582.228088][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.230660][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.507622][ T1354] usb 42-1: SetAddress Request (78) to port 0 [ 582.507664][ T1354] usb 42-1: new SuperSpeed USB device number 78 using vhci_hcd [ 582.597723][ T5754] Bluetooth: hci2: command tx timeout [ 583.903414][T15187] vhci_hcd: connection reset by peer [ 583.917852][ T9348] vhci_hcd vhci_hcd.0: stop threads [ 583.921701][ T9348] vhci_hcd vhci_hcd.0: release socket [ 583.925526][ T9348] vhci_hcd vhci_hcd.0: disconnect device [ 584.567314][T15229] netlink: 'syz.3.2337': attribute type 1 has an invalid length. [ 584.689142][ T5754] Bluetooth: hci2: command tx timeout [ 585.662520][T15205] vhci_hcd: connection reset by peer [ 585.670375][ T9348] vhci_hcd vhci_hcd.2: stop threads [ 585.674331][ T9348] vhci_hcd vhci_hcd.2: release socket [ 585.678371][ T9348] vhci_hcd vhci_hcd.2: disconnect device [ 586.438061][ T60] usb 38-1: device descriptor read/8, error -110 [ 586.785994][T15158] block nbd124: Receive control failed (result -32) [ 586.963662][ T60] usb usb38-port1: attempt power cycle [ 587.339997][T15114] vhci_hcd: connection reset by peer [ 587.350814][ T9348] vhci_hcd vhci_hcd.3: stop threads [ 587.375283][ T9348] vhci_hcd vhci_hcd.3: release socket [ 587.551918][ T7692] usb 44-1: device descriptor read/8, error -110 [ 587.558233][ T1354] usb 42-1: device descriptor read/8, error -110 [ 587.568872][ T9348] vhci_hcd vhci_hcd.3: disconnect device [ 587.849466][ T60] usb usb38-port1: unable to enumerate USB device [ 587.952091][ T7692] usb usb44-port1: attempt power cycle [ 587.986815][ T1354] usb usb42-port1: attempt power cycle [ 589.125866][T15276] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 589.130847][ T1354] usb usb42-port1: unable to enumerate USB device [ 589.138916][ T7692] usb usb44-port1: unable to enumerate USB device [ 589.775880][ T41] audit: type=1326 audit(1783125059.365:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.1.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 589.804669][ T41] audit: type=1326 audit(1783125059.365:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.1.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 589.833196][ T41] audit: type=1326 audit(1783125059.385:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.1.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf704efec code=0x7ffc0000 [ 589.840977][ T41] audit: type=1326 audit(1783125059.385:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.1.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 589.848887][ T41] audit: type=1326 audit(1783125059.395:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.1.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704efec code=0x7ffc0000 [ 589.857031][ T41] audit: type=1326 audit(1783125059.395:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.1.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 589.866892][ T41] audit: type=1326 audit(1783125059.395:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.1.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 589.877916][ T41] audit: type=1326 audit(1783125059.415:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.1.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704efec code=0x7ffc0000 [ 589.886153][ T41] audit: type=1326 audit(1783125059.415:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.1.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 589.893561][ T41] audit: type=1326 audit(1783125059.425:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15283 comm="syz.1.2349" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704efec code=0x7ffc0000 [ 590.000682][T15288] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 590.004934][T15288] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 590.616800][T15299] netlink: 'syz.1.2352': attribute type 1 has an invalid length. [ 592.182588][T15325] syz.0.2354: vmalloc error: size 3449536512, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 592.187816][T15325] CPU: 2 UID: 0 PID: 15325 Comm: syz.0.2354 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.187845][T15325] Tainted: [L]=SOFTLOCKUP [ 592.187851][T15325] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 592.187863][T15325] Call Trace: [ 592.187871][T15325] [ 592.187878][T15325] dump_stack_lvl+0x100/0x190 [ 592.187905][T15325] warn_alloc.cold+0x94/0xa8 [ 592.187927][T15325] ? __pfx_warn_alloc+0x10/0x10 [ 592.187944][T15325] ? __pfx_stack_trace_save+0x10/0x10 [ 592.187971][T15325] ? kasan_save_stack+0x3f/0x50 [ 592.187994][T15325] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 592.188020][T15325] ? vb2_vmalloc_alloc+0xf9/0x410 [ 592.188048][T15325] ? __vb2_queue_alloc+0x8d5/0x1160 [ 592.188069][T15325] ? vb2_core_create_bufs+0x5fa/0xa30 [ 