last executing test programs: 11.004047978s ago: executing program 3 (id=824): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x18) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xf4a, 0x6, 0x9, 0x11, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x3, 0x0, 0x1, @void, @value, @void, @value}, 0x50) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r2, r2], 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r3, 0xffffffb3, &(0x7f0000000240)=0x2) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x94d, &(0x7f0000000300)={0x0, 0x200004, 0x400, 0xfffffffd, 0x1da}, &(0x7f0000000180), 0x0) (async) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000b40), 0x0) (async, rerun: 32) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async, rerun: 32) openat$adsp1(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (rerun: 32) 4.346538133s ago: executing program 1 (id=871): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480)=[{{&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000fffb0000003bfa0400", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4], 0x18, 0x4004000}}], 0x1, 0x40000c1) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = open(0x0, 0x60840, 0x1d2) syz_open_dev$tty1(0xc, 0x4, 0x4) getsockname$packet(r7, 0x0, &(0x7f00000005c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'ip_vti0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)={0x144, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x144}}, 0x0) r8 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r8, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x64, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8808}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x40, 0x6}}]}]}}}, @IFLA_MASTER={0x8, 0xa, r10}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_OPERSTATE={0x5}]}, 0x64}, 0x1, 0xba01, 0x0, 0x20004401}, 0xc000) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) 3.966980784s ago: executing program 2 (id=875): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000000)='\xf3\xd9\b\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84\x9d\x14Q\xa4=\xfa\x81\f\x1et\x10\x0e\xcf', 0x0) pwrite64(r3, &(0x7f0000000540)='/', 0x1, 0x0) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\v', 0x1, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000004b80)="8f129a622e6230ee26e092c9f46b6e7b08730a31d78b77a831d1ddd5b07c9b5ec02095f97c57f3132bf37fb75e621b1f8ac180cc4d60fc03ab1239466f32711bd6b700eacd5430ed84c8115fe12dfa1961249f630c9a7e9443be1b19a608e8c9546409690d363ea4901d234603ba535b2f41ced38903bdbad73b1259c015a970ae51e0338531499ce3eb8b7431e504271a278611e2250feaf6d702f5dbdf386bfae6df6b2cc4f5cb989a3d4d100e4a550902530af246e397ea9be2f1a2ab6998d3135ed4857b0230918e40aca66ddafb6da75c326abaaf0555f0ed4425ca88674e79a49f1d474ae37e2d88640b8d7f8f1e6b43379077dc2e906930fc6c913a0b810a6677459d312f0b95ab604bf62988560269da87e02de5acf1f7fc559ce365cfae9888d4744e5ff580db5b87e95b0604058a7e40f2556f1acfee9a55f69b27ad12afb424efc404daaa954f26325c1e4a5cd637cf60694e7444cd1a6324edfa380e3380a90d147bc0d160aa32ef42291f086aa890d1004559edc959c078dcf779ef2c8637f1b52649e3db2897472fe821c2cf3a757a7fad03a03ae4174d084a16a39096795658fbee4037769353449dfff7b5e7e910a371035f330975eb46c9e39f73d4203e215934fb9c9f24d52c3c2fd1c6f5cc504bb267ba7e351c033fde8327fbd84b640936dcaca7facae9264e0fd8e33a4c3a8b0f5a0728a4138f1db9bf5826b468a266ed1e9f2b3acd5c6875aca5651785fdc52a7b8db08ce4ee8419a7ce2b161af9d9e3e1ae1497dcabee222bfa29b14faf72d5afd8c4559b3cd6a42c0c8c2f2c6982b90ab95cbd94e4e7648c0d1198ed97425a99fa333c1ec54342fed2d916316bf6d3f0ef39a8ea8961be4e398255d5bdef4d412495fb7971e140055d7ebd90161e9181402b6c9a1c33345e284730626178788bd98dc53cf37c9b3fbf7d60e89864ba9228821584190e46974bd55bada819025e847a59a2c8abe64eb292fd60e3b8949b80fc607adca387d20b30135ec45e8e74d7497449879e77afe779ff3603a4aaee7f575b5d85cbb5b181418131b78fd5a6bc2ee565ee6d1dd3db413fe86f47a68eda3516eb44da707d78b5b2743873a92e8ed84eaf59448f00fa76a070941360c3ebb874ff1bd85fb956c7a047bedc1bbbf40f160b7b1504146bffb5c8c69c1ce91f24a3241ed0aca977774d00e7931d684a137405cfcf45a210c9c5d3c4caf79fcd59d1c54c65491fb4639a01689b4f859f1312b8c1b8140a96f77e02c6b4eca3dd07facb280a691479acddb211f17a196b9b32719fa6b174517eb74a324f13cd8275b5724fa230bf2e84823b932eb4e1c584a05fe0ef4615f8b524d0f275376683727591b1fc2b8f5bc60ebd314462c68bc3268083464c18a40b756d4c8eb74fedb341ed38b424aea19ca0481adecc4235af407c1f55062b2c01ee85d2f173ecf3c479fc087e04972a333c2e28a6be39e11ed216e3f9c15a8d1c27b5d46c7d1f19d4a1324ecd19af3f1bd0d46c31b3849918f4a3d1e2cd2c09a27907013d1237be33ed993377ee5078753591746d97e7d34672b3fd010b144bdd646ba012cdeac4b38921aa35e7cb9fd6f441617457db8e51727893787b64198e477bb07c322c318e363eb2ea6963b909cd2dda8a0988e0b3ac27d8b439967efc66e86b6eaf0efe52ffbe7fb03f9e0c94d85145658b3193c5b7b44529b9622a2557722acdd79e6a2643ef9863a610af4e8ae1c040b65bfb7eece773f101880e185724dcc2c5a3f2f75d42b3b7a5755fd46ed7e6c41a91ddb3f03569d3f3e42c018538add470f5c44a33598b66ec510088af96a2d450f8674d6741a7efcdb62a28941fe6bd423e364299aeba6acccc8ba17bec1463e054698d1d29d0c67c00293f52d379171f33dcf4757a6f86934f6d8bd33196d7e3ce66a498db07514aca92b85da5d91afb711ce932b68d6e7f84c9fe529cdf4a405bc31362e2653a35e1423f478854c138439303518e50f231d12bb9d50557cb38263b4899b253b7ffd5626fd193ca98658f32fb0202daf77328ac84d8cbf7845db10dcbfd4d7b89d6f9217258cf8dc4534f68d2679c1b3c05598a648a03198e486dc6c427bf0e7a5376b17cde04a7ac6d3c072d505196ade49363f64a14f1dd057b35eccb681656dc303e2469fce8642cf6f3161fa026f9929c06922540d89a932268af3d186661b5367a64aa1449d17ce5062458a10bd93ad36adcdf183ed27f297d39e5c5634983cd025cc21cf5078271d7000ec77bcbb3ce08aa7b56ddf4751d9dc9876db2465a54e21c7095cf75b1c0505b10a5220ac3d792dfa0a15a0ce875fecee6864b9854dd90ee0015b04fc90ca0f1b426085d6a5a306545b1af7ee975fd1214b4b90846d15b88a722711e1e3b73a5c1d7436903f65a29e1cd294207784a9701460161de466f1f37d5cd0398a98ff5e5854048749aadaa9302057490f2255c13c911731794aafddc1e7c94f262fc0d40d73c41a68404e8bb90ee11102745d55b2adb9f35c446101d22c82b7383779bd437d6c564da833ee2e8ad2703388acc676506b22b2562bd466a6991fdbd47bf2267e53dff205cbd534377efe12b33910618e2c235365256c45209405b8d41d45dc28829ecef5a9fa4484c017cd1f9e5e6cec150cf5aab0a29c9822ce9843c4c", 0x76b, r4) r7 = add_key$user(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x2}, &(0x7f0000001100)="ae30d8455a5e46cd8f84c057415d8a047af7e47283691afcbae62a95ea8c96f5adf17e7dd2c3c1e18782418cff1e9b7337266405afe00441e08ed25df02a9b6d6b403af0be4d0cb5f38ed4ebf952cd5dfb408580ebf1d2d896976beb39b7046d3ff64ec67c9218eab93d76e1378f25792c2630c93364c39c516012407ae90ccfcf6747ae89dd1b6ac784d0f2e5b387e25b8b160c5e130319b94e61724104a80c80e59c4690380535", 0xa8, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f00000011c0)={r5, r6, r7}, 0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)={'sha1-avx\x00'}}) lseek(r3, 0x0, 0x4) r8 = fsmount(r2, 0x1, 0x4) mknodat$loop(r8, &(0x7f0000000100)='./file0\x00', 0xffffc000, 0x1) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5905}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r9, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) r10 = syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000009c0)=@IORING_OP_CLOSE={0x13, 0x1}) r13 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r14 = userfaultfd(0x1) ioctl$UFFDIO_API(r14, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r14, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r14, &(0x7f0000001600)=""/233, 0xe9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x40, &(0x7f0000000180)=0x400, 0x0, 0x4) ioctl$UFFDIO_COPY(r14, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) io_uring_enter(r10, 0x7a98, 0x0, 0x0, 0x0, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r8, 0x0, 0x0, 0xffffffffffffffcb, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r15, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8600d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.396992897s ago: executing program 1 (id=877): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11000, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix_mp={0x0, 0x0, 0x32314752, 0xc, 0xb, [{0x6}, {0x0, 