last executing test programs: 5.490439102s ago: executing program 3 (id=1579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703d90008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, &(0x7f0000000080)={0x7, 0x1000, 0xffffffffffffffff}, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r4, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, 0x0, 0x0) 4.969407136s ago: executing program 1 (id=1583): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000600)={0x17}) write$binfmt_script(r3, &(0x7f0000000100), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x30) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 4.101560001s ago: executing program 1 (id=1589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cdrom(0xffffff9c, &(0x7f0000000400), 0x101000, 0x0) socket$kcm(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0xfffffffc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x29, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='tran', @ANYRESHEX, @ANYBLOB=',wf', @ANYRESHEX=r6, @ANYBLOB="2c00b7aceb7e4d447e283c8a567204cb92fc26d5abc456dc0e6f7109d9cf3706636d77e960f3036ab08d32c0e1157adbe51a565c1de9d88b447b4bcbfb0b28f9fd100f832049e6c349b05093c0197fc2ac8ba5f96967b0c36bdaeeac143f73b38c53de4a374b6aa09abda02d26938f048e9300c7fad7faef7517adda39536f6bf836feae80a9a2c99cfbc9df4128578a5e20a561c88dbb114a349f9046ef65cf35666d5b7746073259c4f61c7f0c39045b0bd2ed921d36ab73fab9e0947719d52ec48e5e7e14a913dcfbce6803"]) ioctl$CDROM_NEXT_WRITABLE(r1, 0x2284, &(0x7f0000000440)) clock_gettime(0x7, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000003c0007010000000000400000017c00000400fc800c00018006000600800a00000800028004007280140007000001"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 3.690052473s ago: executing program 3 (id=1591): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r0, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x4e23, 0x2, @empty, 0x3}, @ib={0x1b, 0xfffe, 0x8000000, {"7d900600080000000900"}, 0x0, 0x0, 0x6}}}, 0x118) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) 3.418438019s ago: executing program 2 (id=1593): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000600)={0x17}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000"/15], 0xf8}}, 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 2.930071656s ago: executing program 1 (id=1595): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x0, 0xbf, 0x0, 0x0, 0x2}, {0xfffffffffffffffb, 0xfffffffffffffffd, 0x1}, {0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x0, 0xf000000}}, 0xe4) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xd32]}, 0x8) read(r1, &(0x7f00000002c0)=""/183, 0xeb) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) poll(&(0x7f0000000440)=[{r0, 0xe7d4c009da6c1d8d}], 0x1, 0x2000000) 2.750172363s ago: executing program 0 (id=1598): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000600)={0x17}) write$binfmt_script(r3, &(0x7f0000000100), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x30) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 2.749168681s ago: executing program 3 (id=1599): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000600)={0x17}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x30) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000"/15], 0xf8}}, 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 2.200445112s ago: executing program 2 (id=1600): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 2.060615541s ago: executing program 1 (id=1601): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_io_uring_setup(0xbda, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 1.799981639s ago: executing program 3 (id=1602): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x18}, 0x8810) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0x6}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x403, 0x3, 0x4000009, 0x6, 0x0, 0x6, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x5, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x3b, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x89c, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.79954451s ago: executing program 0 (id=1603): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x40086602, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmdt(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0xf, 0x2a, [@random={0xdd, 0x9, 'abcdefghi'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x3c}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r6) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x40}}, @void}, 0x3f) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 1.361573859s ago: executing program 2 (id=1604): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb4, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd25, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff}, {0xe, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x38}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.278196835s ago: executing program 2 (id=1605): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cdrom(0xffffff9c, &(0x7f0000000400), 0x101000, 0x0) socket$kcm(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5, 0x0, 0xfffffffc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x29, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=', @ANYRESHEX, @ANYBLOB=',wf', @ANYRESHEX=r6, @ANYBLOB="2c00b7aceb7e4d447e283c8a567204cb92fc26d5abc456dc0e6f7109d9cf3706636d77e960f3036ab08d32c0e1157adbe51a565c1de9d88b447b4bcbfb0b28f9fd100f832049e6c349b05093c0197fc2ac8ba5f96967b0c36bdaeeac143f73b38c53de4a374b6aa09abda02d26938f048e9300c7fad7faef7517adda39536f6bf836feae80a9a2c99cfbc9df4128578a5e20a561c88dbb114a349f9046ef65cf35666d5b7746073259c4f61c7f0c39045b0bd2ed921d36ab73fab9e0947719d52ec48e5e7e14a913dcfbce6803"]) ioctl$CDROM_NEXT_WRITABLE(r1, 0x2284, &(0x7f0000000440)) clock_gettime(0x7, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000003c0007010000000000400000017c00000400fc800c00018006000600800a00000800028004007280140007000001"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.179687861s ago: executing program 1 (id=1606): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f0000000540)=""/4090, 0xffa}], 0x2}, 0xacd2}], 0x1, 0x10000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee"], 0x398}}, 0x0) 1.009989913s ago: executing program 0 (id=1607): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x44, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 1.009811893s ago: executing program 0 (id=1608): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x20}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x86}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) 910.419894ms ago: executing program 3 (id=1609): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f044, 0x800}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x0, 0xbf, 0x0, 0x0, 0x2}, {0xfffffffffffffffb, 0xfffffffffffffffd, 0x1}, {0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x0, 0xf000000}}, 0xe4) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xd32]}, 0x8) read(r1, &(0x7f00000002c0)=""/183, 0xeb) timer_settime(0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) poll(&(0x7f0000000440)=[{r0, 0xe7d4c009da6c1d8d}], 0x1, 0x2000000) 909.977709ms ago: executing program 0 (id=1610): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000600)={0x17}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x30) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000"/15], 0xf8}}, 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 370.178197ms ago: executing program 2 (id=1611): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005740)={0x201c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x15}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x9}, @nested={0x1fe8, 0x8, 0x0, 0x1, [@nested={0x1008, 0x48, 0x0, 0x1, [@typed={0x1001, 0x7e, 0x0, 0x0, @binary="6269847fe665d109f237e8aa4ae44e2514f2cde37fe084f741d6bcc181ce33b60a746cd135e0ecb743df5994a5d7531d4dc69b4286f0eb2e067a94bfcb1d9fedcc3ebbe22497c3d26fbb4703b276eb9ba405957ac276c398d7672512fdde0e974136b57b9cb4069433cd41e9409014b94d11820dd926dbf1a529cb695c96fd87ae807f14189bde5e66a781c0a8f834fb71491cf3747e563bf97d4381b2616614d65fd05c613c1893ca6284730cafd60f239cd4dbf9bcd38ef2f58b8a6cdb12fa560bf030e0b03555d4f4885584b3b90833426b73b2fb10bdf2f6c6c4c1ed01ec4433aa60c971a2a6a262e9f6e2754edceb165579abe5a6a9cb950341330ce6b127fd413bf592728e1c4c93a44ba4fac87a1eadce5b0ab06b5946182c4fb06edb0a8af229254a656c0f198c66b13b80d802ea2f6cc8b72697073e8f519c601d2183fd07a34535e203a42d8bf3b67fe3dc561012dfdb4fc0921e727ab4f203516fc620bb67ccfefe2e5b54f48a4e3c7209edea271b4fc1f4c166dbf9cf672492a1fe8bd66b332dd5c398744c47dff3513b410b05189847696a7769f8aa369dc8e495eb7ed5a65b8bff2dd308a33e724672092ce3869f44cfe6a6609bcab86156dad58886c71c781def420ca6165af9d1d86c64a44597194b3554342907242e3b0c90bd34c758e55febca1f1e622cdafb184edaf9aa9a78db29dc75188f8daaedbada26fe4aa3d47124557f0e108c171e040a0e432b2a692507869189e780c789bf6cdfa78c9bfdd70cab3428f1fccd956da26387c213f072887ca4bf1cbb970bb590cbebe25de8fbc01f5e2763a7e84ec6ebecba3adc83b5fd51eab2362a9a684645db8ff844ac59b2c9061cc4994029666194033b4750f53f051716755981f27d7d59bb5dfc3c7938a0bf6f9fa7ba42df6799ce5c5c1e5bdc3e2d3318657fe11e79fded29af5b19d926bf6caa2021386dea2b65414b6af4636652e605824d0988a9bfa77f3ba6d802b3e74adc5acd1ba3ec58955fedf76ac2180d7502ac58807f59eb78bde17678b1ddd5f4d2ff5829ac55adb0a846ae2058680ea0d0c393eed1771f365ae7b30ba68b60e8253e64b91056af02f8067762631ae00a7aec9e11750ffb3f23db5fbff9fc0fe70d9b39d0bc01d7525987acbbca0271f9eadffeb9daa04dc35033b69614ea669ba1910973f7cbe64597c80492c75622a05a6f8e9976c42d27b0cc4f11d14ae58ffddb2563e264f2a9eb02f418b3f9e1336b75071c34f054bd2985acbc0558917dc7b1da59f568acc5841422d3807630110cffc4dbc5dc6e3c13923f220009c920ea98485b382e8cdcc97970ee384ba0745eae7190ff8da592324049994fb85bdd3441f556f672d1dbf74130673fdeadb7b101ed6e192fc2c3c88cc3bb0237655555f5fe93c18b5e0310044be0f01ad5802b6fc83cbf98d4825704d1ae4e2c71b1df430a06f8fe5aa5d69fb699b107272ba187953e8f98dd761f702467a470c0f76574be777ed9b441d63d2795142e26160b3cd645617a369faa3fe79785ea21d325c4da1608b499f75dc80fdf738902f5284c7ec34e1eca30e86b3928e74764332d728e93a4840758521af2579863d3cd0fc564e4cfc10b7f45e9da01c3e722d330390b74be977716d11af83439aa18ad395ebd8feac1538f236d10e2f2df9e93b9f44e8ac7b297a91997483c74ebbb004b85008ea113be842076d222b73f68640d9ed8d8f29391e0d98336889e66ced137b53472d34f2e2ed733ba6808ff4d4c5e6c43ccd6b3fd1f20e7e89ff92f6b7dbad5d71c0dbe7988b36c1e2407af8680a04ca83527ebfe15cec2f83515a01376332c4c92afb8a6dae17d78b94d995104866ea2382be72d3d6416dae77fb2e6c2a3bdf43ed1695171234cb6d972ea22f8166366839b0e2adfe559603f00938af296b9b3ac8e27ebf4de11d3b66bd37228348d068e1afd21c23760ce9d43c851df1fcb8403a2a0c42b34b1d9eb53a74ae168499621e5a7146506f1a4a50434e10cb22ef2e5140b5bc84a87b10d1fa045b93f42d2b45ad106eb5727ffd739157ff803478ec44ff4da487669a81987597bb9db70e9e2f294bda987158e851c9972d3da14ba0cc84651ba6686403ce12fe49582110f2adb8015b243f9063adf38105a4b234809a845f011b15f09e9a8c350561503310f4b999b4201245a5770a824e52e12dda7c3cd7d3155175c47ed707d47b82882420580949d1b11e4b797fa50030673dcbc67eeabf6c927d2dd1ee5083cb8a151b6c9306d62766e2da7f3476a4e67dea0261c6f9082e3b707ae6c71456935a1bfacabe9cdc19494aa85bd92ff14afc9cc9527f87440335cc7730e03bfb753dd4302dd57e19a685b46ed1a7abe551e3f8ef79b1c47bfa4ee892a8f250706d18d45fa9aae02b9905a66249721956e06be0620d32402ef579150e61e9d48ac6b91da3349564d2c6268c0417d5b268a7f3f55b9a4fe1302936216516d3e6da20ce58979a4405d22d45fbb79e6f9dd1df43fa0faeb2e10391f53dcf9197dccc94e99ae0fbb40ee0aa8f99c7dd564c39cdb1691d2230a1ebbb8d4471296d80d318407eacf3b54ad57b48ca0fbaebc41b5fded9b569233ae6bd1d579edb6e547af6f4a3fb36f650dcbdeb2c6cc0d8a63c2118fbe5e7542b821ce959335567ac80a9a1014c8111a855f45dced1c4e7fe8799581346f6551c3ae3f0c4df81f0e9685825202f77d5435d8560e434625f4c66375481c146c2fc904e71f34b9d73d72d4b984c32a05c6fb2c18042d89be1a179ec0853ad32285a3e1ca6410d2f80a4acafb0c4c201ef4e73a4f252f94af707d6778ef957dd30e8181dd3c5414e9c73c8fd415603a60b9631af437081a864e4a20d1ffca9e85ff09a7a9856cda192cb31d5fc7f4faccf11a67611e2a150e9976cf10dd5efd0495886573511323d7501d9e0dc5f98366e0b4a6d0465a63ab08ace7463e14b3158d0f14def4c8822b9352c4c60d1876d6a8e6f165d8105925c63f92d2b853e8f85f76bf2ae79b6f8f5ee079c5429e0af81085ba4629ec03dd7b60f61d77b7d7958e4bdb77a124da8cccc7a0a118c439eff9efdfbf23c3e4f36f129cf85f0e6ae5294bfeff29ec622c2d307f05c6ffe545d9913f7314c62800428bdab35aaadf999649dfe41fb39afb04834d408032e5bcf047377575eace64