592.188091][T15325] ? vb2_create_bufs+0x40c/0x830 [ 592.188111][T15325] ? vb2_ioctl_create_bufs+0x244/0x3e0 [ 592.188131][T15325] ? vidioc_create_bufs+0x7d/0xf0 [ 592.188158][T15325] ? v4l_create_bufs+0x17d/0x270 [ 592.188175][T15325] ? video_usercopy+0x3d3/0x14c0 [ 592.188192][T15325] ? v4l2_ioctl+0x1bd/0x250 [ 592.188211][T15325] ? v4l2_compat_ioctl32+0x20f/0x2d0 [ 592.188257][T15325] ? vb2_vmalloc_alloc+0x135/0x410 [ 592.188284][T15325] __vmalloc_node_range_noprof+0x136c/0x1630 [ 592.188318][T15325] ? vb2_vmalloc_alloc+0x135/0x410 [ 592.188349][T15325] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 592.188376][T15325] ? kasan_save_track+0x14/0x30 [ 592.188393][T15325] ? __kasan_kmalloc+0xaa/0xb0 [ 592.188412][T15325] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 592.188438][T15325] ? vb2_vmalloc_alloc+0x135/0x410 [ 592.188463][T15325] vmalloc_user_noprof+0x9e/0xe0 [ 592.188484][T15325] ? vb2_vmalloc_alloc+0x135/0x410 [ 592.188516][T15325] vb2_vmalloc_alloc+0x135/0x410 [ 592.188541][T15325] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 592.188569][T15325] __vb2_queue_alloc+0x8d5/0x1160 [ 592.188605][T15325] vb2_core_create_bufs+0x5fa/0xa30 [ 592.188633][T15325] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 592.188662][T15325] ? lock_acquire+0x1b9/0x370 [ 592.188691][T15325] vb2_create_bufs+0x40c/0x830 [ 592.188717][T15325] ? __pfx_vb2_create_bufs+0x10/0x10 [ 592.188738][T15325] ? v4l_sanitize_colorspace+0x220/0x410 [ 592.188766][T15325] vb2_ioctl_create_bufs+0x244/0x3e0 [ 592.188787][T15325] ? v4l2_compat_get_user+0x883/0x11f0 [ 592.188802][T15325] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 592.188827][T15325] vidioc_create_bufs+0x7d/0xf0 [ 592.188855][T15325] v4l_create_bufs+0x17d/0x270 [ 592.188874][T15325] __video_do_ioctl+0xb2a/0xdf0 [ 592.188896][T15325] ? trace_kmalloc+0xeb/0x110 [ 592.188916][T15325] ? __pfx___video_do_ioctl+0x10/0x10 [ 592.188938][T15325] ? video_usercopy+0x145/0x14c0 [ 592.188961][T15325] video_usercopy+0x3d3/0x14c0 [ 592.188981][T15325] ? __pfx___video_do_ioctl+0x10/0x10 [ 592.189002][T15325] ? __pfx_video_usercopy+0x10/0x10 [ 592.189029][T15325] ? __fget_files+0x215/0x3d0 [ 592.189052][T15325] ? hook_file_ioctl_common+0x140/0x440 [ 592.189078][T15325] v4l2_ioctl+0x1bd/0x250 [ 592.189100][T15325] v4l2_compat_ioctl32+0x20f/0x2d0 [ 592.189127][T15325] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 592.189154][T15325] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 592.189180][T15325] __do_fast_syscall_32+0xe7/0x970 [ 592.189210][T15325] ? lockdep_hardirqs_on+0x78/0x100 [ 592.189238][T15325] do_fast_syscall_32+0x32/0x70 [ 592.189265][T15325] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 592.189286][T15325] RIP: 0023:0xf7f86fec [ 592.189307][T15325] Code: Unable to access opcode bytes at 0xf7f86fc2. [ 592.189314][T15325] RSP: 002b:00000000f540450c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 592.189331][T15325] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0f8565c [ 592.189343][T15325] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 592.189355][T15325] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 592.189366][T15325] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 592.189377][T15325] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 592.189399][T15325] [ 592.189456][T15325] Mem-Info: [ 592.329822][T15325] active_anon:5754 inactive_anon:4014 isolated_anon:0 [ 592.329822][T15325] active_file:1724 inactive_file:4622 isolated_file:0 [ 592.329822][T15325] unevictable:1768 dirty:21 writeback:0 [ 592.329822][T15325] slab_reclaimable:12951 slab_unreclaimable:83406 [ 592.329822][T15325] mapped:33413 shmem:9879 pagetables:1187 [ 592.329822][T15325] sec_pagetables:365 bounce:0 [ 592.329822][T15325] kernel_misc_reclaimable:0 [ 592.329822][T15325] free:17742 free_pcp:256 free_cma:0 [ 592.347091][T15325] Node 0 active_anon:3532kB inactive_anon:2900kB active_file:0kB inactive_file:7436kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5956kB dirty:52kB writeback:0kB shmem:9476kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9376kB pagetables:1428kB sec_pagetables:1284kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 592.360583][T15325] Node 1 active_anon:19456kB inactive_anon:13104kB active_file:6896kB inactive_file:11052kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:127652kB dirty:72kB writeback:0kB shmem:29988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:29696kB pagetables:3360kB sec_pagetables:176kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 592.374050][T15325] Node 0 DMA free:2500kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 592.385779][T15325] lowmem_reserve[]: 0 280 280 280 280 [ 592.388104][T15325] Node 0 DMA32 free:10412kB boost:28740kB min:41516kB low:44708kB high:47900kB reserved_highatomic:2048KB free_highatomic:108KB