0x6cf9}, {0x3}, {}, {}, {0x4}, {}, {0x8}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$FIONREAD(r2, 0x40082104, 0x0) writev(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c050) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0xa0000000, @mcast2, 0x3}, 0x1c) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120300080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {0xfff6}, {}, {0xfff3}}}, 0x24}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r8}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x0, 0x4}, &(0x7f0000000440)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x1) 3.077065979s ago: executing program 2 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 3.01682729s ago: executing program 2 (id=879): gettid() (async) futex(&(0x7f00000001c0), 0xd, 0x1, 0x0, 0x0, 0x93020005) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000b28000)=0x3) (async) fcntl$setsig(r0, 0xa, 0x12) (async, rerun: 64) poll(&(0x7f0000b2c000)=[{r1}], 0x2c, 0xffffffffffbffff8) (async, rerun: 64) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @reserved}) (async, rerun: 64) socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000006800040009bd7000fbdbdf250200040014000000040004000c000c8008000300ff070000"], 0x28}}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f006bbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000064, 0x0) (async, rerun: 32) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) 2.924848s ago: executing program 0 (id=880): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x100, {0x7a, 0x0, 0x0, 0x0, 0x41002, 0x408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x2}]}}}]}, 0x3c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (fail_nth: 5) 2.687349916s ago: executing program 2 (id=881): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x4010e501, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 2.639983594s ago: executing program 1 (id=882): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xf) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0x1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="61a000fe00000000050000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@deltaction={0x24, 0x18, 0x1, 0x4, 0x0, {0xa}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 2.638850256s ago: executing program 0 (id=890): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x100, {0x7a, 0x0, 0x0, 0x0, 0x41002, 0x408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x2}]}}}]}, 0x3c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (fail_nth: 6) 2.538850032s ago: executing program 1 (id=883): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x30, r1, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x2}]}]}, 0x30}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) prlimit64(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x4, 0x3}, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x880, 0x9) finit_module(r4, 0x0, 0x5) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) 2.246544969s ago: executing program 3 (id=884): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x100, {0x7a, 0x0, 0x0, 0x0, 0x41002, 0x408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x2}]}}}]}, 0x3c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x300, 0x0}}], 0x1, 0x0) 2.134120516s ago: executing program 0 (id=885): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) read$msr(r1, &(0x7f00000000c0)=""/234, 0xea) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000000)={0x0, 0xfffffe26, 0x80800, 0x0, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r6) sendmmsg$unix(r4, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)=[@cred={{0x18, 0x1, 0x2, {0x0, r6}}}], 0x18, 0x8040}}], 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3}}, 0x18) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r7 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000340), 0x20000, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r7, @ANYRESDEC=r8, @ANYRESDEC=r3]) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r10 = io_uring_setup(0x47bf, &(0x7f0000000380)={0x0, 0x2886, 0x20, 0x2, 0x37c, 0x0, r2}) chdir(&(0x7f00000005c0)='./file0\x00') io_uring_enter(r10, 0x40db, 0x9662, 0x2, &(0x7f0000000400)={[0xfffffff8]}, 0x8) ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f00000000c0)={0xf0f041, 0x800}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000001e00050300000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32], 0x24}}, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r12}, 0x10) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r13, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) 2.133656025s ago: executing program 2 (id=886): syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000032969c939c3bcc450400000000000000000500000214000880100007800900120073797a30000000000900020073797a30000000000500010067e3c54cd96d47faf4750a69c9a68ca6a76def9960fe40288097f2ac586deeeaaaf76247fc6db6615bc0637b9fdf786d8f8390470c7254d6bbabe7920d064fd596e2ef1062ef555294f35eced2c735ff8496f89316b1377aa1e6e66a3ced3437acc92a524233485fb30999e319cf6b9bb21bfb4e1abe5397d42aa57cfc42c812e092ebad1d375d908087f88c3b6d2ec4e414e1ab7e5020b01f94d83c608aa9d409f31b1e58accacc00bb5de8ab1dfb"], 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r5, 0x301, 0xfffffffc, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r6, @ANYBLOB="bc1e020000000000"], 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYRES8], 0x58}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e9, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) recvmsg(r10, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618000000008553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106, 0x5}}, 0x20) socket$kcm(0x10, 0x2, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 1.446340294s ago: executing program 3 (id=887): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 1.445834066s ago: executing program 0 (id=888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x198, 0x30, 0x1, 0x0, 0x0, {}, [{0x184, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x14c, 0x4, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00'}, @TCA_CT_LABELS_MASK={0x14, 0x8, "db0a8f52cb249b3b6743335576ae0e00"}, @TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0xc7, 0x6, "5bab70b4a13b37c3a28daaa7994c314330b252f23aab5114ccd7188f60de9c19e2314be02b1d3f3facafe90a23794e0f97ae1860c4be61cc53101c08f96da538c6654a2f2d7620d6ec2985e84b72bd6781753f240580646907d5471cc423759143a4d724228dc38bdcd888fbc0e4e2fcbb3bbb86ac31f5053b574bbf01bb8c3f5764d3a9d5d50c0264c99925fe176fbe067deede349c91782881570d483a15259dca9d78e5983eef546f68a83f37683d83669563444ee83d300d5137d3551cc29b1213"}, {0xc, 0x7, {0x1, 0xeccd7034379ca570}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x800}, 0x8011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000001440)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000340)={0x4}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000018760a3db62e42ff48cd8f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7}, 0xc) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 1.445455999s ago: executing program 1 (id=889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) getrandom(0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x440) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000440)={0xfff, 0x0, 0xfff, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0xb5, 0x0, 0xfd, 0x6}) (async) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000000000001c000000000000000000000008000100001001"], 0x24}}, 0x0) ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, &(0x7f0000000580)={{0x1, 0x100, 0x4, 0x1, 0x81, 0x9}, 0x97, [0x4, 0x4, 0x3, 0xe9f5, 0x7, 0xfff, 0x40, 0x3ff, 0x0, 0xfa44, 0x1, 0x6, 0x6, 0xec, 0x7fffffff, 0x168, 0x4, 0x100, 0xb, 0x0, 0x9, 0x7, 0xad2a, 0x3, 0x2, 0x2b0, 0x80, 0xfff, 0x10000, 0xf, 0x1000, 0x7, 0x46e0, 0x5, 0x8, 0x6, 0x6, 0xffffff2b, 0x4, 0x10000, 0x8, 0xb7, 0x3, 0x4, 0x1, 0x9, 0x6, 0x10000, 0x2, 0xff, 0x6, 0xc, 0x3, 0x0, 0x8, 0x6dab, 0x1, 0x6, 0x1, 0x9, 0x2, 0x4, 0x1, 0x947, 0x1, 0x1, 0x1, 0xfffffff9, 0x8, 0x9, 0x7ff, 0xf3, 