f71efa94c7a2741893341b9616993d986f27d145bcf173d4b5a8eadd242a6e8ea71c5ace620dfc56a77807087e6298408d551cad16fa644c88b8990210aa03fcaf9bbadb66e8c71fcee171f9b10549b35645e161eb11a85351c2eacd3492907efddb9dde627e9e827ae24708e798c7a119abb8cccfb8b8f472afe3739a6eae7c08b04603660803a5e6e1054441d12ad7f1908e2c80c80f29e76a1eb9c66571d353fabc8f5714c11416cc3d8e8d3b83dbeaace4fe0747f32c43e60067179dd397ce81c58e3d6e566c9e65c1b439107aca3a1f81e638127ecff2f429b1c6f5faec8ff0420ec3257428fdfb60d5064a1da3c84d25eac722bbfa1ff58ebbd13c021ae37d19ce74ef9737809f8643c36d09ddfb7da04c96bf1fc84d6b8b2ad95dbe325ed29d1961d15da29dba900912dd02ab017cd5df918d13c252d4900c360821b2582c16a1e8ea1deaef6983fe13e2a20e477a96c7288607bb070830972846b5ba30bebed0f668e5b6d5d39f2622497c57bb8cafb23f9ddf57e594d77f11011e16ec397db8966d3eb8fd1a5969e07588db3026100ef761d4f5c04e42246f57e0c34dc1a16b8b7dcca4b14cdd6fccea3cc1f1f2088188db7ba2c8bc9c84e8f0e78c87d2f22312bb5c803b57c4f52f9ac866e99248d2a6b445fe5390ca99c593364109ccf23a3a210bde45b11f114d358558cd08b684adce1e85adb8418ac20a279803bf6a9da19eb74a46fa6d30e0acc9cee1841f3293adde91275f5faa07a86079ef9875005b00a448144c6bb4163c89ec63ded7641947163734dd2da5cf3ade4436db2f308a7126a90b31b8b0c0d0032536a56c96d3cea70d3226dff8e8e147992c410e5e699c9f9af0229e463066de24e101047ac1693d9a5fbfb0c45091d82374165b12c03bf486cfed9c55e1a942ac6c08e693b2fbb9c671971d6a13e4723876ea0176f6bf81a2d63148f42ab90b37092f228c7d33d11e669c1a12025d693a9d8ed16a00265df58510c5841db0910038409ec1dbcbafcf301ecb5e63de17d1172f96aedba9592be058d50c6bef6a28d197f97202494af348646ae676be08d9538a980e986fe23451eb46cec545e51244e7be72e495cbfa30466184cdb3439750a6125ca0ea1a7df6e81499bb81729b98717fae12d9d0973d3efe31a9102819dda5ec9b898e6f133395b334efeddea7915cc5f652456c469f9aed8aecc2eae7a25074e1856b0527adb86aa365f1be4216cd8ea51d8965ed057b4d78a4ef993df67f1b664b1f0cdb55efc9c3a1533dd99f4af5ed9fd3fe465b5ffad35d035c9ad982a9cf7dcfe6a930f495304db5f2b9b20db129fdfd7b88aa07c9713adf733bf6c70018f562eaa7f206c33d5c7eb524c74c411008df7d42895c8fd6863cc77e39b5f8352e1983ade98a88abd3ecb947f7273e8e10af9f197a227d44644cb3b8e9720384f0cfeefb3f25d437d1b380facb5b0c20e91411abf1ee6f2fbfacd26de4370ad02d41160652f53c911f951a2c2a9879b910e5e86d0dc182d92cf1c37c678aabb9cf1eb715495d4f4b662f69f62294299a69a8131dcc741f753e1785e166fbf967950990b2400ccacd36b591cc6bc182078e63fd2d870c62714cc66badda8ccee9a6c2d2793a712f63b42edcfc1bcde334ad615640b9839598fe7f9774b5ce7a7f5fc67d0a771410baa36128933f46187d9d25dd18d010ec7e11954f1ffbc16c1bc59d986bab494efad71903553dfa42c28233fd4a66a3ca14cf34a22a3b225f024cfc664d2f26b17180c8e833862049ab31e8e0f54406f49c8f46243032f89e344d9152764bc217a7fe6f83bce80bff80b8c2ee55985a38d6953aed1d899dc60c47460996bbb7728ce051ad0aae83f9e69cdd1046251d539f703667315cc04755636a11c9c6e2cdedc99719951361fdad021911ff79b443c60a6f08bc81baa2c2094cdc65081243e4bb242acac9246edefc6004c1f9a2919781794de1737e1e23f1a9e0f3159ba61df3be61031f5a3be1c3765a10b738a2d974dd47baa207686cc31d7589d56cb88486dc2728d07ac5cdc5cb0c1da4649efc7c8e48cbe3b4279de8a24c8ad03ab3526fd0d766ec89668aa52b8b9de6f8c1f2ea7056f9d459608de18f0e53392f666c670c0e41753010fed54b42c1ad29fa0f74dc62c2b530efc67a179211e9da37425182ffd73de4229c32c819fd7d1534518671ab7984e824f5e3a369e05b5b9894554b5fb46acbadceecc58993f34b8df9c8a7cfe6bfa7b82800208bfad1adc9278b297e5e599a4e570402848ceb432631397c50020716e6ee7df01551254dec14798a6ad4178edb8bd71bf7ce53774203918d920f02d4f59c1f136656b63534b12d9ca5787aec382f09da17edb59775d30fb63bc98eca130aff7a8ca36d07840908ddd4694ecca2d214d63b41fef5e1f79c0bbe8d24cae15ad6567e4d296e32d4b20d5ab48c66bbb601e5cfd39733acff18db7eb2f3ba730d4c77a4c50f165c7620c76d71c7b78e0eef38d0c7d6cfc864ecfe80c410efb06fc55255bad6bde49e709d6fa208cdae8cec582f6221d65849d7a1a1fa98a9ffe839"}]}, @nested={0xfdc, 0x105, 0x0, 0x1, [@typed={0x8, 0x13f, 0x0, 0x0, @uid}, @nested={0xfcd, 0xea, 0x0, 0x1, [@generic="0a7d59fc86e2b6fb8d7b15ab4f181c466787aba129ad568649b468280a1754513f10768df67d301bb2d6d4ea8a178d04e60e65779fe36d955d40ca17935bb0ca91bfbddef182fb403a26c6d4dbf0e17d482c50fdeaa6446765ef1041e9d1fcc19cfa7146ec293ce5d723f10dc3d04a04e6fb9661932e9fd15e174b3dfd4e1798d660ffe1de5106955e62a3e99d872f7c86a32e9fffb470cd26", @nested={0x32a, 0x3a, 0x0, 0x1, [@generic="f37d7d7eaa26f4e62ccc983285e3e8aff796d849a5ee2e14d0fa81dbc3451b3f802d1cda7c940baa31aa393c4a3de0974cdd531be7c298a37b25626b03d5237f4a89355762aef807b1f62389b03351adf5678793f5b206d8e241f9d34525548413a3fb0010c532abcd6bb7a243b2f31509021b53c118e0d8ee23cd", @nested={0x151, 0x116, 0x0, 0x1, [@typed={0x8, 0xdd, 0x0, 0x0, @u32=0x3}, @generic="8e13755f0ca23bca626657ebd91addd5dfcf49143057b2d9bef3a035031806dda066fbbee07ae4a1b3a58f092d5a6b2fb50063", @generic="ad7fd6ebebe32d2501bca78d0588d78f4e656d13e53c2c4ab15d58f2a62deb8d91365115cbedb1c9ddfdb46ce0fb1975470b4e8c8b0936c6b793571571555222fb73eaf397b30203a574d4b1ab5120c37d516208b454336e6b303d1ddf2d8f79e61aeba0e1dd90f57378f033116271bb555a839baada4b56e3d386be8df7a11674f2a41f5c88800ceed175eac60e5d02ca7878c5d966cfc9d91f98c3a3c7165dd21cb8e55e35dd4007760bdcd8e1a052b8902595c20686ec39a7ba46793e8bf12a8dce3b0173c298da98cd9cf925d457b5061daa034f5ab5946d6c4779fc92af84a3f30c006169321763b795cbd68f450202f1", @generic="bdafb9308bf6ed", @typed={0x8, 0x104, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x71}, @typed={0x8, 0xc9, 0x0, 0x0, @pid}, @nested={0x4, 0xe2}]}, @generic="29b630dd4a4e2704a80ca3bd93fb4979432fbe4334f77eaf996439a374830a686c017aa079a18bb53250498243b33e8f326283a21b1d6881be95732d6100372b930ad615da9c67501128d29601b10b7420c19be68b4c2821b392d1ba25e15de6a7a7b9a68c96d4e7aa8c1e3bd844d0e3f1d966276316096f198b4557a328b535bb397b28c910e869f1ef0eca39910274e253d985d6ecf7964c480eea7b9261ad684d680df58d44482dfab9c2f15a1cf793bf49d59eda6c190c76c956cd9ecdf2e3061be2c9c95cd52ddad6df0b63c044bf56b135725801f77dc3dd065f82926c3d68b4de", @generic="3005046c0947180ab792d8bf087229686238068a2060c769962c20e0672d9fb7b5c0d0ca6ad66d537c8170d7c2a321803b3c26c206aa2f1825a3b0550cc6a8fc5a9ab6d26e8d85b6cdd66790a93c29719ecb2168b4996d09cf325ebb49e00d5d19ad729e5863a0e4d22e07a580e70757032d70"]}, @nested={0xc01, 0x133, 0x0, 0x1, [@generic="09c15be1c94253dbca3b1b05d34aca0cc5070940a6fee2917b7869069a718a16bd16d2a35b3e4cc476cc58313219e9d4f7f9e15f6d04851dbef8b089ef6378e0c52ee65c5c0e214d937d66b87179c9af782f34d4b7ad218382a62eaf3e1faa732cb0a5d050490fd5951c594aeeb16f4c24ec36e51a9ad216907aff8557ea2244855fe16c0fd002c333722c1106df89a86015487a73eaa93c779e3dfff7a73b087cfc99cf2745e6516b5d1ae42afe63bf8472cd3c6e216ad285a8bf38444f1a5e596a9a020ab84150f521ea0bc5fc4198938c6bfdb2b7ff0a70fd6f0ac4502d8e8ee82d8124d1f9255f42b453484264a37ba3b2c7e97b3aaa63", @typed={0x14, 0xda, 0x0, 0x0, @ipv6=@remote}, @generic="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"]}]}]}]}]}, 0x201c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 369.925981ms ago: executing program 1 (id=1612): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x199}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 362.214471ms ago: executing program 2 (id=1613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) 332.735µs ago: executing program 0 (id=1614): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_io_uring_setup(0xbda, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 0s ago: executing program 3 (id=1615): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r0, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x4e23, 0x2, @empty, 0x3}, @ib={0x1b, 0xfffe, 0x8000000, {"7d900600080000000900"}, 0x0, 0x0, 0x6}}}, 0x118) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:33519' (ED25519) to the list of known hosts. [ 41.448189][ T5886] cgroup: Unknown subsys name 'net' [ 41.616130][ T5886] cgroup: Unknown subsys name 'cpuset' [ 41.620159][ T5886] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.618712][ T5886] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.142547][ T5962] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.144858][ T5968] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.145236][ T5967] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.145513][ T5962] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.145734][ T5962] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.146131][ T5962] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.146452][ T5962] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.148212][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.151524][ T5968] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.152144][ T5969] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.153317][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.154412][ T5968] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.154457][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.154720][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.159487][ T5969] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.160955][ T5968] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.164083][ T5969] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.166724][ T5968] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.168368][ T5969] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.186048][ T5969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.414850][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 46.437790][ T5960] chnl_net:caif_netlink_parms(): no params data found [ 46.495124][ T5953] chnl_net:caif_netlink_parms(): no params data found [ 46.525170][ T5965] chnl_net:caif_netlink_parms(): no params data found [ 46.625276][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.627532][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.629871][ T5956] bridge_slave_0: entered allmulticast mode [ 46.634437][ T5956] bridge_slave_0: entered promiscuous mode [ 46.722821][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.725097][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.727335][ T5956] bridge_slave_1: entered allmulticast mode [ 46.729908][ T5956] bridge_slave_1: entered promiscuous mode [ 46.749537][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.751977][ T5960] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.754352][ T5960] bridge_slave_0: entered allmulticast mode [ 46.756971][ T5960] bridge_slave_0: entered promiscuous mode [ 46.759906][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.762239][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.764454][ T5965] bridge_slave_0: entered allmulticast mode [ 46.767031][ T5965] bridge_slave_0: entered promiscuous mode [ 46.814623][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.816897][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.819281][ T5960] bridge_slave_1: entered allmulticast mode [ 46.823395][ T5960] bridge_slave_1: entered promiscuous mode [ 46.826000][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.828371][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.830674][ T5965] bridge_slave_1: entered allmulticast mode [ 46.833496][ T5965] bridge_slave_1: entered promiscuous mode [ 46.838052][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.841000][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.844575][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.846809][ T5953] bridge_slave_0: entered allmulticast mode [ 46.849396][ T5953] bridge_slave_0: entered promiscuous mode [ 46.880870][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.884230][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.886450][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.888662][ T5953] bridge_slave_1: entered allmulticast mode [ 46.891252][ T5953] bridge_slave_1: entered promiscuous mode [ 46.964421][ T5960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.968554][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.973255][ T5956] team0: Port device team_slave_0 added [ 46.991467][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.996424][ T5960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.000366][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.005046][ T5956] team0: Port device team_slave_1 added [ 47.008234][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.126743][ T5960] team0: Port device team_slave_0 added [ 47.130197][ T5965] team0: Port device team_slave_0 added [ 47.132744][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.134910][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.143664][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.149510][ T5953] team0: Port device team_slave_0 added [ 47.153459][ T5960] team0: Port device team_slave_1 added [ 47.156464][ T5965] team0: Port device team_slave_1 added [ 47.158733][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.160905][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.170085][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.174787][ T5953] team0: Port device team_slave_1 added [ 47.250371][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.253648][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.261483][ T5960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.266468][ T5960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.268649][ T5960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.276644][ T5960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.284232][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.286400][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.294494][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.312887][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.315060][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.323418][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.328823][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.330991][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.338866][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.343127][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.345315][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.353296][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.409294][ T5956] hsr_slave_0: entered promiscuous mode [ 47.411582][ T5956] hsr_slave_1: entered promiscuous mode [ 47.464641][ T5960] hsr_slave_0: entered promiscuous mode [ 47.466864][ T5960] hsr_slave_1: entered promiscuous mode [ 47.468897][ T5960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.471322][ T5960] Cannot create hsr debugfs directory [ 47.519599][ T5953] hsr_slave_0: entered promiscuous mode [ 47.522335][ T5953] hsr_slave_1: entered promiscuous mode [ 47.524847][ T5953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.527730][ T5953] Cannot create hsr debugfs directory [ 47.613385][ T5965] hsr_slave_0: entered promiscuous mode [ 47.615632][ T5965] hsr_slave_1: entered promiscuous mode [ 47.617707][ T5965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.620077][ T5965] Cannot create hsr debugfs directory [ 47.884903][ T5960] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.890334][ T5960] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.894642][ T5960] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.904150][ T5960] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.925782][ T5965] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.930182][ T5965] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.935002][ T5965] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.939252][ T5965] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.976048][ T5953] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.982372][ T5953] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.986593][ T5953] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.990746][ T5953] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.044525][ T5956] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.049982][ T5956] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.054441][ T5956] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.058687][ T5956] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.090750][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.107360][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.124084][ T5960] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.134121][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.136421][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.141358][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.149056][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.151316][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.157188][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.159395][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.165029][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.178825][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.182892][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.185139][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.202160][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.205023][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.222664][ T5969] Bluetooth: hci3: command tx timeout [ 48.224559][ T5969] Bluetooth: hci1: command tx timeout [ 48.225590][ T5964] Bluetooth: hci0: command tx timeout [ 48.226355][ T5969] Bluetooth: hci2: command tx timeout [ 48.233150][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.235400][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.248748][ T5960] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.258721][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.285494][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.292552][ T183] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.294799][ T183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.304096][ T96] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.306380][ T96] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.355928][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.384311][ T5960] veth0_vlan: entered promiscuous mode [ 48.388175][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.397067][ T5960] veth1_vlan: entered promiscuous mode [ 48.401479][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.431260][ T5965] veth0_vlan: entered promiscuous mode [ 48.435687][ T5960] veth0_macvtap: entered promiscuous mode [ 48.441069][ T5960] veth1_macvtap: entered promiscuous mode [ 48.446248][ T5965] veth1_vlan: entered promiscuous mode [ 48.457938][ T5953] veth0_vlan: entered promiscuous mode [ 48.463746][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.469110][ T5953] veth1_vlan: entered promiscuous mode [ 48.474811][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.479966][ T5960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.486240][ T5960] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.488991][ T5960] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.491926][ T5960] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.494615][ T5960] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.525014][ T5953] veth0_macvtap: entered promiscuous mode [ 48.528741][ T5956] veth0_vlan: entered promiscuous mode [ 48.533194][ T5953] veth1_macvtap: entered promiscuous mode [ 48.540575][ T5965] veth0_macvtap: entered promiscuous mode [ 48.547649][ T5965] veth1_macvtap: entered promiscuous mode [ 48.562747][ T5956] veth1_vlan: entered promiscuous mode [ 48.568748][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.570668][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.571224][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.577002][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.593599][ T5953] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.596337][ T5953] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.599002][ T5953] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.602564][ T5953] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.607161][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.610234][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.612777][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.617986][ T5956] veth0_macvtap: entered promiscuous mode [ 48.623022][ T5956] veth1_macvtap: entered promiscuous mode [ 48.628238][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.638109][ T5965] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.640863][ T5965] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.643673][ T5965] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.646366][ T5965] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.654332][ T5960] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.667905][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.673075][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.691660][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.694427][ T5956] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.695752][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.697241][ T5956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.704845][ T5956] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.707562][ T5956] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.708094][ T6040] comedi comedi2: multiq3: I/O port conflict (0x4,16) [ 48.735615][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.740475][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.745090][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.747592][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.772233][ T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.774668][ T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.788281][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.790757][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.809224][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.814379][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.218433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.226073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.234616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.239679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.241906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.532486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.734532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.301797][ T5969] Bluetooth: hci2: command tx timeout [ 50.312093][ T5969] Bluetooth: hci0: command tx timeout [ 50.312899][ T5317] Bluetooth: hci1: command tx timeout [ 50.314220][ T5969] Bluetooth: hci3: command tx timeout [ 50.555527][ T6079] ubi31: attaching mtd0 [ 50.559927][ T6079] ubi31: scanning is finished [ 50.564577][ T6079] ubi31: empty MTD device detected [ 50.613325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 50.682224][ T6079] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 50.684619][ T6079] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 50.686885][ T6079] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 50.689068][ T6079] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 50.691421][ T6079] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 50.702480][ T6079] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 50.705355][ T6079] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2289747735 [ 50.710073][ T6079] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 50.713809][ T6081] ubi31: background thread "ubi_bgt31d" started, PID 6081 [ 51.409317][ T6087] Bluetooth: MGMT ver 1.23 [ 52.070012][ T6096] vlan2: entered promiscuous mode [ 52.071633][ T6096] bridge0: entered promiscuous mode [ 52.382740][ T5317] Bluetooth: hci2: command tx timeout [ 52.382999][ T5964] Bluetooth: hci0: command tx timeout [ 52.383034][ T5968] Bluetooth: hci1: command tx timeout [ 52.384489][ T5969] Bluetooth: hci3: command tx timeout [ 53.445041][ T6122] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 53.527278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.537588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 54.121885][ T838] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.302711][ T838] usb 7-1: Using ep0 maxpacket: 16 [ 54.309286][ T838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.312840][ T838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.316228][ T838] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 54.319059][ T838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.326515][ T838] usb 7-1: config 0 descriptor?? [ 54.462294][ T5969] Bluetooth: hci3: command tx timeout [ 54.462805][ T5964] Bluetooth: hci2: command tx timeout [ 54.462837][ T5317] Bluetooth: hci1: command tx timeout [ 54.462862][ T5317] Bluetooth: hci0: command tx timeout [ 54.741461][ T838] hid (null): invalid report_size 19609 [ 54.746953][ T6140] ubi: mtd0 is already attached to ubi31 [ 54.941722][ T838] usb 7-1: string descriptor 0 read error: -71 [ 54.971082][ T838] usb 7-1: Max retries (5) exceeded reading string descriptor 200 [ 54.973726][ T838] letsketch 0003:6161:4D15.0002: probe with driver letsketch failed with error -32 [ 54.981167][ T838] usb 7-1: USB disconnect, device number 2 [ 56.346620][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 56.481641][ T6170] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 56.545778][ T6172] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42'. [ 57.325653][ T6198] hugetlbfs: syz.1.48 (6198): Using mlock ulimits for SHM_HUGETLB is obsolete [ 57.603004][ T6210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.51'. [ 58.285136][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 58.477023][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 58.539646][ T6234] fuse: Unknown parameter '00000000000000000000' [ 60.084338][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 61.561852][ T838] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.725000][ T838] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 61.729474][ T838] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 61.734183][ T838] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 77 [ 61.738108][ T838] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 61.743993][ T838] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 61.747655][ T838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.753529][ T6310] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 61.960492][ T838] ath6kl: Failed to submit usb control message: -71 [ 61.963905][ T838] ath6kl: unable to send the bmi data to the device: -71 [ 61.966217][ T838] ath6kl: Unable to send get target info: -71 [ 61.970463][ T838] ath6kl: Failed to init ath6kl core: -71 [ 61.974614][ T838] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 61.979525][ T838] usb 5-1: USB disconnect, device number 2 [ 63.044196][ T5964] Bluetooth: hci3: ACL packet too small [ 63.140271][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 63.913176][ T24] cfg80211: failed to load regulatory.db [ 64.768167][ T6426] netlink: 'syz.3.129': attribute type 6 has an invalid length. [ 64.849984][ T6432] netlink: 'syz.1.132': attribute type 2 has an invalid length. [ 65.478480][ T6470] syz.3.148: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 65.484734][ T6470] CPU: 2 UID: 0 PID: 6470 Comm: syz.3.148 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 65.484760][ T6470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.484768][ T6470] Call Trace: [ 65.484772][ T6470] [ 65.484776][ T6470] dump_stack_lvl+0x16c/0x1f0 [ 65.484797][ T6470] warn_alloc+0x248/0x3a0 [ 65.484815][ T6470] ? __pfx_warn_alloc+0x10/0x10 [ 65.484831][ T6470] ? __pfx_stack_trace_save+0x10/0x10 [ 65.484844][ T6470] ? stack_depot_save_flags+0x28/0xa40 [ 65.484865][ T6470] ? kasan_save_stack+0x42/0x60 [ 65.484880][ T6470] ? kasan_save_stack+0x33/0x60 [ 65.484896][ T6470] ? kasan_save_track+0x14/0x30 [ 65.484910][ T6470] ? xskq_create+0x52/0x1d0 [ 65.484923][ T6470] ? xsk_setsockopt+0x640/0x840 [ 65.484934][ T6470] ? do_sock_setsockopt+0x221/0x470 [ 65.484947][ T6470] ? xskq_create+0xfb/0x1d0 [ 65.484960][ T6470] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 65.484979][ T6470] ? xskq_create+0xfb/0x1d0 [ 65.484996][ T6470] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 65.485014][ T6470] ? xskq_create+0xfb/0x1d0 [ 65.485027][ T6470] vmalloc_user_noprof+0x9e/0xe0 [ 65.485041][ T6470] ? xskq_create+0xfb/0x1d0 [ 65.485054][ T6470] xskq_create+0xfb/0x1d0 [ 65.485075][ T6470] xsk_setsockopt+0x640/0x840 [ 65.485088][ T6470] ? __pfx_xsk_setsockopt+0x10/0x10 [ 65.485101][ T6470] ? __pfx_aa_sk_perm+0x10/0x10 [ 65.485115][ T6470] ? errseq_sample+0x53/0x70 [ 65.485135][ T6470] ? __pfx_xsk_setsockopt+0x10/0x10 [ 65.485148][ T6470] do_sock_setsockopt+0x221/0x470 [ 65.485160][ T6470] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 65.485181][ T6470] __sys_setsockopt+0x120/0x1a0 [ 65.485198][ T6470] __ia32_sys_setsockopt+0xbc/0x160 [ 65.485212][ T6470] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.485239][ T6470] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 65.485256][ T6470] __do_fast_syscall_32+0x7c/0x3a0 [ 65.485274][ T6470] do_fast_syscall_32+0x32/0x80 [ 65.485291][ T6470] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.485304][ T6470] RIP: 0023:0xf710e579 [ 65.485313][ T6470] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 65.485323][ T6470] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 65.485333][ T6470] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 65.485339][ T6470] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 65.485345][ T6470] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.485351][ T6470] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 65.485356][ T6470] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.485369][ T6470] [ 65.485452][ T6470] Mem-Info: [ 65.583137][ T6470] active_anon:12128 inactive_anon:0 isolated_anon:0 [ 65.583137][ T6470] active_file:1259 inactive_file:39838 isolated_file:0 [ 65.583137][ T6470] unevictable:2793 dirty:259 writeback:0 [ 65.583137][ T6470] slab_reclaimable:9994 slab_unreclaimable:53546 [ 65.583137][ T6470] mapped:30185 shmem:9132 pagetables:1060 [ 65.583137][ T6470] sec_pagetables:301 bounce:0 [ 65.583137][ T6470] kernel_misc_reclaimable:0 [ 65.583137][ T6470] free:43993 free_pcp:17932 free_cma:0 [ 65.597029][ T6470] Node 0 active_anon:5732kB inactive_anon:0kB active_file:8kB inactive_file:14316kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:7984kB dirty:4kB writeback:0kB shmem:3876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7876kB pagetables:1352kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB [ 65.607061][ T6470] Node 1 active_anon:42780kB inactive_anon:0kB active_file:5028kB inactive_file:145036kB unevictable:7636kB isolated(anon):0kB isolated(file):0kB mapped:112756kB dirty:1032kB writeback:0kB shmem:32652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4932kB pagetables:2888kB sec_pagetables:76kB all_unreclaimable? no Balloon:0kB [ 65.618584][ T6470] Node 0 DMA free:2352kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:484kB local_pcp:0kB free_cma:0kB [ 65.629030][ T6470] lowmem_reserve[]: 0 288 288 288 288 [ 65.631035][ T6470] Node 0 DMA32 free:20356kB boost:4096kB min:17316kB low:20620kB high:23924kB reserved_highatomic:4096KB free_highatomic:1384KB active_anon:5732kB inactive_anon:0kB active_file:8kB inactive_file:14316kB unevictable:3536kB writepending:4kB present:1032196kB managed:295876kB mlocked:0kB bounce:0kB free_pcp:13524kB local_pcp:3972kB free_cma:0kB [ 65.642478][ T6470] lowmem_reserve[]: 0 0 0 0 0 [ 65.647821][ T6470] Node 1 DMA32 free:153000kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42688kB inactive_anon:0kB active_file:5028kB inactive_file:145036kB unevictable:7636kB writepending:1044kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:57720kB local_pcp:14588kB free_cma:0kB [ 65.660439][ T6470] lowmem_reserve[]: 0 0 0 0 0 [ 65.664646][ T6470] Node 0 DMA: 34*4kB (U) 7*8kB (UE) 9*16kB (UE) 7*32kB (UE) 0*64kB 0*128kB 1*256kB (E) 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 2352kB [ 65.671272][ T6470] Node 0 DMA32: 113*4kB (UMH) 82*8kB (UME) 77*16kB (UMEH) 281*32kB (UMEH) 85*64kB (UMEH) 20*128kB (UMEH) 2*256kB (UM) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 20356kB [ 65.677997][ T6470] Node 1 DMA32: 6*4kB (UE) 3*8kB (UME) 1*16kB (M) 33*32kB (UE) 14*64kB (UME) 5*128kB (UME) 3*256kB (M) 10*512kB (M) 9*1024kB (ME) 0*2048kB 33*4096kB (M) = 152928kB [ 65.683679][ T6470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 65.686716][ T6470] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 65.689576][ T6470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 65.692628][ T6470] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 65.695517][ T6470] 50231 total pagecache pages [ 65.697032][ T6470] 0 pages in swap cache [ 65.698348][ T6470] Free swap = 124996kB [ 65.699684][ T6470] Total swap = 124996kB [ 65.700999][ T6470] 524155 pages RAM [ 65.702473][ T6470] 0 pages HighMem/MovableOnly [ 65.704479][ T6470] 209275 pages reserved [ 65.705803][ T6470] 0 pages cma reserved [ 65.993696][ T6479] netlink: 'syz.3.149': attribute type 2 has an invalid length. [ 66.001851][ T6479] netlink: 'syz.3.149': attribute type 1 has an invalid length. [ 67.497684][ T6537] TCP: TCP_TX_DELAY enabled [ 67.707565][ T5964] Bluetooth: Unexpected continuation frame (len 16) [ 67.937485][ T6555] sctp: [Deprecated]: syz.1.180 (pid 6555) Use of int in maxseg socket option. [ 67.937485][ T6555] Use struct sctp_assoc_value instead [ 68.076412][ T6557] process 'syz.1.181' launched './file1' with NULL argv: empty string added [ 69.299602][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 69.386342][ T6615] sctp: [Deprecated]: syz.1.203 (pid 6615) Use of int in max_burst socket option. [ 69.386342][ T6615] Use struct sctp_assoc_value instead [ 69.461811][ T2300] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 69.611723][ T2300] usb 7-1: Using ep0 maxpacket: 8 [ 69.615249][ T2300] usb 7-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 69.618063][ T2300] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.622129][ T2300] usb 7-1: config 0 descriptor?? [ 69.826938][ T838] usb 7-1: USB disconnect, device number 3 [ 70.484717][ T6639] capability: warning: `syz.1.212' uses deprecated v2 capabilities in a way that may be insecure [ 70.559431][ T6644] Zero length message leads to an empty skb [ 70.785529][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.788822][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.259729][ T6020] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 71.262859][ T6020] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 71.265652][ T6020] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 71.271253][ T6020] hid-generic 0003:0004:0000.0003: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 71.300777][ T6654] fido_id[6654]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 71.661758][ T2300] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 71.813549][ T2300] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 71.817035][ T2300] usb 7-1: config 0 has no interface number 0 [ 71.822235][ T2300] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 71.825880][ T2300] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.829180][ T2300] usb 7-1: Product: syz [ 71.830937][ T2300] usb 7-1: Manufacturer: syz [ 71.833808][ T2300] usb 7-1: SerialNumber: syz [ 71.838056][ T2300] usb 7-1: config 0 descriptor?? [ 71.842494][ T2300] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 71.850546][ T2300] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 82 [ 71.855316][ T2300] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 71.858574][ T2300] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 71.861646][ T2300] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 71.868445][ T2300] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 72.044776][ T10] usb 7-1: USB disconnect, device number 4 [ 72.074304][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 72.077608][ T10] keyspan 7-1:0.133: device disconnected [ 72.732179][ T6684] comedi comedi2: board detection failed [ 72.876305][ T6688] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 72.882560][ T6688] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 74.213482][ T6754] tipc: Started in network mode [ 74.215226][ T6754] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 74.217690][ T6754] tipc: Enabled bearer , priority 0 [ 75.352325][ T2300] tipc: Node number set to 11578026 [ 76.029173][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 76.465960][ T6807] tipc: New replicast peer: 0.0.0.0 [ 76.468983][ T6807] tipc: Enabled bearer , priority 10 [ 76.471830][ T6807] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 77.232257][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 77.458295][ T6827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.276'. [ 78.107885][ T6843] netlink: 'syz.2.285': attribute type 1 has an invalid length. [ 78.126625][ T6843] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 78.132184][ T1142] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 78.136931][ T6843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.252148][ T46] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 78.255427][ T5964] Bluetooth: hci0: ACL packet too small [ 78.354116][ T6853] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.666573][ T6862] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 78.808089][ T6868] ======================================================= [ 78.808089][ T6868] WARNING: The mand mount option has been deprecated and [ 78.808089][ T6868] and is ignored by this kernel. Remove the mand [ 78.808089][ T6868] option from the mount to silence this warning. [ 78.808089][ T6868] ======================================================= [ 79.621782][ T61] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 79.774762][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.779048][ T61] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 79.782684][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.786462][ T61] usb 7-1: config 0 descriptor?? [ 80.197145][ T61] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 80.205394][ T61] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0926:3333.0004/input/input5 [ 80.281867][ T61] keytouch 0003:0926:3333.0004: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 81.624495][ T6922] overlayfs: failed to clone lowerpath [ 81.628665][ T6922] overlayfs: failed to clone upperpath [ 82.405479][ T61] usb 7-1: USB disconnect, device number 5 [ 82.538367][ T183] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 83.216886][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 83.525372][ T6970] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.575384][ T6972] 8021q: VLANs not supported on ipvlan1 [ 83.643389][ T838] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 83.792741][ T5964] Bluetooth: hci1: unexpected cc 0x2028 length: 100 > 1 [ 83.801745][ T838] usb 6-1: Using ep0 maxpacket: 8 [ 83.805870][ T838] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 83.814285][ T838] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 83.817216][ T838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.819867][ T838] usb 6-1: Product: syz [ 83.821181][ T838] usb 6-1: Manufacturer: syz [ 83.822731][ T838] usb 6-1: SerialNumber: syz [ 83.825334][ T838] usb 6-1: config 0 descriptor?? [ 83.829608][ T838] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 83.832201][ T838] usb 6-1: setting power ON [ 83.833867][ T838] dvb-usb: bulk message failed: -22 (2/0) [ 83.838302][ T838] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 83.841580][ T838] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 83.844344][ T838] usb 6-1: media controller created [ 83.855090][ T838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.864012][ T838] usb 6-1: selecting invalid altsetting 6 [ 83.866128][ T838] usb 6-1: digital interface selection failed (-22) [ 83.868208][ T838] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 83.871536][ T838] usb 6-1: setting power OFF [ 83.873485][ T838] dvb-usb: bulk message failed: -22 (2/0) [ 83.875312][ T838] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 83.878033][ T838] (NULL device *): no alternate interface [ 83.890255][ T838] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 84.030977][ T24] usb 6-1: USB disconnect, device number 2 [ 84.916343][ T5964] Bluetooth: hci1: Invalid handle: 0x3100 > 0x0eff [ 86.122567][ T1463] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.271914][ T1463] usb 5-1: Using ep0 maxpacket: 32 [ 86.276341][ T1463] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 86.278984][ T1463] usb 5-1: config 0 has no interface number 1 [ 86.283818][ T1463] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 86.286639][ T1463] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.289087][ T1463] usb 5-1: Product: syz [ 86.290434][ T1463] usb 5-1: Manufacturer: syz [ 86.292065][ T1463] usb 5-1: SerialNumber: syz [ 86.302107][ T1463] usb 5-1: config 0 descriptor?? [ 86.342752][ T1463] snd-usb-audio 5-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 86.363480][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.510071][ T1463] usb 5-1: USB disconnect, device number 3 [ 87.002676][ T40] audit: type=1326 audit(1752814585.375:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.2.380" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x0 [ 87.168029][ T7087] batadv_slave_0: mtu greater than device maximum [ 88.955932][ T7124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.958200][ T7124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.966492][ T7124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.968793][ T7124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.464114][ T7141] netlink: 'syz.0.399': attribute type 1 has an invalid length. [ 89.505871][ T7143] syz_tun: entered allmulticast mode [ 89.523727][ T7142] syz_tun: left allmulticast mode [ 90.147100][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 90.941809][ T6020] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 91.093653][ T6020] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.096227][ T6020] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.099885][ T6020] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.103496][ T6020] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 91.107080][ T6020] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18286, setting to 1024 [ 91.113665][ T6020] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 91.116754][ T6020] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 91.119112][ T6020] usb 7-1: Product: syz [ 91.120384][ T6020] usb 7-1: Manufacturer: syz [ 91.131759][ T7175] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.138530][ T6020] cdc_wdm 7-1:1.0: skipping garbage [ 91.162582][ T6020] cdc_wdm 7-1:1.0: skipping garbage [ 91.167767][ T6020] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 91.169628][ T6020] cdc_wdm 7-1:1.0: Unknown control protocol [ 91.336383][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 91.338503][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 91.340539][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 91.342562][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 91.344683][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 91.346682][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 91.348699][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 91.350774][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 91.352807][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 91.354747][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 91.356710][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 91.358636][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 91.360644][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 91.362601][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 91.364606][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 91.366630][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 91.368931][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 91.370952][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 91.372891][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 91.375005][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 91.448574][ T6020] usb 7-1: USB disconnect, device number 6 [ 91.448628][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 91.800276][ T7213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.804388][ T7213] bond1: (slave bond2): Enslaving as an active interface with an up link [ 93.038449][ T7260] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 93.226199][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.442'. [ 93.269535][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.442'. [ 93.542994][ T7266] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.545728][ T7266] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.548364][ T7266] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.550916][ T7266] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.762855][ T7277] syz.0.446 uses obsolete (PF_INET,SOCK_PACKET) [ 94.881883][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 95.042945][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 95.045960][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 95.056817][ T24] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 95.059682][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.062288][ T24] usb 6-1: Product: syz [ 95.063614][ T24] usb 6-1: Manufacturer: syz [ 95.065053][ T24] usb 6-1: SerialNumber: syz [ 95.073925][ T24] usb 6-1: config 0 descriptor?? [ 95.077245][ T7305] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 95.079561][ T7305] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 95.286630][ T7305] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 95.289455][ T7305] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 95.727210][ T24] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 95.983144][ T7331] mmap: syz.0.464 (7331) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.105093][ T24] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 96.109869][ T24] usb 6-1: USB disconnect, device number 3 [ 97.798851][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 97.806427][ T7363] team_slave_0: entered promiscuous mode [ 97.808465][ T7363] team_slave_1: entered promiscuous mode [ 97.810410][ T7363] macsec1: entered promiscuous mode [ 97.812463][ T7363] team0: entered promiscuous mode [ 97.816225][ T7363] macsec1: entered allmulticast mode [ 97.818394][ T7363] team0: entered allmulticast mode [ 97.821019][ T7363] team_slave_0: entered allmulticast mode [ 97.823718][ T7363] team_slave_1: entered allmulticast mode [ 97.829208][ T7363] team0: Device macsec1 is already an upper device of the team interface [ 97.832791][ T7363] team0: left allmulticast mode [ 97.834969][ T7363] team_slave_0: left allmulticast mode [ 97.837210][ T7363] team_slave_1: left allmulticast mode [ 97.839459][ T7363] team0: left promiscuous mode [ 97.842009][ T7363] team_slave_0: left promiscuous mode [ 97.844274][ T7363] team_slave_1: left promiscuous mode [ 98.166281][ T7377] 8021q: adding VLAN 0 to HW filter on device bond3 [ 98.168983][ T7377] bond2: (slave bond3): Enslaving as an active interface with an up link [ 98.637353][ T7400] No buffer was provided with the request [ 99.113683][ T7403] netlink: 120 bytes leftover after parsing attributes in process `syz.3.488'. [ 99.193912][ T7409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.491'. [ 99.661995][ T24] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 99.813223][ T24] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 99.816435][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 99.820482][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.824513][ T24] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 99.827191][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.830994][ T24] usb 7-1: config 0 descriptor?? [ 100.040787][ T24] ath6kl: Failed to submit usb control message: -71 [ 100.042969][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 100.045619][ T24] ath6kl: Unable to send get target info: -71 [ 100.048349][ T24] ath6kl: Failed to init ath6kl core: -71 [ 100.050437][ T24] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 100.055845][ T24] usb 7-1: USB disconnect, device number 7 [ 101.343446][ T7463] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 102.670376][ T7490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.524'. [ 102.674322][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 102.831375][ T7492] block device autoloading is deprecated and will be removed. [ 103.463569][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.611964][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 103.617482][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 103.620907][ T24] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 103.624396][ T24] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 103.628648][ T24] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 103.632785][ T24] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 103.635373][ T24] usb 5-1: Manufacturer: syz [ 103.636911][ T24] usb 5-1: SerialNumber: syz [ 103.884045][ T24] usb 5-1: USB disconnect, device number 4 [ 104.501789][ T7523] netlink: zone id is out of range [ 104.513404][ T7523] netlink: del zone limit has 4 unknown bytes [ 108.133030][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 109.188145][ T7629] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.566'. [ 111.046010][ T7668] tipc: Enabling of bearer rejected, failed