active_anon:3576kB inactive_anon:2768kB active_file:0kB inactive_file:7432kB unevictable:3536kB writepending:52kB zspages:180kB present:1032196kB managed:287172kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 592.398486][T15325] lowmem_reserve[]: 0 0 0 0 0 [ 592.400001][T15325] Node 1 DMA32 free:58844kB boost:10240kB min:57380kB low:69164kB high:80948kB reserved_highatomic:2048KB free_highatomic:1400KB active_anon:19456kB inactive_anon:13104kB active_file:6896kB inactive_file:10952kB unevictable:3536kB writepending:0kB zspages:6552kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:0kB free_cma:0kB [ 592.410225][T15325] lowmem_reserve[]: 0 0 0 0 0 [ 592.411772][T15325] Node 0 DMA: 149*4kB (UM) 24*8kB (UM) 2*16kB (M) 6*32kB (UM) 9*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2484kB [ 592.416275][T15325] Node 0 DMA32: 660*4kB (UMEH) 149*8kB (UMEH) 109*16kB (UMEH) 84*32kB (UMEH) 9*64kB (UE) 3*128kB (UME) 5*256kB (UME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10504kB [ 592.421264][T15325] Node 1 DMA32: 253*4kB (UME) 372*8kB (UMEH) 809*16kB (UMEH) 267*32kB (UMEH) 53*64kB (UME) 38*128kB (UMEH) 18*256kB (UMEH) 8*512kB (UMH) 2*1024kB (M) 1*2048kB (U) 3*4096kB (UM) = 58820kB [ 592.426816][T15325] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 592.429664][T15325] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 592.432462][T15325] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 592.435269][T15325] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 592.438100][T15325] 17075 total pagecache pages [ 592.439549][T15325] 1011 pages in swap cache [ 592.440883][T15325] Free swap = 60516kB [ 592.442134][T15325] Total swap = 124996kB [ 592.443439][T15325] 524155 pages RAM [ 592.444607][T15325] 0 pages HighMem/MovableOnly [ 592.446066][T15325] 211469 pages reserved [ 592.447359][T15325] 0 pages cma reserved [ 593.567989][T15336] netlink: 'syz.3.2357': attribute type 1 has an invalid length. [ 593.629933][T15330] block nbd125: Receive control failed (result -32) [ 593.705629][T15336] bond1: (slave geneve2): making interface the new active one [ 593.709629][T15336] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 593.713375][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 593.716197][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 593.722542][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 593.725850][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 594.868180][T15347] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 596.706027][T15364] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 596.708095][T15364] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 596.712972][T15373] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 596.715028][T15373] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 596.730072][T15364] vhci_hcd vhci_hcd.0: Device attached [ 596.732015][T15373] vhci_hcd vhci_hcd.0: Device attached [ 596.997675][ T5834] usb 44-1: SetAddress Request (90) to port 0 [ 596.999831][ T5834] usb 44-1: new SuperSpeed USB device number 90 using vhci_hcd [ 597.002631][ T7692] usb 40-1: SetAddress Request (70) to port 0 [ 597.004572][ T7692] usb 40-1: new SuperSpeed USB device number 70 using vhci_hcd [ 597.996145][T15392] block nbd126: Receive control failed (result -32) [ 598.175476][T15397] netlink: 'syz.1.2369': attribute type 1 has an invalid length. [ 599.571323][T15410] block nbd127: Receive control failed (result -32) [ 602.654596][T15440] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 602.656698][T15440] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 602.694400][T15440] vhci_hcd vhci_hcd.0: Device attached [ 602.939184][T15446] vhci_hcd vhci_hcd.0: port 0 already used [ 602.968324][ T60] usb 38-1: SetAddress Request (90) to port 0 [ 602.970284][ T60] usb 38-1: new SuperSpeed USB device number 90 using vhci_hcd [ 604.118332][T15444] vhci_hcd: connection reset by peer [ 604.127834][ T8202] vhci_hcd vhci_hcd.0: stop threads [ 604.129702][ T8202] vhci_hcd vhci_hcd.0: release socket [ 604.133925][ T8202] vhci_hcd vhci_hcd.0: disconnect device [ 605.351912][T15463] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 605.378685][T15462] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 607.676322][T15498] block nbd128: Receive control failed (result -32) [ 608.047696][ T60] usb 38-1: device descriptor read/8, error -110 [ 608.460513][ T60] usb usb38-port1: attempt power cycle [ 608.553483][T15497] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 608.555808][T15497] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 608.567060][T15508] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 608.569799][T15508] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 608.577729][T15497] vhci_hcd vhci_hcd.0: Device attached [ 608.586205][T15508] vhci_hcd