0x2, 0xdd5, 0x562, 0x61, 0x74720e6a, 0x0, 0x7, 0x5, 0xfffffffe, 0x7, 0xde8, 0x2c, 0x101, 0x4, 0x9, 0x8, 0xc3bf, 0x7fffffff, 0x5, 0xd, 0x8000, 0x2f63, 0x4, 0x6, 0x1, 0x1, 0x2, 0x80000000, 0xffff4100, 0xfff, 0x5, 0xff, 0x0, 0x10000, 0x9, 0x3ff, 0x7, 0x7, 0x8, 0x8000, 0x3, 0x6, 0xf, 0x8, 0xfffffffc, 0x100, 0x8, 0x8, 0x33, 0x2, 0x6, 0x6, 0x4, 0x0, 0x4c5, 0xb794, 0x7, 0x4, 0x4f42, 0x4, 0x8c4, 0x2, 0xa, 0x710, 0x6, 0x80000001, 0x8, 0x5d13, 0x8001, 0x2, 0x7b, 0x64, 0x9, 0x6, 0xf5f0, 0x4, 0x5, 0x100, 0x1, 0x8, 0x8, 0x200, 0x5, 0x2, 0x115, 0x8000, 0x80000000, 0x8, 0x6, 0x7, 0x4, 0x4, 0x80000000, 0x36f, 0x6, 0x7, 0x6, 0x10, 0x5, 0x7, 0x401, 0x6, 0x601, 0x6, 0x5, 0x3, 0x9, 0x60, 0x8, 0x7, 0x0, 0x6, 0x80, 0x0, 0x1ff, 0x6, 0x0, 0xc70, 0x7b, 0x3, 0x7, 0x6, 0x5, 0x3, 0x4, 0x80000001, 0x7, 0xa, 0x9, 0x123a00, 0x6, 0x0, 0x200, 0x80000000, 0x1, 0x81, 0x8001, 0x61c00000, 0xb7, 0x0, 0x6, 0x7f, 0x1000, 0x3, 0x40, 0x80000001, 0x7fffffff, 0x2, 0x18, 0x8, 0x2, 0x5, 0x4, 0x3, 0x9, 0x9, 0x1, 0x5, 0x9, 0xfff, 0x6, 0x7, 0x6, 0x3, 0x8, 0x2, 0x10000, 0x3, 0x6, 0x80000001, 0xfffffc00, 0x3, 0x5, 0x401, 0x800, 0x6, 0x8, 0x400, 0x9, 0x2fa, 0x200, 0x7, 0x8, 0xa9, 0x5, 0x90e, 0xfffffffd, 0x1, 0x0, 0x5c3, 0x40a7c427, 0x7, 0x45d1, 0x1ff, 0x6, 0x2f, 0x5, 0x56c4, 0x6, 0x7, 0xfdce, 0x9, 0x3, 0x5, 0x4, 0xffffffff, 0x1, 0x0, 0x4, 0x80, 0x8, 0x1d, 0xb, 0x40, 0x400, 0xcd93, 0xfffffffe, 0x6, 0x36, 0xe, 0x9, 0xfffffffb, 0x4, 0x7fff, 0x8, 0x9, 0xff, 0x8000, 0x36, 0x4, 0x6a, 0x0, 0xfffffffe, 0x77466976, 0xe, 0x0, 0x1, 0x9, 0x7ff, 0x5, 0xec, 0x6, 0x8, 0x2, 0x8, 0x9, 0x17f5, 0x3, 0x6e, 0x5, 0x6, 0x4, 0x8001, 0x608, 0x4, 0x9e, 0x1, 0x6, 0x5, 0x8, 0x7f, 0x100, 0x81, 0x5, 0x5, 0x4, 0x9, 0x0, 0x52b, 0x1, 0x8, 0x1, 0x9, 0x4, 0x2, 0x4, 0x100, 0x5, 0xfffffffe, 0x4, 0x40, 0x40, 0x0, 0xb, 0x9, 0xb, 0x0, 0x4, 0x2, 0xec2, 0xa, 0x7ff, 0x9, 0x7fff, 0x2e32, 0x7ff, 0xb3, 0x22, 0xfeb9, 0x8, 0x3, 0x0, 0x19, 0x83, 0x0, 0xffffffff, 0x4698d2d7, 0x5, 0x0, 0x7, 0x3, 0x0, 0x0, 0x4, 0x6, 0x401, 0x1, 0x200, 0x8, 0x7ff, 0x8, 0x9, 0x8, 0x10, 0xfffffffa, 0x81, 0x8, 0x66e, 0x10001, 0x3, 0x4, 0x5, 0x8, 0x4, 0x40d7, 0x5, 0x0, 0x0, 0xfc, 0xd800, 0x1, 0x9, 0x5, 0x2, 0x9, 0x7, 0x6, 0xff, 0x7, 0x2, 0x400, 0xfffffffb, 0x0, 0x3, 0x1, 0x4, 0x0, 0x3, 0x6, 0xfff, 0x0, 0x6, 0xf, 0x1, 0x4, 0x2, 0x4, 0x8, 0x77, 0x7, 0x101, 0x4, 0xffffffff, 0x4, 0xfffffbdd, 0x0, 0x1, 0x10, 0x3ff, 0x0, 0x6, 0x3f0, 0x1000, 0x5, 0x4, 0x5, 0x4, 0x8bc, 0x1, 0xfffffffd, 0x81, 0x9, 0x0, 0xb2, 0x3, 0x31, 0xfffffff8, 0x5, 0x8000, 0x7, 0x100, 0x3, 0x3, 0x5, 0xfffff001, 0x4, 0x7f, 0x3c, 0x0, 0x3, 0x0, 0x3f6e, 0xaec, 0x0, 0x31ec, 0x7, 0xfffffab3, 0x8a7, 0x7ff, 0x7, 0x2, 0x1, 0x1, 0x7fe, 0xb, 0x6, 0xd, 0x0, 0x44, 0x9, 0x6, 0x8, 0x8001, 0x1, 0x3ff, 0x9, 0xa, 0x6, 0x2, 0x2, 0x9, 0xe, 0xd26, 0x4, 0xfffff2f8, 0x6, 0x6, 0x80, 0x4, 0x7e6bee85, 0x7ff, 0x7fff, 0x5, 0x9, 0x482, 0x7, 0x80000000, 0x1, 0x4, 0xfffffffa, 0x7, 0x8, 0x2, 0x3, 0x698d, 0x0, 0x122, 0xffff6f36, 0x3, 0xffff, 0x4, 0x6, 0x10001, 0xfffffffd, 0x6, 0x7, 0x2, 0x9, 0x0, 0xfff, 0x8, 0x9, 0x400, 0x4, 0x9, 0x3ff, 0x4, 0x0, 0x9, 0x6, 0x5, 0x8, 0x45, 0x2, 0x6, 0x7, 0x3ff, 0x8a8, 0x401, 0x4, 0x0, 0x1ff, 0x5, 0xbf, 0xfffffff8, 0x6, 0x2, 0xe32f, 0x0, 0xffffffff, 0x7, 0x0, 0x4, 0x4, 0x6, 0x8, 0x8, 0x0, 0x8000, 0x9, 0x9, 0x7, 0x7, 0x3, 0x7fffffff, 0x3, 0xfffffff5, 0x6, 0x8001, 0x81, 0x4, 0x3, 0x8000, 0x1, 0xfffffff8, 0x92, 0x7, 0xc, 0xa, 0x4, 0x0, 0x8000, 0xe5, 0x1, 0x6, 0x6, 0x3, 0x9, 0x1, 0x4, 0x5, 0x8, 0x9, 0x252, 0x5, 0x6, 0x1, 0xf204, 0x2, 0x1, 0x5, 0x8001, 0x7, 0x5, 0x5, 0x1, 0x1, 0x5, 0x9, 0xfffffff8, 0x4, 0x7fffffff, 0x6, 0x6, 0x1, 0x9, 0x9, 0x0, 0xc39f, 0x1, 0x3, 0x9, 0x3, 0x7, 0x800, 0xd, 0x5, 0xdc4b, 0x6, 0x9, 0x4fb, 0x5, 0x5, 0x0, 0x4, 0x4, 0x7f, 0x6, 0x5, 0x1000, 0xf, 0x3, 0xb8, 0xffff, 0x0, 0xffffffff, 0x86f, 0x3, 0x2, 0x7fffffff, 0x5, 0x3, 0x4, 0xff, 0x5, 0x0, 0x226c5e59, 0x4, 0x7, 0x3, 0x5, 0x3, 0x1, 0x3, 0x3, 0x50, 0x8858, 0x6, 0x8000, 0xe, 0x6, 0x9, 0x6, 0xffffb3cd, 0x4, 0x3a1a, 0xa4, 0x6, 0x9, 0x44a, 0x3, 0xb1b, 0x3, 0x92be, 0x10, 0x7fffffff, 0xd6b6, 0x7, 0xd7, 0x3, 0x90, 0x0, 0x9, 0x6, 0x2, 0xb95b, 0x5, 0x7, 0x482d, 0x1, 0x3ff, 0x8, 0x8, 0x200, 0x20000, 0x9, 0x280, 0x0, 0x64a5c8f, 0x0, 0x3, 0xffffffff, 0x7, 0x100, 0x9, 0x3, 0x8, 0x5, 0xfb31, 0x4, 0x7ff, 0x3, 0x1, 0x2, 0x6363fcbf, 0xbd, 0x0, 0x3ff, 0x40, 0x4, 0x0, 0x5, 0x8, 0x5, 0x5e3, 0xd82, 0x1, 0xfffff001, 0x1, 0x1000, 0x4, 0x0, 0x72, 0x7fffffff, 0x94d, 0x8, 0x4, 0xf, 0x6, 0x2, 0x3ff, 0xa, 0x80, 0xb, 0x5, 0x0, 0x9, 0x9, 0x8001, 0x284, 0x8000, 0x6, 0xffffb6ab, 0x2, 0x1, 0x7, 0x80000000, 0xffffffff, 0x2, 0x3, 0x6, 0x3fbfd950, 0xfffffff7, 0x0, 0x1, 0x4, 0x2, 0x2, 0x5, 0x2, 0x8, 0x0, 0x3, 0x3, 0x7fffffff, 0x7, 0x6ff, 0x99, 0x2, 0x9, 0x58d, 0x8, 0x2, 0x2, 0x5, 0x1, 0x3c21, 0xd53c, 0xf, 0x5, 0x8, 0x8, 0x3, 0x9, 0x5, 0x7fff, 0x2, 0x2, 0x1, 0x8, 0xfffffffc, 0x4, 0x10, 0x2, 0x2, 0xfff, 0x8, 0x4, 0x51c, 0x4bd50, 0x0, 0x1, 0x57b, 0xffffffaf, 0x9, 0x9, 0x1, 0x2, 0x7f, 0xfcd, 0x10000, 0x6, 0xa0, 0x1, 0x3, 0xfffffff8, 0x4, 0x9, 0x1, 0x7, 0x9, 0xfff, 0x5, 0x8, 0x8, 0xc, 0xfa, 0x1, 0xf287, 0x6d8, 0x81, 0xd, 0x5730, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x9, 0xe64, 0x8000, 0x3, 0x6, 0x1000, 0x4, 0x1, 0x10000, 0x800, 0x10, 0xf, 0x3d7, 0x0, 0x4, 0x1, 0x2a, 0x4, 0xf7cd, 0x68, 0xfffffff9, 0x1, 0x81, 0x7, 0x1000, 0x9403, 0x6, 0x7, 0x401, 0xe, 0xfffffffc, 0x7, 0x1, 0x1, 0xd, 0x3, 0x3, 0x40, 0x4, 0x1, 0xffff701c, 0x3, 0xcc, 0x20000003, 0x7, 0x9, 0x9, 0x1, 0x0, 0x6, 0x8, 0xc686, 0x56a3, 0x9, 0xdf, 0x1, 0x4, 0x8, 0xc, 0x5, 0x5, 0x7, 0xfff, 0xd, 0xfff, 0x3, 0x1ff, 0xc42, 0x40, 0x5, 0x1, 0x8, 0xbb, 0x2, 0x3, 0x2, 0xfffff801, 0x4c, 0x5, 0x7, 0x10, 0x2, 0x8, 0x101, 0x1, 0x2, 0xfffffff9, 0x3, 0x4, 0x80000, 0xc0000000, 0x0, 0x0, 0x1, 0x1, 0xffff, 0x1, 0x2, 0x9, 0x7fff, 0x81, 0x1, 0x0, 0x5, 0x1, 0x1a, 0x3, 0xfffff7d4, 0x4, 0x28f4, 0x9, 0xfffffe01, 0x6, 0x6, 0x0, 0x18, 0x3, 0x1ff, 0x6, 0x2, 0x9, 0x1, 0xffff2653, 0xfffffff9, 0x3f9e, 0x6, 0x3, 0x400, 0x8, 0x3, 0xe, 0x10, 0x8, 0xffffff81]}) (async) write$tun(r0, 0x0, 0x962) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) fcntl$setflags(r6, 0x2, 0x1) (async) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) recvmsg$kcm(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x161) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x400d5}, 0x4000051) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000200)={0x0, 'syzkaller1\x00', {0xfffffffd}, 0x1}) 1.375142468s ago: executing program 3 (id=891): bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x36, 0x10, 0xc, 0x3, 0x9, 0x8004, 0x5, 0x2e}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x4c2400, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="933b93cbaceaaaaaaaaaaa0c810041000800461f002000ac1414aa640101020000000087404e2200088178"], 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000001cc0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000810e00"/16, @ANYRES64=r1, @ANYRES64, @ANYRES64, @ANYRES16=0x0, @ANYRESHEX], 0x80}}, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000000a06020800000000000000000600000420000880100007800c00184000000000000000080c00078006001a0025200000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_io_uring_setup(0x3edf, &(0x7f0000002480)={0x0, 0x5b8d, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000ffd000)) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x2000000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0xffffffff}, 0x5e) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f00000005c0)={0x3ff, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffe}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000009, 0x114}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) 1.216507926s ago: executing program 2 (id=892): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11000, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix_mp={0x0, 0x0, 0x32314752, 0xc, 0xb, [{0x6}, {0x0, 0x6cf9}, {0x3}, {}, {}, {0x4}, {}, {0x8}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$FIONREAD(r2, 0x40082104, 0x0) writev(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c050) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0xa0000000, @mcast2, 0x3}, 