to enable media [ 111.841245][ T7691] vlan2: entered promiscuous mode [ 111.843641][ T7691] bridge0: entered promiscuous mode [ 112.608132][ T7708] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.590'. [ 112.677047][ T7715] capability: warning: `syz.0.593' uses 32-bit capabilities (legacy support in use) [ 112.981781][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 113.151772][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 113.156600][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.160780][ T29] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 113.164811][ T29] usb 5-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00 [ 113.168632][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.176117][ T29] usb 5-1: config 0 descriptor?? [ 113.433518][ T7733] random: crng reseeded on system resumption [ 113.464736][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.472844][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.954349][ T7744] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.602'. [ 115.135839][ T29] usb 5-1: USB disconnect, device number 5 [ 115.208475][ T40] audit: type=1326 audit(1752814613.575:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.612" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e598 code=0x7ffc0000 [ 115.215277][ T40] audit: type=1326 audit(1752814613.575:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.612" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 115.221839][ T40] audit: type=1326 audit(1752814613.575:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.612" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 115.228740][ T40] audit: type=1326 audit(1752814613.575:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.612" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e598 code=0x7ffc0000 [ 115.235416][ T40] audit: type=1326 audit(1752814613.575:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.612" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e598 code=0x7ffc0000 [ 115.242054][ T40] audit: type=1326 audit(1752814613.575:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.612" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e598 code=0x7ffc0000 [ 115.248648][ T40] audit: type=1326 audit(1752814613.575:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.612" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 115.256130][ T40] audit: type=1326 audit(1752814613.575:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.612" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e598 code=0x7ffc0000 [ 115.264965][ T40] audit: type=1326 audit(1752814613.575:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.612" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 115.271598][ T40] audit: type=1326 audit(1752814613.605:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7767 comm="syz.0.612" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e598 code=0x7ffc0000 [ 115.906373][ T7785] random: crng reseeded on system resumption [ 118.380500][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 121.469272][ T5969] Bluetooth: hci1: ACL packet too small [ 122.510303][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 122.818941][ T5969] Bluetooth: hci0: ACL packet too small [ 123.836133][ T8010] syz.2.709: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 123.842145][ T8010] CPU: 1 UID: 0 PID: 8010 Comm: syz.2.709 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 123.842173][ T8010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.842185][ T8010] Call Trace: [ 123.842192][ T8010] [ 123.842200][ T8010] dump_stack_lvl+0x16c/0x1f0 [ 123.842233][ T8010] warn_alloc+0x248/0x3a0 [ 123.842264][ T8010] ? __pfx_warn_alloc+0x10/0x10 [ 123.842291][ T8010] ? __pfx_stack_trace_save+0x10/0x10 [ 123.842312][ T8010] ? stack_depot_save_flags+0x28/0xa40 [ 123.842347][ T8010] ? kasan_save_stack+0x42/0x60 [ 123.842378][ T8010] ? kasan_save_stack+0x33/0x60 [ 123.842405][ T8010] ? kasan_save_track+0x14/0x30 [ 123.842432][ T8010] ? xskq_create+0x52/0x1d0 [ 123.842455][ T8010] ? xsk_setsockopt+0x640/0x840 [ 123.842474][ T8010] ? do_sock_setsockopt+0x221/0x470 [ 123.842495][ T8010] ? xskq_create+0xfb/0x1d0 [ 123.842519][ T8010] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 123.842553][ T8010] ? xskq_create+0xfb/0x1d0 [ 123.842583][ T8010] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 123.842614][ T8010] ? xskq_create+0xfb/0x1d0 [ 123.842637][ T8010] vmalloc_user_noprof+0x9e/0xe0 [ 123.842660][ T8010] ? xskq_create+0xfb/0x1d0 [ 123.842683][ T8010] xskq_create+0xfb/0x1d0 [ 123.842708][ T8010] xsk_setsockopt+0x640/0x840 [ 123.842731][ T8010] ? __pfx_xsk_setsockopt+0x10/0x10 [ 123.842752][ T8010] ? __pfx_aa_sk_perm+0x10/0x10 [ 123.842775][ T8010] ? errseq_sample+0x53/0x70 [ 123.842807][ T8010] ? __pfx_xsk_setsockopt+0x10/0x10 [ 123.842829][ T8010] do_sock_setsockopt+0x221/0x470 [ 123.842848][ T8010] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 123.842884][ T8010] __sys_setsockopt+0x120/0x1a0 [ 123.842913][ T8010] __ia32_sys_setsockopt+0xbc/0x160 [ 123.842937][ T8010] ? lockdep_hardirqs_on+0x7c/0x110 [ 123.842962][ T8010] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 123.842989][ T8010] __do_fast_syscall_32+0x7c/0x3a0 [ 123.843019][ T8010] do_fast_syscall_32+0x32/0x80 [ 123.843047][ T8010] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.843068][ T8010] RIP: 0023:0xf7f12579 [ 123.843109][ T8010] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 123.843126][ T8010] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 123.843144][ T8010] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000011b [ 123.843155][ T8010] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 123.843165][ T8010] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.843175][ T8010] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 123.843185][ T8010] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.843209][ T8010] [ 123.843216][ T8010] Mem-Info: [ 123.953294][ T8010] active_anon:9469 inactive_anon:30 isolated_anon:0 [ 123.953294][ T8010] active_file:1007 inactive_file:47164 isolated_file:0 [ 123.953294][ T8010] unevictable:3817 dirty:193 writeback:0 [ 123.953294][ T8010] slab_reclaimable:9526 slab_unreclaimable:54918 [ 123.953294][ T8010] mapped:27103 shmem:7317 pagetables:1053 [ 123.953294][ T8010] sec_pagetables:302 bounce:0 [ 123.953294][ T8010] kernel_misc_reclaimable:0 [ 123.953294][ T8010] free:31909 free_pcp:19463 free_cma:0 [ 123.968541][ T8010] Node 0 active_anon:5700kB inactive_anon:0kB active_file:8kB inactive_file:14316kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:7692kB dirty:8kB writeback:0kB shmem:3876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7876kB pagetables:1352kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB [ 123.984571][ T8010] Node 1 active_anon:32176kB inactive_anon:120kB active_file:4020kB inactive_file:174340kB unevictable:11732kB isolated(anon):0kB isolated(file):0kB mapped:100720kB dirty:764kB writeback:0kB shmem:25392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5180kB pagetables:2860kB sec_pagetables:80kB all_unreclaimable? no Balloon:0kB [ 123.998025][ T8010] Node 0 DMA free:2352kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:496kB local_pcp:200kB free_cma:0kB [ 124.009494][ T8010] lowmem_reserve[]: 0 288 288 288 288 [ 124.012954][ T8010] Node 0 DMA32 free:20772kB boost:8192kB min:21412kB low:24716kB high:28020kB reserved_highatomic:4096KB free_highatomic:1384KB active_anon:5700kB inactive_anon:0kB active_file:8kB inactive_file:14316kB unevictable:3536kB writepending:8kB present:1032196kB managed:295876kB mlocked:0kB bounce:0kB free_pcp:14196kB local_pcp:3608kB free_cma:0kB [ 124.025843][ T8010] lowmem_reserve[]: 0 0 0 0 0 [ 124.027870][ T8010] Node 1 DMA32 free:103992kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB free_highatomic:400KB active_anon:32176kB inactive_anon:120kB active_file:4020kB inactive_file:174340kB unevictable:11732kB writepending:764kB present:1048432kB managed:948284kB mlocked:0kB bounce:0kB free_pcp:62908kB local_pcp:14708kB free_cma:0kB [ 124.041808][ T8010] lowmem_reserve[]: 0 0 0 0 0 [ 124.043582][ T8010] Node 0 DMA: 34*4kB (U) 7*8kB (UE) 9*16kB (UE) 7*32kB (UE) 0*64kB 0*128kB 1*256kB (E) 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 2352kB [ 124.048233][ T8010] Node 0 DMA32: 233*4kB (UMH) 82*8kB (UME) 71*16kB (UMEH) 280*32kB (UMEH) 86*64kB (UMEH) 20*128kB (UMEH) 2*256kB (M) 1*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 20772kB [ 124.053468][ T8010] Node 1 DMA32: 32*4kB (UME) 36*8kB (UMEH) 112*16kB (UMEH) 83*32kB (UMEH) 116*64kB (UME) 128*128kB (UME) 32*256kB (UME) 25*512kB (UM) 9*1024kB (M) 6*2048kB (M) 8*4096kB (ME) = 103936kB [ 124.059220][ T8010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.062993][ T8010] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.066406][ T8010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.070110][ T8010] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.073227][ T8010] 55485 total pagecache pages [ 124.074748][ T8010] 0 pages in swap cache [ 124.076222][ T8010] Free swap = 124996kB [ 124.077972][ T8010] Total swap = 124996kB [ 124.079750][ T8010] 524155 pages RAM [ 124.081314][ T8010] 0 pages HighMem/MovableOnly [ 124.082959][ T8010] 209275 pages reserved [ 124.084683][ T8010] 0 pages cma reserved [ 125.450733][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 126.101280][ T8061] sctp: [Deprecated]: syz.3.719 (pid 8061) Use of int in maxseg socket option. [ 126.101280][ T8061] Use struct sctp_assoc_value instead [ 126.241888][ T8072] fuse: Bad value for 'fd' [ 126.942983][ T8104] netlink: 64 bytes leftover after parsing attributes in process `syz.2.738'. [ 127.125921][ T8114] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.743'. [ 127.972007][ T8141] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.753'. [ 128.187378][ T8159] netlink: 64 bytes leftover after parsing attributes in process `syz.0.760'. [ 128.379540][ T8166] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.763'. [ 129.536099][ T8217] syz_tun: entered allmulticast mode [ 129.540260][ T8216] syz_tun: left allmulticast mode [ 129.687489][ T8222] overlayfs: failed to clone upperpath [ 130.327035][ T8248] netlink: 'syz.2.796': attribute type 2 has an invalid length. [ 130.373609][ T8250] IPVS: length: 139 != 8 [ 130.761235][ T8264] netlink: 'syz.3.803': attribute type 1 has an invalid length. [ 130.775435][ T8264] bond3: entered promiscuous mode [ 130.777741][ T8264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.355465][ T40] kauditd_printk_skb: 369 callbacks suppressed [ 131.355480][ T40] audit: type=1800 audit(1752814629.725:382): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.809" name="nullb0" dev="tmpfs" ino=894 res=0 errno=0 [ 132.235196][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.237710][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.629392][ T5969] Bluetooth: hci3: ACL packet too small [ 135.658215][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'. [ 135.721257][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 135.806855][ T8428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.864'. [ 137.613011][ T8472] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.885'. [ 137.735379][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.886'. [ 138.204196][ T8492] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.895'. [ 138.546768][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.902'. [ 138.709220][ T8514] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.904'. [ 139.201940][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.911'. [ 139.342995][ T8535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.345345][ T8535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.348199][ T8535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.350552][ T8535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.423083][ T8537] netlink: 'syz.3.915': attribute type 72 has an invalid length. [ 139.808251][ T8549] syz_tun: entered allmulticast mode [ 139.823346][ T8548] syz_tun: left allmulticast mode [ 140.224027][ T5969] Bluetooth: hci2: ACL packet too small [ 140.643586][ T5969] Bluetooth: hci1: ACL packet too small [ 140.821960][ T8602] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.942'. [ 141.050215][ T8626] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.954'. [ 142.086393][ T8660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.968'. [ 143.174326][ T8698] syz_tun: entered allmulticast mode [ 143.188507][ T8697] syz_tun: left allmulticast mode [ 143.192020][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 143.194791][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.975'. [ 143.213894][ T8699] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.216648][ T8699] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.219387][ T8699] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.222112][ T8699] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.239336][ T40] audit: type=1800 audit(1752814641.605:383): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.985" name="nullb0" dev="tmpfs" ino=1332 res=0 errno=0 [ 143.625497][ T8720] syz_tun: entered allmulticast mode [ 143.631274][ T8719] syz_tun: left allmulticast mode [ 143.666354][ T8722] syz_tun: entered allmulticast mode [ 143.670975][ T8721] syz_tun: left allmulticast mode [ 143.906511][ T40] audit: type=1800 audit(1752814642.275:384): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.997" name="nullb0" dev="tmpfs" ino=1548 res=0 errno=0 [ 144.958501][ T8772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1010'. [ 144.962417][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 145.298991][ T8786] netlink: zone id is out of range [ 145.300926][ T8786] netlink: del zone limit has 4 unknown bytes [ 145.308472][ T8788] syz_tun: entered allmulticast mode [ 145.313607][ T8787] syz_tun: left allmulticast mode [ 145.351196][ T8792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1022'. [ 145.356100][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1022'. [ 145.893070][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1034'. [ 146.309941][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1044'. [ 146.464563][ T8852] syz_tun: entered allmulticast mode [ 146.476258][ T8851] syz_tun: left allmulticast mode [ 146.800509][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 147.303953][ T8876] syz_tun: entered allmulticast mode [ 147.314625][ T8875] syz_tun: left allmulticast mode [ 147.985282][ T8899] syz_tun: entered allmulticast mode [ 148.005782][ T8898] syz_tun: left allmulticast mode [ 148.509491][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'. [ 148.742825][ T8930] syz_tun: entered allmulticast mode [ 148.746122][ T8929] syz_tun: left allmulticast mode [ 149.077560][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1084'. [ 149.339945][ T8953] syz_tun: entered allmulticast mode [ 149.344269][ T8952] syz_tun: left allmulticast mode [ 149.474858][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 149.565731][ T5969] Bluetooth: hci1: ACL packet too small [ 149.578420][ T8977] syz_tun: entered allmulticast mode [ 149.581070][ T8976] syz_tun: left allmulticast mode [ 149.656520][ T8987] syz_tun: entered allmulticast mode [ 149.659828][ T8985] syz_tun: left allmulticast mode [ 149.669485][ T8989] syz_tun: entered allmulticast mode [ 149.684429][ T8988] syz_tun: left allmulticast mode [ 149.724525][ T8997] syz_tun: entered allmulticast mode [ 149.727510][ T8996] syz_tun: left allmulticast mode [ 149.740001][ T5969] Bluetooth: hci1: ACL packet too small [ 149.822505][ T9013] syz_tun: entered allmulticast mode [ 149.824327][ T9012] syz_tun: entered allmulticast mode [ 149.826360][ T9011] syz_tun: left allmulticast mode [ 149.835736][ T9010] syz_tun: left allmulticast mode [ 149.959195][ T5969] Bluetooth: hci0: ACL packet too small [ 149.984895][ T9026] syz_tun: entered allmulticast mode [ 149.988179][ T9025] syz_tun: left allmulticast mode [ 150.111299][ T9034] syz_tun: entered allmulticast mode [ 150.114229][ T9033] syz_tun: left allmulticast mode [ 150.128789][ T9036] syz_tun: entered allmulticast mode [ 150.140324][ T9035] syz_tun: left allmulticast mode [ 150.175859][ T9042] overlayfs: missing 'workdir' [ 150.228391][ T9046] syz_tun: entered allmulticast mode [ 150.231390][ T9045] syz_tun: left allmulticast mode [ 150.373282][ T9056] syz_tun: entered allmulticast mode [ 150.377564][ T9054] syz_tun: left allmulticast mode [ 150.541122][ T9066] syz_tun: entered allmulticast mode [ 150.545602][ T9065] syz_tun: left allmulticast mode [ 150.574102][ T9068] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1140'. [ 150.619321][ T9072] syz_tun: entered allmulticast mode [ 150.622461][ T9071] syz_tun: left allmulticast mode [ 150.708383][ T9081] syz_tun: entered allmulticast mode [ 150.711459][ T9080] syz_tun: left allmulticast mode [ 150.738012][ T9085] syz_tun: entered allmulticast mode [ 150.741251][ T9084] syz_tun: left allmulticast mode [ 151.328095][ T9098] bad cache= option: no%e [ 151.328095][ T9098] [ 151.330997][ T9098] CIFS: VFS: bad cache= option: no%e [ 151.532044][ T9102] syz_tun: entered allmulticast mode [ 151.534887][ T9101] syz_tun: left allmulticast mode [ 151.632411][ T9108] syz_tun: entered allmulticast mode [ 151.635440][ T9107] syz_tun: left allmulticast mode [ 151.641653][ T9110] syz_tun: entered allmulticast mode [ 151.647082][ T9109] syz_tun: left allmulticast mode [ 151.666338][ T5969] Bluetooth: hci2: ACL packet too small [ 152.096000][ T9133] syz_tun: entered allmulticast mode [ 152.099969][ T9132] syz_tun: left allmulticast mode [ 152.140673][ T5969] Bluetooth: hci0: ACL packet too small [ 152.170926][ T9137] syz_tun: entered allmulticast mode [ 152.175905][ T9136] syz_tun: left allmulticast mode [ 152.346417][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 152.351447][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 152.454542][ T5969] Bluetooth: hci0: ACL packet too small [ 152.509825][ T9157] syz_tun: entered allmulticast mode [ 152.512783][ T9156] syz_tun: left allmulticast mode [ 153.603205][ T5969] Bluetooth: hci2: ACL packet too small [ 153.673584][ T9185] syz_tun: entered allmulticast mode [ 153.676686][ T9184] syz_tun: left allmulticast mode [ 154.462037][ T9203] syz_tun: entered allmulticast mode [ 154.465378][ T9202] syz_tun: left allmulticast mode [ 154.577651][ T9211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1201'. [ 154.638075][ T9217] netlink: zone id is out of range [ 154.640008][ T9217] netlink: del zone limit has 4 unknown bytes [ 154.667719][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1203'. [ 154.844139][ T5969] Bluetooth: hci1: ACL packet too small [ 155.628200][ T9242] syz_tun: entered allmulticast mode [ 155.740201][ T5969] Bluetooth: hci1: ACL packet too small [ 156.477447][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1226'. [ 156.579280][ T9283] syz_tun: entered allmulticast mode [ 156.728390][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1232'. [ 157.480706][ T5969] Bluetooth: hci3: ACL packet too small [ 157.544919][ T9309] syz_tun: entered allmulticast mode [ 157.932004][ T5969] Bluetooth: hci0: ACL packet too small [ 158.705060][ T5969] Bluetooth: hci3: ACL packet too small [ 158.896356][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1261'. [ 159.664024][ T5969] Bluetooth: hci3: ACL packet too small [ 159.751318][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1268'. [ 159.756360][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1268'. [ 159.760910][ T9379] netlink: 'syz.0.1268': attribute type 14 has an invalid length. [ 159.765998][ T9379] netlink: 'syz.0.1268': attribute type 12 has an invalid length. [ 161.146123][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'. [ 161.149793][ T9427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1287'. [ 161.234201][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1289'. [ 162.709083][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1305'. [ 163.802390][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1318'. [ 163.822258][ T9504] bad cache= option: no%e [ 163.822258][ T9504] [ 163.824597][ T9504] CIFS: VFS: bad cache= option: no%e [ 164.523933][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1327'. [ 164.958161][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1334'. [ 164.961936][ T9546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1334'. [ 165.021230][ T9548] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 165.107378][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 165.548097][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1343'. [ 165.551404][ T9567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1343'. [ 165.600810][ T9571] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 166.473415][ T9602] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 168.411487][ T9666] syz_tun: entered allmulticast mode [ 168.414821][ T9665] syz_tun: left allmulticast mode [ 168.506806][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1382'. [ 169.312754][ T9696] netlink: 'syz.3.1393': attribute type 1 has an invalid length. [ 169.325527][ T9696] 8021q: adding VLAN 0 to HW filter on device bond4 [ 169.335950][ T9696] bond4: (slave veth0_to_bond): making interface the new active one [ 169.339303][ T9696] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 169.386242][ T9699] syz_tun: entered allmulticast mode [ 169.389975][ T9698] syz_tun: left allmulticast mode [ 169.463775][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1396'. [ 170.149669][ T5955] Bluetooth: hci2: command 0x0406 tx timeout [ 170.153481][ T5955] Bluetooth: hci0: command 0x0406 tx timeout [ 170.153720][ T5317] Bluetooth: hci1: command 0x0406 tx timeout [ 170.156019][ T5955] Bluetooth: hci3: command 0x0406 tx timeout [ 170.555954][ T9739] syz_tun: entered allmulticast mode [ 170.578765][ T9738] syz_tun: left allmulticast mode [ 170.763576][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'. [ 170.766482][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1419'. [ 170.769338][ T9757] netlink: 'syz.0.1419': attribute type 14 has an invalid length. [ 170.772170][ T9757] netlink: 'syz.0.1419': attribute type 12 has an invalid length. [ 171.728593][ T9788] syz_tun: entered promiscuous mode [ 171.774960][ T9790] syz_tun: entered allmulticast mode [ 171.786212][ T9787] syz_tun: left promiscuous mode [ 171.788486][ T9789] syz_tun: left allmulticast mode [ 171.900187][ T9800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 173.594490][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1461'. [ 173.601842][ T9869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1461'. [ 173.605224][ T9869] netlink: 'syz.3.1461': attribute type 14 has an invalid length. [ 173.612101][ T9869] netlink: 'syz.3.1461': attribute type 12 has an invalid length. [ 173.678103][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1463'. [ 173.882428][ T9891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 173.886198][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1472'. [ 173.889958][ T9891] netlink: 'syz.2.1472': attribute type 14 has an invalid length. [ 173.893387][ T9891] netlink: 'syz.2.1472': attribute type 12 has an invalid length. [ 173.957269][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1473'. [ 174.243222][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 174.246067][ T9921] netlink: 'syz.3.1484': attribute type 14 has an invalid length. [ 174.249157][ T9921] netlink: 'syz.3.1484': attribute type 12 has an invalid length. [ 175.144197][ T9945] netlink: 'syz.0.1493': attribute type 14 has an invalid length. [ 175.148436][ T9945] netlink: 'syz.0.1493': attribute type 12 has an invalid length. [ 175.938098][ T9973] __nla_validate_parse: 4 callbacks suppressed [ 175.938109][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1504'. [ 175.944090][ T9973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1504'. [ 175.947465][ T9973] netlink: 'syz.2.1504': attribute type 14 has an invalid length. [ 175.949860][ T9973] netlink: 'syz.2.1504': attribute type 12 has an invalid length. [ 177.253242][T10014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.915294][T10070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1539'. [ 180.872448][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1545'. [ 183.280481][T10132] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1561'. [ 183.284504][T10132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1561'. [ 183.967989][T10132] syz.2.1561 (10132) used greatest stack depth: 20056 bytes left [ 