vhci_hcd.0: Device attached [ 608.807878][ T60] usb 38-1: SetAddress Request (92) to port 0 [ 608.820247][ T60] usb 38-1: new SuperSpeed USB device number 92 using vhci_hcd [ 608.878226][T13655] usb 42-1: SetAddress Request (82) to port 0 [ 608.885311][T13655] usb 42-1: new SuperSpeed USB device number 82 using vhci_hcd [ 608.982525][T15513] vhci_hcd vhci_hcd.0: port 0 already used [ 609.707007][T15507] vhci_hcd: connection reset by peer [ 609.711842][ T7308] vhci_hcd vhci_hcd.0: stop threads [ 609.717771][ T7308] vhci_hcd vhci_hcd.0: release socket [ 609.723194][ T7308] vhci_hcd vhci_hcd.0: disconnect device [ 610.789299][T15376] vhci_hcd: connection reset by peer [ 610.797848][ T8202] vhci_hcd vhci_hcd.1: stop threads [ 610.799337][ T8202] vhci_hcd vhci_hcd.1: release socket [ 610.800985][ T8202] vhci_hcd vhci_hcd.1: disconnect device [ 610.801006][ T7692] usb 40-1: device descriptor read/8, error -110 [ 611.073490][T15374] vhci_hcd: connection reset by peer [ 611.081581][ T5817] vhci_hcd vhci_hcd.3: stop threads [ 611.083861][ T5817] vhci_hcd vhci_hcd.3: release socket [ 611.088073][ T5834] usb 44-1: device descriptor read/8, error -110 [ 611.088102][ T5817] vhci_hcd vhci_hcd.3: disconnect device [ 611.577611][ T7692] usb usb40-port1: attempt power cycle [ 611.591456][T15526] netlink: 'syz.1.2392': attribute type 1 has an invalid length. [ 611.833826][T15532] binder: 15531:15532 ioctl c0306201 80000180 returned -22 [ 611.868176][ T5834] usb usb44-port1: attempt power cycle [ 611.937861][T15530] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 611.937880][T15530] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 611.937949][T15530] vhci_hcd vhci_hcd.0: Device attached [ 612.022613][ T5834] usb 44-1: SetAddress Request (92) to port 0 [ 612.024580][ T5834] usb 44-1: new SuperSpeed USB device number 92 using vhci_hcd [ 612.131370][T15542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2397'. [ 612.158398][ T7692] usb usb40-port1: unable to enumerate USB device [ 613.681620][T15557] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 613.683790][T15557] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 613.688035][T15557] vhci_hcd vhci_hcd.0: Device attached [ 613.739286][T15566] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 613.741441][T15566] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 613.782636][T15566] vhci_hcd vhci_hcd.0: Device attached [ 614.097800][ T7692] usb 40-1: SetAddress Request (74) to port 0 [ 614.100495][ T7692] usb 40-1: new SuperSpeed USB device number 74 using vhci_hcd [ 614.730766][T15536] vhci_hcd: connection reset by peer [ 614.738898][ T9348] vhci_hcd vhci_hcd.3: stop threads [ 614.742141][ T9348] vhci_hcd vhci_hcd.3: release socket [ 614.746766][ T9348] vhci_hcd vhci_hcd.3: disconnect device [ 615.520216][T15581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2404'. [ 615.917680][T15498] block nbd129: Receive control failed (result -107) [ 616.761206][T15567] vhci_hcd: connection reset by peer [ 616.771422][ T12] vhci_hcd vhci_hcd.1: stop threads [ 616.773728][ T12] vhci_hcd vhci_hcd.1: release socket [ 616.775914][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 617.087946][ T5834] usb 44-1: device descriptor read/8, error -110 [ 617.377684][T15563] vhci_hcd: connection reset by peer [ 617.387109][ T12] vhci_hcd vhci_hcd.0: stop threads [ 617.389064][ T12] vhci_hcd vhci_hcd.0: release socket [ 617.391984][ T60] usb 38-1: device descriptor read/8, error -110 [ 617.392302][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 617.481138][ T5834] usb usb44-port1: unable to enumerate USB device [ 617.498727][T15591] netlink: 'syz.1.2406': attribute type 1 has an invalid length. [ 617.545364][T15595] netlink: 'syz.0.2407': attribute type 1 has an invalid length. [ 617.627647][ T60] usb 38-1: enqueue for inactive port 0 [ 617.861374][T15591] bond1: (slave geneve2): making interface the new active one [ 617.869436][T15591] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 617.878902][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 617.882526][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 617.886721][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 617.896725][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 618.582454][T15602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2408'. [ 619.157683][ T7692] usb 40-1: device descriptor read/8, error -110 [ 619.639662][T15615] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 619.641787][T15615] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 619.649109][T15615] vhci_hcd vhci_hcd.0: Device attached [ 619.673202][T15617] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 619.675286][T15617] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 619.691787][T15617] vhci_hcd vhci_hcd.0: Device attached [ 619.737721][ T7692] usb 40-1: SetAddress Request (75) to port 0 [ 619.739772][ T7692] usb 40-1: new SuperSpeed USB device number 75 using vhci_hcd [ 619.880182][T15607] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 619.882321][T15607] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 619.916460][T15607] vhci_hcd vhci_hcd.0: Device attached [ 619.978889][ T60] usb 38-1: SetAddress Request (94) to port 0 [ 619.980901][ T60] usb 38-1: new SuperSpeed USB device number 94 using vhci_hcd [ 620.300033][ T5834] usb 44-1: SetAddress Request (94) to port 0 [ 620.302405][ T5834] usb 44-1: new SuperSpeed USB device number 94 using vhci_hcd [ 621.737623][T15510] vhci_hcd: connection reset by peer [ 621.739615][ T5817] vhci_hcd vhci_hcd.2: stop threads [ 621.741481][ T5817] vhci_hcd vhci_hcd.2: release socket [ 621.746525][ T5817] vhci_hcd vhci_hcd.2: disconnect device [ 621.751328][T13655] usb 42-1: device descriptor read/8, error -110 [ 622.178356][T13655] usb usb42-port1: attempt power cycle [ 622.310473][T15619] vhci_hcd: connection reset by peer [ 622.312582][ T5817] vhci_hcd vhci_hcd.0: stop threads [ 622.314351][ T5817] vhci_hcd vhci_hcd.0: release socket [ 622.316088][ T5817] vhci_hcd vhci_hcd.0: disconnect device [ 622.855028][T15616] vhci_hcd: connection reset by peer [ 622.857826][ T12] vhci_hcd vhci_hcd.1: stop threads [ 622.860197][ T12] vhci_hcd vhci_hcd.1: release socket [ 622.862709][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 622.878484][T13655] usb usb42-port1: unable to enumerate USB device [ 622.926130][T15645] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 622.928158][T15645] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 622.959582][T15645] vhci_hcd vhci_hcd.0: Device attached [ 623.334533][T15652] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 623.336550][T15652] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 623.341041][T15652] vhci_hcd vhci_hcd.0: Device attached [ 623.410140][T15623] vhci_hcd: connection reset by peer [ 623.417441][ T5791] vhci_hcd vhci_hcd.3: stop threads [ 623.420045][ T5791] vhci_hcd vhci_hcd.3: release socket [ 623.423308][ T5791] vhci_hcd vhci_hcd.3: disconnect device [ 624.552762][T15653] vhci_hcd: connection closed [ 624.552983][ T12] vhci_hcd vhci_hcd.1: stop threads [ 624.556339][ T12] vhci_hcd vhci_hcd.1: release socket [ 624.559521][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 624.838093][ T7692] usb 40-1: device descriptor read/8, error -110 [ 624.963982][ T7692] usb usb40-port1: attempt power cycle [ 625.076289][T15662] netlink: 'syz.2.2418': attribute type 1 has an invalid length. [ 625.409348][ T5834] usb 44-1: device descriptor read/8, error -110 [ 625.507953][T15646] vhci_hcd: connection reset by peer [ 625.509951][ T12] vhci_hcd vhci_hcd.0: stop threads [ 625.511561][ T12] vhci_hcd vhci_hcd.0: release socket [ 625.514138][T15666] netlink: 'syz.3.2419': attribute type 1 has an invalid length. [ 625.515942][ T60] usb 38-1: device descriptor read/8, error -110 [ 625.519904][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 625.549461][ T7692] usb usb40-port1: unable to enumerate USB device [ 625.637758][T15669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2420'. [ 625.734263][T15673] netlink: 'syz.0.2429': attribute type 1 has an invalid length. [ 625.815621][ T5834] usb usb44-port1: attempt power cycle [ 625.952178][ T60] usb usb38-port1: attempt power cycle [ 626.478838][T15693] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 626.495733][ T5834] usb usb44-port1: unable to enumerate USB device [ 626.554517][ T60] usb usb38-port1: unable to enumerate USB device [ 626.885329][T15704] block nbd130: Receive control failed (result -32) [ 627.632896][T15718] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 628.121990][T15729] netlink: 'syz.0.2431': attribute type 1 has an invalid length. [ 628.312521][T15720] ================================================================== [ 628.315083][T15720] BUG: KASAN: slab-use-after-free in blk_mq_free_rqs+0x6e2/0x760 [ 628.317498][T15720] Read of size 8 at addr ffff88804c0c8c00 by task syz.2.2428/15720 [ 628.320988][T15720] [ 628.321990][T15720] CPU: 1 UID: 0 PID: 15720 Comm: syz.2.2428 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.322008][T15720] Tainted: [L]=SOFTLOCKUP [ 628.322012][T15720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 628.322021][T15720] Call Trace: [ 628.322026][T15720] [ 628.322031][T15720] dump_stack_lvl+0x100/0x190 [ 628.322047][T15720] print_report+0x13d/0x4b0 [ 628.322066][T15720] ? __virt_addr_valid+0x239/0x430 [ 628.322078][T15720] ? blk_mq_free_rqs+0x6e2/0x760 [ 628.322094][T15720] kasan_report+0xdf/0x1c0 [ 628.322109][T15720] ? blk_mq_free_rqs+0x6e2/0x760 [ 628.322126][T15720] blk_mq_free_rqs+0x6e2/0x760 [ 628.322142][T15720] ? lockdep_init_map_type+0x5c/0x250 [ 628.322161][T15720] blk_mq_alloc_map_and_rqs+0x9f9/0xeb0 [ 628.322180][T15720] blk_mq_update_nr_hw_queues+0xc77/0x15f0 [ 628.322198][T15720] ? __print_lock_name+0x27/0x80 [ 628.322213][T15720] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 628.322232][T15720] ? sysfs_create_file_ns+0x14c/0x1e0 [ 628.322246][T15720] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 628.322260][T15720] nbd_start_device+0x1a6/0xbd0 [ 628.322278][T15720] nbd_genl_connect+0xff2/0x1a40 [ 628.322293][T15720] ? __pfx_nbd_genl_connect+0x10/0x10 [ 628.322308][T15720] ? __nla_parse+0x40/0x60 [ 628.322326][T15720] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 628.322355][T15720] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 628.322374][T15720] genl_family_rcv_msg_doit+0x214/0x300 [ 628.322393][T15720] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 628.322410][T15720] ? genl_get_cmd+0x3e7/0x760 [ 628.322428][T15720] ? ____sys_sendmsg+0xa4d/0xbe0 [ 628.322446][T15720] ? ___sys_sendmsg+0x190/0x1e0 [ 628.322461][T15720] ? __radix_tree_lookup+0x217/0x2b0 [ 628.322479][T15720] genl_rcv_msg+0x560/0x800 [ 628.322489][T15720] ? __pfx_genl_rcv_msg+0x10/0x10 [ 628.322499][T15720] ? __pfx_nbd_genl_connect+0x10/0x10 [ 628.322514][T15720] ? __lock_acquire+0x49f/0x1a40 [ 628.322530][T15720] netlink_rcv_skb+0x159/0x420 [ 628.322562][T15720] ? __pfx_genl_rcv_msg+0x10/0x10 [ 628.322572][T15720] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 628.322590][T15720] ? netlink_deliver_tap+0x1ae/0xcc0 [ 628.322605][T15720] genl_rcv+0x28/0x40 [ 628.322621][T15720] netlink_unicast+0x585/0x850 [ 628.322637][T15720] ? __pfx_netlink_unicast+0x10/0x10 [ 628.322654][T15720] netlink_sendmsg+0x8b0/0xda0 [ 628.322670][T15720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.322687][T15720] ? apparmor_socket_sendmsg+0x15b/0x270 [ 628.322705][T15720] ____sys_sendmsg+0xa4d/0xbe0 [ 628.322719][T15720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.322735][T15720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 628.322752][T15720] ___sys_sendmsg+0x190/0x1e0 [ 628.322768][T15720] ? __pfx____sys_sendmsg+0x10/0x10 [ 628.322783][T15720] ? futex_wait+0x11e/0x370 [ 628.322799][T15720] ? find_held_lock+0x2b/0x80 [ 628.322814][T15720] __sys_sendmsg+0x160/0x210 [ 628.322825][T15720] ? __pfx___sys_sendmsg+0x10/0x10 [ 628.322841][T15720] __do_fast_syscall_32+0xe7/0x970 [ 628.322859][T15720] ? lockdep_hardirqs_on+0x78/0x100 [ 628.322875][T15720] do_fast_syscall_32+0x32/0x70 [ 628.322893][T15720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.322908][T15720] RIP: 0023:0xf7fd6fec [ 628.322923][T15720] Code: Unable to access opcode bytes at 0xf7fd6fc2. [ 628.322928][T15720] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 628.322939][T15720] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080001ac0 [ 628.322946][T15720] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 628.322953][T15720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 628.322959][T15720] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 628.322965][T15720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 628.322975][T15720] [ 628.322979][T15720] [ 628.436561][T15720] Allocated by task 5747: [ 628.437862][T15720] kasan_save_stack+0x30/0x50 [ 628.439287][T15720] kasan_save_track+0x14/0x30 [ 628.440700][T15720] __kasan_kmalloc+0xaa/0xb0 [ 628.442134][T15720] __kmalloc_node_noprof+0x339/0x830 [ 628.443744][T15720] __vmalloc_node_range_noprof+0x409/0x1630 [ 628.445515][T15720] __vmalloc_node_noprof+0xad/0xf0 [ 628.447431][T15720] xt_counters_alloc+0x4c/0x70 [ 628.448946][T15720] __do_replace+0x97/0x990 [ 628.450331][T15720] compat_do_replace+0x31e/0x500 [ 628.451855][T15720] do_ip6t_set_ctl+0x2cb/0xbe0 [ 628.453318][T15720] nf_setsockopt+0x8d/0xf0 [ 628.454673][T15720] ipv6_setsockopt+0x135/0x170 [ 628.456176][T15720] tcp_setsockopt+0xa7/0x100 [ 628.457576][T15720] do_sock_setsockopt+0xf3/0x1d0 [ 628.459086][T15720] __sys_setsockopt+0x119/0x190 [ 628.460518][T15720] __ia32_compat_sys_socketcall+0x556/0x770 [ 628.462334][T15720] __do_fast_syscall_32+0xe7/0x970 [ 628.463886][T15720] do_fast_syscall_32+0x32/0x70 [ 628.465352][T15720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.467438][T15720] [ 628.468165][T15720] Freed by task 5747: [ 628.469381][T15720] kasan_save_stack+0x30/0x50 [ 628.470820][T15720] kasan_save_track+0x14/0x30 [ 628.472210][T15720] kasan_save_free_info+0x3b/0x70 [ 628.473783][T15720] __kasan_slab_free+0x5f/0x80 [ 628.475221][T15720] kfree+0x22b/0x6c0 [ 628.476465][T15720] vfree+0x12e/0x750 [ 628.477660][T15720] __do_replace+0x78f/0x990 [ 628.478927][T15720] compat_do_replace+0x31e/0x500 [ 628.480398][T15720] do_ip6t_set_ctl+0x2cb/0xbe0 [ 628.481892][T15720] nf_setsockopt+0x8d/0xf0 [ 628.483257][T15720] ipv6_setsockopt+0x135/0x170 [ 628.484680][T15720] tcp_setsockopt+0xa7/0x100 [ 628.486090][T15720] do_sock_setsockopt+0xf3/0x1d0 [ 628.487601][T15720] __sys_setsockopt+0x119/0x190 [ 628.489098][T15720] __ia32_compat_sys_socketcall+0x556/0x770 [ 628.490918][T15720] __do_fast_syscall_32+0xe7/0x970 [ 628.492410][T15720] do_fast_syscall_32+0x32/0x70 [ 628.493904][T15720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.495788][T15720] [ 628.496615][T15720] The buggy address belongs to the object at ffff88804c0c8c00 [ 628.496615][T15720] which belongs to the cache kmalloc-8 of size 8 [ 628.500672][T15720] The buggy address is located 0 bytes inside of [ 628.500672][T15720] freed 8-byte region [ffff88804c0c8c00, ffff88804c0c8c08) [ 628.504640][T15720] [ 628.505393][T15720] The buggy address belongs to the physical page: [ 628.507293][T15720] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c0c8de0 pfn:0x4c0c8 [ 628.510288][T15720] flags: 0x4fff00000000200(workingset|node=1|zone=1|lastcpupid=0x7ff) [ 628.512728][T15720] page_type: f5(slab) [ 628.513957][T15720] raw: 04fff00000000200 ffff88801bc42500 ffffea0001c9a610 ffffea00019664d0 [ 628.516430][T15720] raw: ffff88804c0c8de0 000000080080006f 00000000f5000000 0000000000000000 [ 628.518943][T15720] page dumped because: kasan: bad access detected [ 628.520887][T15720] page_owner tracks the page as allocated [ 628.522579][T15720] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15688, tgid 15687 (syz.1.2424), ts 626242363436, free_ts 625207753187 [ 628.528657][T15720] post_alloc_hook+0xfd/0x120 [ 628.530078][T15720] get_page_from_freelist+0xf48/0x3530 [ 628.531704][T15720] __alloc_frozen_pages_noprof+0x6ab/0x2dc0 [ 628.533487][T15720] new_slab+0xa2/0x650 [ 628.534722][T15720] refill_objects+0xe3/0x410 [ 628.536159][T15720] __pcs_replace_empty_main+0x376/0x680 [ 628.537830][T15720] __kmalloc_noprof+0x66d/0x820 [ 628.539284][T15720] group_cpus_evenly+0x195/0x660 [ 628.540828][T15720] blk_mq_map_queues+0x9d/0x430 [ 628.542298][T15720] blk_mq_update_queue_map+0x305/0x3a0 [ 628.543973][T15720] blk_mq_alloc_tag_set+0x660/0x1330 [ 628.545507][T15720] nbd_dev_add+0x342/0xb10 [ 628.547173][T15720] nbd_genl_connect+0xb8d/0x1a40 [ 628.548966][T15720] genl_family_rcv_msg_doit+0x214/0x300 [ 628.550811][T15720] genl_rcv_msg+0x560/0x800 [ 628.552283][T15720] netlink_rcv_skb+0x159/0x420 [ 628.553782][T15720] page last free pid 13655 tgid 13655 stack trace: [ 628.555802][T15720] __free_frozen_pages+0x79f/0x1090 [ 628.557489][T15720] kasan_depopulate_vmalloc_pte+0x5d/0x80 [ 628.559206][T15720] __apply_to_page_range+0xb1d/0x1520 [ 628.560830][T15720] __kasan_release_vmalloc+0xd7/0xe0 [ 628.562439][T15720] purge_vmap_node+0x210/0xb40 [ 628.563935][T15720] __purge_vmap_area_lazy+0x90a/0xc00 [ 628.565562][T15720] drain_vmap_area_work+0x27/0x40 [ 628.567143][T15720] process_one_work+0xa23/0x1940 [ 628.568672][T15720] worker_thread+0x5ef/0xe50 [ 628.570096][T15720] kthread+0x370/0x450 [ 628.571355][T15720] ret_from_fork+0x72b/0xd50 [ 628.572769][T15720] ret_from_fork_asm+0x1a/0x30 [ 628.574219][T15720] [ 628.574952][T15720] Memory state around the buggy address: [ 628.576892][T15720] ffff88804c0c8b00: 07 fc fc fc 00 fc fc fc 07 fc fc fc 07 fc fc fc [ 628.579383][T15720] ffff88804c0c8b80: 07 fc fc fc 00 fc fc fc fa fc fc fc 00 fc fc fc [ 628.581840][T15720] >ffff88804c0c8c00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 628.584262][T15720] ^ [ 628.585524][T15720] ffff88804c0c8c80: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 628.588000][T15720] ffff88804c0c8d00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 628.590434][T15720] ================================================================== [ 628.599355][T15720] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 628.602007][T15720] CPU: 0 UID: 0 PID: 15720 Comm: syz.2.2428 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.606032][T15720] Tainted: [L]=SOFTLOCKUP [ 628.607733][T15720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 628.610917][T15720] Call Trace: [ 628.611966][T15720] [ 628.612885][T15720] dump_stack_lvl+0x100/0x190 [ 628.614312][T15720] vpanic+0x552/0x970 [ 628.615484][T15720] ? __pfx_vpanic+0x10/0x10 [ 628.617032][T15720] ? blk_mq_free_rqs+0x6e2/0x760 [ 628.618636][T15720] panic+0xd1/0xe0 [ 628.619833][T15720] ? __pfx_panic+0x10/0x10 [ 628.621266][T15720] ? blk_mq_free_rqs+0x6e2/0x760 [ 628.622939][T15720] ? preempt_schedule_common+0x42/0xc0 [ 628.624650][T15720] check_panic_on_warn.cold+0x19/0x34 [ 628.626348][T15720] end_report.part.0+0x3a/0x90 [ 628.627838][T15720] kasan_report.cold+0xe/0x18 [ 628.629297][T15720] ? blk_mq_free_rqs+0x6e2/0x760 [ 628.630899][T15720] blk_mq_free_rqs+0x6e2/0x760 [ 628.632402][T15720] ? lockdep_init_map_type+0x5c/0x250 [ 628.634147][T15720] blk_mq_alloc_map_and_rqs+0x9f9/0xeb0 [ 628.635903][T15720] blk_mq_update_nr_hw_queues+0xc77/0x15f0 [ 