0x1c) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120300080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {0xfff6}, {}, {0xfff3}}}, 0x24}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r8}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x0, 0x4}, &(0x7f0000000440)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x1) 376.733379ms ago: executing program 0 (id=893): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x4010e501, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x50, 0x9, 0x6, 0x201}, 0x50}, 0x1, 0x0, 0x0, 0x10000857}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000000306050000000000000000000500000405000100070000000900"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 369.473295ms ago: executing program 3 (id=894): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x15, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x100, {0x7a, 0x0, 0x0, 0x0, 0x41002, 0x408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x2}]}}}]}, 0x3c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 196.635468ms ago: executing program 1 (id=895): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x100, {0x7a, 0x0, 0x0, 0x0, 0x41002, 0x408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x2}]}}}]}, 0x3c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (fail_nth: 7) 195.752425ms ago: executing program 3 (id=896): getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000032969c939c3bcc450400000000000000000500000214000880100007800900120073797a30000000000900020073797a30000000000500010067e3c54cd96d47faf4750a69c9a68ca6a76def9960fe40288097f2ac586deeeaaaf76247fc6db6615bc0637b9fdf786d8f8390470c7254d6bbabe7920d064fd596e2ef1062ef555294f35eced2c735ff8496f89316b1377aa1e6e66a3ced3437acc92a524233485fb30999e319cf6b9bb21bfb4e1abe5397d42aa57cfc42c812e092ebad1d375d908087f88c3b6d2ec4e414e1ab7e5020b01f94d83c608aa9d409f31b1e58accacc00bb5de8ab1dfb"], 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r5, 0x301, 0xfffffffc, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r6, @ANYBLOB="bc1e020000000000"], 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYRES8], 0x58}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r9) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e9, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) recvmsg(r10, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618000000008553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106, 0x5}}, 0x20) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 0s ago: executing program 0 (id=897): getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000032969c939c3bcc450400000000000000000500000214000880100007800900120073797a30000000000900020073797a30000000000500010067e3c54cd96d47faf4750a69c9a68ca6a76def9960fe40288097f2ac586deeeaaaf76247fc6db6615bc0637b9fdf786d8f8390470c7254d6bbabe7920d064fd596e2ef1062ef555294f35eced2c735ff8496f89316b1377aa1e6e66a3ced3437acc92a524233485fb30999e319cf6b9bb21bfb4e1abe5397d42aa57cfc42c812e092ebad1d375d908087f88c3b6d2ec4e414e1ab7e5020b01f94d83c608aa9d409f31b1e58accacc00bb5de8ab1dfb"], 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r5, 0x301, 0xfffffffc, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r6, @ANYBLOB="bc1e020000000000"], 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYRES8], 0x58}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r9) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e9, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) recvmsg(r10, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618000000008553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106, 0x5}}, 0x20) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) kernel console output (not intermixed with test programs): renamed from eth3 [ 47.064706][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.084123][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.093082][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.095417][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.110578][ T5944] Bluetooth: hci3: command tx timeout [ 47.117375][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.119626][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.125959][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.143117][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.147788][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.150046][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.171397][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.173735][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.197048][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.212218][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.214504][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.225718][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.228100][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.233965][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.256085][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.263148][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.265420][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.272554][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.275798][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.317490][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.362507][ T5945] veth0_vlan: entered promiscuous mode [ 47.367175][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.376980][ T5945] veth1_vlan: entered promiscuous mode [ 47.404611][ T5935] veth0_vlan: entered promiscuous mode [ 47.412981][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.419142][ T5945] veth0_macvtap: entered promiscuous mode [ 47.427637][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.431761][ T5935] veth1_vlan: entered promiscuous mode [ 47.435391][ T5945] veth1_macvtap: entered promiscuous mode [ 47.451928][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.461707][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.471709][ T5945] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.474549][ T5945] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.477235][ T5945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.480516][ T5945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.505919][ T5948] veth0_vlan: entered promiscuous mode [ 47.515415][ T5935] veth0_macvtap: entered promiscuous mode [ 47.518774][ T5948] veth1_vlan: entered promiscuous mode [ 47.531636][ T5936] veth0_vlan: entered promiscuous mode [ 47.537991][ T5948] veth0_macvtap: entered promiscuous mode [ 47.541422][ T5935] veth1_macvtap: entered promiscuous mode [ 47.553550][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.557050][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.561624][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.564912][ T5948] veth1_macvtap: entered promiscuous mode [ 47.579425][ T5936] veth1_vlan: entered promiscuous mode [ 47.586000][ T5935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.589265][ T5935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.593299][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.602280][ T5935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.605045][ T5935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.607750][ T5935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.611208][ T5935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.617003][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.620608][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.623585][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.626865][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.631005][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.635992][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.638538][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.641484][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.644752][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.647760][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.652233][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.656110][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.668111][ T5948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.671349][ T5948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.674050][ T5948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.676746][ T5948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.695877][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.698887][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.704683][ T5936] veth0_macvtap: entered promiscuous mode [ 47.717547][ T5936] veth1_macvtap: entered promiscuous mode [ 47.739253][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.748175][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.752624][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.755614][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.759152][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.764283][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.768633][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.774836][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.780730][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.785462][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.788687][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.792123][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.795130][ T5936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.798406][ T5936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.808830][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.819618][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.822801][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.834590][ T5936] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.837351][ T5936] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.840384][ T5936] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.843216][ T5936] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.857800][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.860856][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.883560][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.886763][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.900475][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.902985][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.903711][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.908294][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.912256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.944087][ T6002] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 47.968797][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.975623][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.108804][ T6011] bridge_slave_0: left allmulticast mode [ 48.111253][ T6011] bridge_slave_0: left promiscuous mode [ 48.113531][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.133621][ T6008] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 48.137180][ T6011] bridge_slave_1: left allmulticast mode [ 48.139344][ T6011] bridge_slave_1: left promiscuous mode [ 48.145369][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.153138][ T6011] bond0: (slave bond_slave_0): Releasing backup interface [ 48.166081][ T6011] bond0: (slave bond_slave_1): Releasing backup interface [ 48.214534][ T6011] team0: Port device team_slave_0 removed [ 48.297706][ T6011] team0: Port device team_slave_1 removed [ 48.303269][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.305865][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.315148][ T6000] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 48.326976][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.333259][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.414854][ T6000] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 48.423111][ T6000] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 48.641163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.655575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.686238][ T6020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 48.750258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.757972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 49.087680][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 49.115408][ T5944] Bluetooth: hci0: command tx timeout [ 49.117222][ T5946] Bluetooth: hci1: command tx timeout [ 49.120017][ T5944] Bluetooth: hci2: command tx timeout [ 49.189916][ T5944] Bluetooth: hci3: command tx timeout [ 49.679970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 49.744811][ T6040] block device autoloading is deprecated and will be removed. [ 49.899365][ T6046] xt_ecn: cannot match TCP bits for non-tcp packets [ 50.090463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.092999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.095506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.098042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.229079][ T5944] Bluetooth: hci2: command tx timeout [ 51.231345][ T5944] Bluetooth: hci0: command tx timeout [ 51.233405][ T5944] Bluetooth: hci1: command tx timeout [ 51.278229][ T5946] Bluetooth: hci3: command tx timeout [ 51.382808][ T6069] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 51.519400][ T6069] warning: `syz.0.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 51.600797][ T6064] netlink: 'syz.3.13': attribute type 11 has an invalid length. [ 51.603163][ T6064] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13'. [ 51.603596][ T6073] No control pipe specified [ 51.680727][ T6069] netlink: 'syz.0.15': attribute type 10 has an invalid length. [ 51.745217][ T6072] bond0: (slave wlan1): Releasing backup interface [ 51.755432][ T6074] bond0: entered promiscuous mode [ 51.799766][ T6069] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 51.937154][ T6069] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 51.957339][ T6069] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 52.251877][ T6073] syz.2.16 (6073): drop_caches: 2 [ 52.281171][ T6085] smc: net device bond0 applied user defined pnetid SYZ0 [ 52.357915][ T6088] netlink: 244 bytes leftover after parsing attributes in process `syz.3.20'. [ 52.388033][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 53.011555][ T6098] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 53.143756][ T6100] bridge_slave_0: left allmulticast mode [ 53.145853][ T6100] bridge_slave_0: left promiscuous mode [ 53.148337][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.225349][ T6100] bridge_slave_1: left allmulticast mode [ 53.227111][ T6100] bridge_slave_1: left promiscuous mode [ 53.270266][ T5944] Bluetooth: hci0: command tx timeout [ 53.271178][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.272452][ T5944] Bluetooth: hci2: command tx timeout [ 53.277417][ T5946] Bluetooth: hci1: command tx timeout [ 53.359906][ T67] Bluetooth: hci3: command tx timeout [ 53.363318][ T6101] netlink: 'syz.1.22': attribute type 10 has an invalid length. [ 53.372542][ T6100] bond0: (slave bond_slave_0): Releasing backup interface [ 53.425949][ T6100] bond0: (slave bond_slave_1): Releasing backup interface [ 53.650738][ T6100] team0: Port device team_slave_0 removed [ 53.672585][ T6100] team0: Port device team_slave_1 removed [ 53.675842][ T6100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.678485][ T6100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.697490][ T6100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.700147][ T6100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.711698][ T6101] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 53.732788][ T6101] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 53.735390][ T6107] raw_sendmsg: syz.3.24 forgot to set AF_INET. Fix it! [ 53.885770][ T6112] netlink: 240 bytes leftover after parsing attributes in process `syz.3.26'. [ 54.182444][ T40] audit: type=1326 audit(1746981420.532:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.29" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 54.509874][ T58] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.660084][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 