184.376644][T10166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1575'. [ 184.379571][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1575'. [ 184.382484][T10166] netlink: 'syz.2.1575': attribute type 14 has an invalid length. [ 184.384932][T10166] netlink: 'syz.2.1575': attribute type 12 has an invalid length. [ 184.605386][T10169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.616230][T10169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.620706][T10169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.623530][T10169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.630539][T10169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.634288][T10169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.858949][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1578'. [ 186.396757][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1584'. [ 186.399850][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'. [ 186.403757][T10197] netlink: 'syz.2.1584': attribute type 14 has an invalid length. [ 186.407222][T10197] netlink: 'syz.2.1584': attribute type 12 has an invalid length. [ 186.486571][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'. [ 186.950623][T10212] netlink: 'syz.1.1589': attribute type 7 has an invalid length. [ 186.963588][T10212] : entered promiscuous mode [ 186.968150][T10209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.977888][T10209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.981482][T10209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.986742][T10209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.990972][T10209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.994960][T10209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.819491][T10225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'. [ 187.826351][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 187.830355][T10225] netlink: 'syz.0.1594': attribute type 14 has an invalid length. [ 187.836121][T10225] netlink: 'syz.0.1594': attribute type 12 has an invalid length. [ 188.475775][T10238] 9pnet_virtio: no channels available for device syz [ 189.093384][T10249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.104140][T10249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.413428][T10256] __nla_validate_parse: 1 callbacks suppressed [ 189.413439][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'. [ 189.418134][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'. [ 189.420899][T10256] netlink: 'syz.2.1604': attribute type 14 has an invalid length. [ 189.424218][T10256] netlink: 'syz.2.1604': attribute type 12 has an invalid length. [ 189.595826][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1606'. [ 189.695794][T10263] 9pnet: Could not find request transport: 0xffffffffffffffff [ 189.699573][T10263] netlink: 'syz.2.1605': attribute type 7 has an invalid length. [ 189.713700][T10263] : entered promiscuous mode [ 191.182852][ T1169] ------------[ cut here ]------------ [ 191.185263][ T1169] WARNING: CPU: 3 PID: 1169 at net/mac80211/offchannel.c:404 ieee80211_start_next_roc+0x24c/0x2c0 [ 191.189648][ T1169] Modules linked in: [ 191.191839][ T1169] CPU: 3 UID: 0 PID: 1169 Comm: kworker/u32:9 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 191.198789][ T1169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 191.203394][ T1169] Workqueue: events_unbound cfg80211_wiphy_work [ 191.206023][ T1169] RIP: 0010:ieee80211_start_next_roc+0x24c/0x2c0 [ 191.208807][ T1169] Code: 7b 40 e8 97 4a dc ff 48 83 c4 10 5b 5d e9 4c c5 c4 f6 e8 47 c5 c4 f6 48 89 df e8 9f 61 ff ff e9 40 ff ff ff e8 35 c5 c4 f6 90 <0f> 0b 90 e9 32 ff ff ff 48 c7 c7 24 d8 a9 90 e8 60 a6 2a f7 e9 db [ 191.217018][ T1169] RSP: 0018:ffffc90006ef7a68 EFLAGS: 00010293 [ 191.219606][ T1169] RAX: 0000000000000000 RBX: ffff88806e3c0e40 RCX: ffffffff8af69816 [ 191.222958][ T1169] RDX: ffff88802787c880 RSI: ffffffff8af6994b RDI: 0000000000000001 [ 191.226277][ T1169] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 191.229614][ T1169] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 191.233036][ T1169] R13: ffff88806e3c28c8 R14: ffff88806e3c0e40 R15: dffffc0000000000 [ 191.236341][ T1169] FS: 0000000000000000(0000) GS:ffff888097820000(0000) knlGS:0000000000000000 [ 191.240055][ T1169] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.242960][ T1169] CR2: 00000000f504cc80 CR3: 0000000068256000 CR4: 0000000000352ef0 [ 191.246270][ T1169] Call Trace: [ 191.247725][ T1169] [ 191.249004][ T1169] __ieee80211_scan_completed+0x4fb/0xe40 [ 191.251477][ T1169] ieee80211_scan_work+0x3f1/0x2030 [ 191.253743][ T1169] ? __pfx___mutex_lock+0x10/0x10 [ 191.256003][ T1169] ? do_raw_spin_lock+0x12c/0x2b0 [ 191.258188][ T1169] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 191.260643][ T1169] cfg80211_wiphy_work+0x3dc/0x550 [ 191.263077][ T1169] process_one_work+0x9cf/0x1b70 [ 191.265284][ T1169] ? __pfx_process_one_work+0x10/0x10 [ 191.267626][ T1169] ? assign_work+0x1a0/0x250 [ 191.269628][ T1169] worker_thread+0x6c8/0xf10 [ 191.271787][ T1169] ? __kthread_parkme+0x19e/0x250 [ 191.273955][ T1169] ? __pfx_worker_thread+0x10/0x10 [ 191.276150][ T1169] kthread+0x3c2/0x780 [ 191.277947][ T1169] ? __pfx_kthread+0x10/0x10 [ 191.279998][ T1169] ? rcu_is_watching+0x12/0xc0 [ 191.282181][ T1169] ? __pfx_kthread+0x10/0x10 [ 191.284196][ T1169] ret_from_fork+0x5d7/0x6f0 [ 191.286214][ T1169] ? __pfx_kthread+0x10/0x10 [ 191.288061][ T1169] ret_from_fork_asm+0x1a/0x30 [ 191.290140][ T1169] [ 191.291509][ T1169] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 191.294584][ T1169] CPU: 3 UID: 0 PID: 1169 Comm: kworker/u32:9 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 191.299717][ T1169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 191.304333][ T1169] Workqueue: events_unbound cfg80211_wiphy_work [ 191.307013][ T1169] Call Trace: [ 191.308481][ T1169] [ 191.309764][ T1169] dump_stack_lvl+0x3d/0x1f0 [ 191.311752][ T1169] panic+0x71c/0x800 [ 191.313433][ T1169] ? __pfx_panic+0x10/0x10 [ 191.315372][ T1169] ? show_trace_log_lvl+0x29b/0x3e0 [ 191.317672][ T1169] ? check_panic_on_warn+0x1f/0xb0 [ 191.319895][ T1169] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 191.322312][ T1169] check_panic_on_warn+0xab/0xb0 [ 191.324445][ T1169] __warn+0xf6/0x3c0 [ 191.326127][ T1169] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 191.328555][ T1169] report_bug+0x3c3/0x580 [ 191.330306][ T1169] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 191.332781][ T1169] handle_bug+0x184/0x210 [ 191.334625][ T1169] exc_invalid_op+0x17/0x50 [ 191.336555][ T1169] asm_exc_invalid_op+0x1a/0x20 [ 191.338640][ T1169] RIP: 0010:ieee80211_start_next_roc+0x24c/0x2c0 [ 191.341298][ T1169] Code: 7b 40 e8 97 4a dc ff 48 83 c4 10 5b 5d e9 4c c5 c4 f6 e8 47 c5 c4 f6 48 89 df e8 9f 61 ff ff e9 40 ff ff ff e8 35 c5 c4 f6 90 <0f> 0b 90 e9 32 ff ff ff 48 c7 c7 24 d8 a9 90 e8 60 a6 2a f7 e9 db [ 191.349290][ T1169] RSP: 0018:ffffc90006ef7a68 EFLAGS: 00010293 [ 191.351945][ T1169] RAX: 0000000000000000 RBX: ffff88806e3c0e40 RCX: ffffffff8af69816 [ 191.355323][ T1169] RDX: ffff88802787c880 RSI: ffffffff8af6994b RDI: 0000000000000001 [ 191.358686][ T1169] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 191.361981][ T1169] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 191.365336][ T1169] R13: ffff88806e3c28c8 R14: ffff88806e3c0e40 R15: dffffc0000000000 [ 191.368098][ T1169] ? ieee80211_start_next_roc+0x116/0x2c0 [ 191.369875][ T1169] ? ieee80211_start_next_roc+0x24b/0x2c0 [ 191.371657][ T1169] ? ieee80211_start_next_roc+0x24b/0x2c0 [ 191.373424][ T1169] __ieee80211_scan_completed+0x4fb/0xe40 [ 191.375209][ T1169] ieee80211_scan_work+0x3f1/0x2030 [ 191.376840][ T1169] ? __pfx___mutex_lock+0x10/0x10 [ 191.378417][ T1169] ? do_raw_spin_lock+0x12c/0x2b0 [ 191.380161][ T1169] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 191.381921][ T1169] cfg80211_wiphy_work+0x3dc/0x550 [ 191.383576][ T1169] process_one_work+0x9cf/0x1b70 [ 191.385148][ T1169] ? __pfx_process_one_work+0x10/0x10 [ 191.386860][ T1169] ? assign_work+0x1a0/0x250 [ 191.388306][ T1169] worker_thread+0x6c8/0xf10 [ 191.389780][ T1169] ? __kthread_parkme+0x19e/0x250 [ 191.391363][ T1169] ? __pfx_worker_thread+0x10/0x10 [ 191.392972][ T1169] kthread+0x3c2/0x780 [ 191.394264][ T1169] ? __pfx_kthread+0x10/0x10 [ 191.395767][ T1169] ? rcu_is_watching+0x12/0xc0 [ 191.397268][ T1169] ? __pfx_kthread+0x10/0x10 [ 191.398756][ T1169] ret_from_fork+0x5d7/0x6f0 [ 191.400206][ T1169] ? __pfx_kthread+0x10/0x10 [ 191.401661][ T1169] ret_from_fork_asm+0x1a/0x30 [ 191.403177][ T1169] [ 191.404854][ T1169] Kernel Offset: disabled [ 191.406211][ T1169] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:58:09 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=0000000000100000 RCX=0000000000000000 RDX=1ffff1100466f01e RSI=ffff888023378090 RDI=ffff8880233780f0 RBP=00000016e70424e0 RSP=ffffc90000007910 R8 =0000000000000000 R9 =fffffbfff21534ca R10=ffffffff90a9a657 R11=0000000000000001 R12=0000000000000000 R13=ffff88802b53a4c0 R14=0000000000000001 R15=ffff888023378080 RIP=ffffffff818be2d7 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097520000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c36cd52 CR3=0000000027e42000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000011400000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000007cf365 RBX=0000000000000001 RCX=ffffffff8b849c69 RDX=0000000000000000 RSI=ffffffff8de2d10c RDI=ffffffff8c157960 RBP=ffffed1003bdb488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666645 R10=ffff88802b33322b R11=ffffffff9afaa178 R12=0000000000000001 R13=ffff88801deda440 R14=ffffffff90a9a650 R15=0000000000000000 RIP=ffffffff8b8487cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097620000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000022b69000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff84df81c6 RDX=ffff888027340000 RSI=0000000000000020 RDI=0000000000000001 RBP=ffffffff8c15c660 RSP=ffffc90002f271c8 R8 =0000000000000001 R9 =0000000000000020 R10=0000000000000010 R11=0000000000000001 R12=0000000000000010 R13=0000000000000001 R14=0000000000000003 R15=ffffffff8c15cb06 RIP=ffffffff81bb5a5b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc82fd43300 ffffffff 00c00000 GS =0000 ffff888097720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005599dbf4dec8 CR3=000000004b3b1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=8a36631fa7c8d70e 4e72e263160ecc5d 8a36631fa7c8d70e 4e72e263160ecc5d 8a36631fa7c8d70e 4e72e263160ecc5d 8a36631fa7c8d70e 4e72e263160ecc5d ZMM18=fe975b2655422036 f51ce069159ddce0 fe975b2655422036 f51ce069159ddce0 fe975b2655422036 f51ce069159ddce0 fe975b2655422036 f51ce069159ddce0 ZMM19=8509000000000000 0000000000000004 8509000000000000 0000000000000003 8509000000000000 0000000000000002 8509000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 840003b403018804 0003b00302040003 ac0302a0040003a8 0300040003a40300 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 020003a203000200 03a0030008000398 0300080003900302 0400038c03600400 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03880302c8080003 8003038002018003 0180020290030008 000288030fffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68a80008000ab003 0008000aa8030008 000aa0030208000a 980303f008001488 ZMM25=f51ce069f51ce069 f51ce069f51ce069 f51ce069f51ce069 f51ce069f51ce069 f51ce069f51ce069 f51ce069f51ce069 f51ce069f51ce069 f51ce069f51ce069 ZMM26=5542203655422036 5542203655422036 5542203655422036 5542203655422036 5542203655422036 5542203655422036 5542203655422036 5542203655422036 ZMM27=fe975b26fe975b26 fe975b26fe975b26 fe975b26fe975b26 fe975b26fe975b26 fe975b26fe975b26 fe975b26fe975b26 fe975b26fe975b26 fe975b26fe975b26 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8409000084090000 8409000084090000 8409000084090000 8409000084090000 8409000084090000 8409000084090000 8409000084090000 8409000084090000 info registers vcpu 3 CPU#3 RAX=0000000000000043 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85584815 RDI=ffffffff9b0ac980 RBP=ffffffff9b0ac940 RSP=ffffc90006ef73d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000043 R14=ffffffff9b0ac940 R15=ffffffff855847b0 RIP=ffffffff8558483f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f504cc80 CR3=0000000068256000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000