628.637664][T15720] ? __print_lock_name+0x27/0x80 [ 628.639213][T15720] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 628.641113][T15720] ? sysfs_create_file_ns+0x14c/0x1e0 [ 628.642796][T15720] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 628.644534][T15720] nbd_start_device+0x1a6/0xbd0 [ 628.646025][T15720] nbd_genl_connect+0xff2/0x1a40 [ 628.647492][T15720] ? __pfx_nbd_genl_connect+0x10/0x10 [ 628.649126][T15720] ? __nla_parse+0x40/0x60 [ 628.650489][T15720] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 628.652584][T15720] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 628.654681][T15720] genl_family_rcv_msg_doit+0x214/0x300 [ 628.656333][T15720] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 628.658210][T15720] ? genl_get_cmd+0x3e7/0x760 [ 628.659651][T15720] ? ____sys_sendmsg+0xa4d/0xbe0 [ 628.661155][T15720] ? ___sys_sendmsg+0x190/0x1e0 [ 628.662690][T15720] ? __radix_tree_lookup+0x217/0x2b0 [ 628.664291][T15720] genl_rcv_msg+0x560/0x800 [ 628.665675][T15720] ? __pfx_genl_rcv_msg+0x10/0x10 [ 628.667236][T15720] ? __pfx_nbd_genl_connect+0x10/0x10 [ 628.668856][T15720] ? __lock_acquire+0x49f/0x1a40 [ 628.670398][T15720] netlink_rcv_skb+0x159/0x420 [ 628.671892][T15720] ? __pfx_genl_rcv_msg+0x10/0x10 [ 628.673403][T15720] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 628.675062][T15720] ? netlink_deliver_tap+0x1ae/0xcc0 [ 628.676655][T15720] genl_rcv+0x28/0x40 [ 628.677877][T15720] netlink_unicast+0x585/0x850 [ 628.679334][T15720] ? __pfx_netlink_unicast+0x10/0x10 [ 628.680971][T15720] netlink_sendmsg+0x8b0/0xda0 [ 628.682441][T15720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.684079][T15720] ? apparmor_socket_sendmsg+0x15b/0x270 [ 628.685773][T15720] ____sys_sendmsg+0xa4d/0xbe0 [ 628.687256][T15720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.688836][T15720] ? __pfx_____sys_sendmsg+0x10/0x10 [ 628.690439][T15720] ___sys_sendmsg+0x190/0x1e0 [ 628.691912][T15720] ? __pfx____sys_sendmsg+0x10/0x10 [ 628.693483][T15720] ? futex_wait+0x11e/0x370 [ 628.694924][T15720] ? find_held_lock+0x2b/0x80 [ 628.696412][T15720] __sys_sendmsg+0x160/0x210 [ 628.697903][T15720] ? __pfx___sys_sendmsg+0x10/0x10 [ 628.699463][T15720] __do_fast_syscall_32+0xe7/0x970 [ 628.701047][T15720] ? lockdep_hardirqs_on+0x78/0x100 [ 628.702706][T15720] do_fast_syscall_32+0x32/0x70 [ 628.704239][T15720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 628.706190][T15720] RIP: 0023:0xf7fd6fec [ 628.707441][T15720] Code: Unable to access opcode bytes at 0xf7fd6fc2. [ 628.709398][T15720] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 628.711925][T15720] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080001ac0 [ 628.714300][T15720] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 628.716687][T15720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 628.719147][T15720] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 628.721634][T15720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 628.724080][T15720] [ 628.725740][T15720] Kernel Offset: disabled [ 628.727051][T15720] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:31:37 Registers: info registers vcpu 0 CPU#0 RAX=0000000000cc9cc5 RBX=ffffffff8e891480 RCX=ffffffff8bb5f2d5 RDX=0000000000000000 RSI=ffffffff8e1a4d89 RDI=ffffffff8c3fff80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100564678d R10=ffff88802b233c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb5d89f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bf5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7456288 CR3=0000000066313000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a00545 RDI=ffffffff9b9e11a0 RBP=ffffffff9b9e1160 RSP=ffffc900036eeba0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666666 R12=0000000000000000 R13=000000000000002e R14=ffffffff9b6e122a R15=ffffffff85a004e0 RIP=ffffffff85a0056f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cf5000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73c33f4 CR3=0000000066313000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 EAX=00000000 EBX=ffffffff ECX=825f1404 EDX=f6fe2018 ESI=82473685 EDI=ffffffff EBP=ffffffff ESP=ff8f6c30 EIP=f709b2b7 EFL=00000283 [--S---C] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 56c65480 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055887cbe3f40 CR3=0000000050ec2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000987e25 RBX=ffff88801c70a540 RCX=ffffffff8bb5f2d5 RDX=0000000000000000 RSI=ffffffff8e1a4d89 RDI=ffffffff8c3fff80 RBP=ffffed10038e14a8 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bb5d89f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ef5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7391a60 CR3=00000000587fc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012c00000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000