54.668689][ T58] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 54.674664][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 54.683452][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 54.689691][ T58] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 54.699049][ T58] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 54.704304][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.921792][ T58] usb 5-1: GET_CAPABILITIES returned 0 [ 54.923546][ T58] usbtmc 5-1:16.0: can't read capabilities [ 55.050165][ T6146] mmap: syz.3.34 (6146) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.164209][ T10] usb 5-1: USB disconnect, device number 2 [ 55.317303][ T6153] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 55.384615][ T6154] bridge_slave_0: left allmulticast mode [ 55.386449][ T6154] bridge_slave_0: left promiscuous mode [ 55.388724][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.404925][ T6154] bridge_slave_1: left allmulticast mode [ 55.406690][ T6154] bridge_slave_1: left promiscuous mode [ 55.408477][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.422482][ T6154] bond0: (slave bond_slave_0): Releasing backup interface [ 55.432015][ T6156] netlink: 'syz.3.35': attribute type 10 has an invalid length. [ 55.438336][ T6157] process 'syz.2.36' launched './file0' with NULL argv: empty string added [ 55.442757][ T6154] bond0: (slave bond_slave_1): Releasing backup interface [ 55.445456][ T6157] rpc_pipefs: Unknown parameter '^' [ 55.462903][ T6154] team0: Port device team_slave_0 removed [ 55.474071][ T6154] team0: Port device team_slave_1 removed [ 55.477130][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.479456][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.487496][ T6154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.490356][ T6154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.506156][ T6156] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 55.515036][ T6156] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 55.620746][ T6172] libceph: resolve '0' (ret=-3): failed [ 55.890181][ T40] audit: type=1326 audit(1746981422.232:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6183 comm="syz.2.42" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 56.782223][ T40] audit: type=1804 audit(1746981423.122:4): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.47" name="/newroot/13/bus/file0" dev="overlay" ino=99 res=1 errno=0 [ 56.833515][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.838472][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.841274][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.843772][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.846297][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.849406][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.852530][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.855023][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.857501][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.860112][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.862583][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.865020][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.867519][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.870212][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.872746][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.875243][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.877757][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.880457][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.882977][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.885470][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.888295][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.890827][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.893318][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.895832][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.898873][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.901717][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.904273][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.906824][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.909440][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.912046][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.914570][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.917064][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.919708][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.922368][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.924881][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.929945][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.932491][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.935045][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.937607][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.941277][ T6218] xt_ecn: cannot match TCP bits for non-tcp packets [ 56.942303][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.946316][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.948757][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.959937][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.962355][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: unknown main item tag 0x0 [ 56.967774][ T6001] hid-generic 0001:0000:FFFFFFEE.0002: hidraw1: HID vffffff.ff Device [syz0] on syz0 [ 56.991442][ T5349] udevd[5349]: worker [6135] terminated by signal 33 (Unknown signal 33) [ 56.994013][ T5349] udevd[5349]: worker [6135] failed while handling '/devices/virtual/misc/uhid/0001:0000:FFFFFFEE.0002/hidraw/hidraw1' [ 57.102826][ T6224] Zero length message leads to an empty skb [ 57.223926][ T6227] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 57.228461][ T40] audit: type=1326 audit(1746981423.572:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.0.55" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 57.295015][ T6239] bridge_slave_0: left allmulticast mode [ 57.296906][ T6239] bridge_slave_0: left promiscuous mode [ 57.298836][ T6239] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.306567][ T6239] bridge_slave_1: left allmulticast mode [ 57.308356][ T6239] bridge_slave_1: left promiscuous mode [ 57.310425][ T6239] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.315177][ T6239] bond0: (slave bond_slave_0): Releasing backup interface [ 57.319226][ T6239] bond0: (slave bond_slave_1): Releasing backup interface [ 57.329737][ T6239] team0: Port device team_slave_0 removed [ 57.337315][ T6239] team0: Port device team_slave_1 removed [ 57.339547][ T6239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.343477][ T6239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.343786][ T6241] netlink: 'syz.2.53': attribute type 10 has an invalid length. [ 57.350587][ T6239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.352911][ T6239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.366197][ T6241] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 57.371948][ T6241] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 57.665765][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 57.668605][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'. [ 57.810652][ T6250] tmpfs: Unknown parameter 'grpquota 0 [ 57.810652][ T6250] ' [ 57.815074][ T6250] Cannot find del_set index 3 as target [ 57.817519][ T6250] netlink: 'syz.1.60': attribute type 11 has an invalid length. [ 57.820003][ T6250] netlink: 224 bytes leftover after parsing attributes in process `syz.1.60'. [ 57.869076][ T6252] capability: warning: `syz.2.61' uses 32-bit capabilities (legacy support in use) [ 58.078999][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'. [ 58.087691][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 58.090932][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.63'. [ 58.559905][ T5978] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.681013][ T6282] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 58.720612][ T5978] usb 8-1: Using ep0 maxpacket: 32 [ 58.723796][ T5978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.727278][ T5978] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.731020][ T5978] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 58.734763][ T5978] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.750507][ T5978] usb 8-1: config 0 descriptor?? [ 58.803275][ T6283] bond0: (slave wlan1): Releasing backup interface [ 58.819048][ T6284] netlink: 'syz.1.70': attribute type 10 has an invalid length. [ 58.893934][ T6284] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 58.902339][ T6284] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 59.033032][ T6287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.71'. [ 59.066736][ T40] audit: type=1326 audit(1746981425.412:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.0.72" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 59.142427][ T6297] 9pnet_fd: Insufficient options for proto=fd [ 59.165781][ T5978] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 59.318276][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.75'. [ 59.385863][ T5940] udevd[5940]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 59.476642][ T5978] usb 8-1: USB disconnect, device number 2 [ 59.670911][ T6311] orangefs_mount: mount request failed with -4 [ 60.148123][ T6340] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 60.232018][ T6348] bond0: (slave wlan1): Releasing backup interface [ 60.257498][ T6348] netlink: 'syz.3.84': attribute type 10 has an invalid length. [ 60.260973][ T6348] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 60.268986][ T6348] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 60.275989][ T40] audit: type=1326 audit(1746981426.622:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.86" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 60.373931][ T6352] netlink: 96 bytes leftover after parsing attributes in process `syz.2.87'. [ 60.377628][ T6353] netlink: 96 bytes leftover after parsing attributes in process `syz.2.87'. [ 60.679622][ T6364] trusted_key: syz.2.91 sent an empty control message without MSG_MORE. [ 60.749348][ T6377] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 60.779925][ T40] audit: type=1326 audit(1746981427.132:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.3.95" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 60.922693][ T6382] /dev/sr0: Can't open blockdev [ 61.245916][ T6397] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 61.331774][ T6398] bond0: (slave wlan1): Releasing backup interface [ 61.334336][ T6398] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 61.341798][ T6398] netlink: 'syz.0.100': attribute type 10 has an invalid length. [ 61.344347][ T6398] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 61.347927][ T6398] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 61.351774][ T6398] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 61.826640][ T6413] capability: warning: `syz.1.104' uses deprecated v2 capabilities in a way that may be insecure [ 61.830854][ T6413] 9pnet_fd: p9_fd_create_tcp (6413): problem binding to privport [ 61.835246][ T6412] netlink: 'syz.1.104': attribute type 1 has an invalid length. [ 61.915486][ T6421] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.947108][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.957473][ T5946] Bluetooth: hci1: connection err: -111 [ 62.026213][ T40] audit: type=1326 audit(1746981428.372:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.1.110" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 62.100074][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 62.103734][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 7 [ 62.107113][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 9272, setting to 1024 [ 62.118948][ T24] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 62.121805][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.124376][ T24] usb 8-1: Product: syz [ 62.125782][ T24] usb 8-1: Manufacturer: syz [ 62.127447][ T24] usb 8-1: SerialNumber: syz [ 62.135818][ T24] usb 8-1: config 0 descriptor?? [ 62.147457][ T24] hub 8-1:0.0: bad descriptor, ignoring hub [ 62.149597][ T24] hub 8-1:0.0: probe with driver hub failed with error -5 [ 62.155567][ T24] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input5 [ 62.240403][ T5946] Bluetooth: hci3: command 0x0405 tx timeout [ 62.874702][ T6456] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.883271][ T6456] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 62.930370][ T6457] ALSA: mixer_oss: invalid OSS volume '' [ 62.950041][ T67] Bluetooth: hci0: unknown advertising packet type: 0x14 [ 63.042182][ T6467] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 63.087446][ T6468] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 63.089615][ T6468] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.094067][ T6468] vhci_hcd vhci_hcd.0: Device attached [ 63.098904][ T6474] vhci_hcd: connection closed [ 63.099972][ T1135] vhci_hcd: stop threads [ 63.103219][ T1135] vhci_hcd: release socket [ 63.104633][ T1135] vhci_hcd: disconnect device [ 63.200580][ T6478] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 63.299549][ T6484] bond0: (slave wlan1): Releasing backup interface [ 63.342250][ T6484] netlink: 'syz.2.119': attribute type 10 has an invalid length. [ 63.344607][ T6484] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 63.353782][ T6484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.361844][ T6484] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 63.364760][ T40] audit: type=1326 audit(1746981429.712:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.0.123" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 63.452751][ T24] usb 8-1: USB disconnect, device number 3 [ 63.633179][ T6505] netlink: 'syz.1.126': attribute type 2 has an invalid length. [ 64.260757][ T6521] __nla_validate_parse: 3 callbacks suppressed [ 64.260767][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.131'. [ 64.523304][ T6531] binder: 6530:6531 ioctl c0306201 80001440 returned -11 [ 64.526872][ T6531] netlink: 'syz.1.136': attribute type 10 has an invalid length. [ 64.546712][ T6531] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 64.590381][ T6535] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 64.674911][ T6536] bond0: (slave wlan1): Releasing backup interface [ 64.706426][ T6536] netlink: 'syz.2.135': attribute type 10 has an invalid length. [ 64.708952][ T6536] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 64.715492][ T6536] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 65.107824][ T40] audit: type=1326 audit(1746981431.452:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6540 comm="syz.1.138" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 66.108857][ T6570] 9pnet: Unknown protocol version 9 [ 66.573676][ T6591] /dev/sr0: Can't open blockdev [ 67.040998][ T6604] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 67.165313][ T6606] netlink: 'syz.2.155': attribute type 10 has an invalid length. [ 67.171949][ T6605] bond0: (slave wlan1): Releasing backup interface [ 67.192028][ T6606] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 67.197640][ T6606] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 67.265884][ T40] audit: type=1326 audit(1746981433.612:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.1.156" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 67.864242][ T6631] trusted_key: encrypted_key: master key parameter 'ÜpÿD±Ö@ [ 67.864242][ T6631] c' is invalid [ 67.884796][ T6631] netlink: 36 bytes leftover after parsing attributes in process `syz.2.163'. [ 68.480829][ T67] Bluetooth: Unexpected continuation frame (len 16) [ 69.122232][ T6657] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 69.129440][ T6657] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 69.143100][ T6657] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 69.148165][ T6657] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 69.150599][ T6657] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 69.156337][ T6660] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 69.157525][ T6657] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 69.168303][ T6657] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 69.170917][ T6657] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 69.176690][ T6657] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 69.184491][ T6657] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 69.189247][ T6657] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 69.204613][ T6657] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 69.241641][ T6662] bond0: (slave bridge0): Releasing backup interface [ 69.289672][ T6663] netlink: 'syz.1.171': attribute type 10 has an invalid length. [ 69.319398][ T6662] bond0: (slave wlan1): Releasing backup interface [ 69.326784][ T6663] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 69.336290][ T6663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.346235][ T6663] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 69.386898][ T40] audit: type=1326 audit(1746981435.732:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.173" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 69.586282][ T6672] netlink: 36 bytes leftover after parsing attributes in process `syz.3.176'. [ 69.675377][ T6681] 9pnet_fd: Insufficient options for proto=fd [ 69.942418][ T40] audit: type=1326 audit(1746981436.292:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6688 comm="syz.1.181" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 70.241635][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 70.248234][ T6694] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.251233][ T6694] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.253940][ T6694] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.256634][ T6694] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.263522][ T6694] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.267168][ T6694] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.270541][ T6694] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.273540][ T6694] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.279859][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 70.294634][ T6695] random: crng reseeded on system resumption [ 70.301454][ T6695] Restarting kernel threads ... done. [ 70.439869][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 70.443071][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 70.446482][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 70.449549][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 7200, setting to 1024 [ 70.454684][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 70.457839][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.462087][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 70.464846][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.883951][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.886410][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.945538][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 70.947574][ T24] usbtmc 6-1:16.0: can't read capabilities [ 71.100827][ T24] usb 6-1: USB disconnect, device number 2 [ 71.193595][ T67] Bluetooth: hci3: command 0x0405 tx timeout [ 71.195722][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.199289][ T67] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.201772][ T67] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.343809][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 71.614203][ T6718] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 71.706898][ T6720] bond0: (slave wlan1): Releasing backup interface [ 71.735708][ T6716] netlink: 'syz.3.189': attribute type 10 has an invalid length. [ 71.738257][ T6716] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 71.743448][ T6716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.747574][ T6716] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 72.252760][ T40] audit: type=1326 audit(1746981438.602:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.2.190" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 72.450775][ T6730] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 73.162853][ T5978] kernel read not supported for file bpf-prog (pid: 5978 comm: kworker/3:4) [ 73.281163][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.283114][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.285061][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.285135][ T5944] Bluetooth: hci3: command 0x0405 tx timeout [ 73.301197][ T6755] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 73.423800][ T6752] netlink: 'syz.1.200': attribute type 10 has an invalid length. [ 73.480183][ T6756] bond0: (slave wlan1): Releasing backup interface [ 73.565586][ T6752] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 73.580096][ T6752] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 73.691055][ T6764] program syz.0.203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.754955][ T40] audit: type=1326 audit(1746981440.102:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6769 comm="syz.0.205" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 73.964655][ T40] audit: type=1326 audit(1746981440.312:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 73.971432][ T40] audit: type=1326 audit(1746981440.312:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 73.979594][ T40] audit: type=1326 audit(1746981440.312:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.207" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 73.987948][ T40] audit: type=1326 audit(1746981440.312:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 73.996754][ T40] audit: type=1326 audit(1746981440.312:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 74.007323][ T40] audit: type=1326 audit(1746981440.312:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.207" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 74.015989][ T40] audit: type=1326 audit(1746981440.312:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 74.023926][ T40] audit: type=1326 audit(1746981440.312:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.207" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 74.034462][ T40] audit: type=1326 audit(1746981440.312:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.2.207" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 74.122636][ T6783] xt_CT: No such helper "pptp" [ 74.164503][ T6786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.541475][ T6798] binder: 6794:6798 ioctl c00c620f 80000040 returned -22 [ 74.606689][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 75.186897][ T6815] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 75.268952][ T6816] bond0: (slave wlan1): Releasing backup interface [ 75.288843][ T6816] netlink: 'syz.2.218': attribute type 10 has an invalid length. [ 75.293975][ T6816] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 75.303484][ T6816] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 75.350375][ T5952] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.350437][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.360044][ T5952] Bluetooth: hci3: command 0x0405 tx timeout [ 75.361635][ T5944] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.442120][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 75.858791][ T6834] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 76.087625][ T6848] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 76.263659][ T6853] bond0: (slave wlan1): Releasing backup interface [ 76.523366][ T6853] netlink: 'syz.2.227': attribute type 10 has an invalid length. [ 76.684548][ T6853] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 76.732968][ T6853] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 76.832469][ T6868] IPv6: NLM_F_REPLACE set, but no existing node found! [ 76.873924][ T6870] x_tables: duplicate underflow at hook 3 [ 76.887904][ T6872] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 76.894372][ T6872] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 76.897164][ T6872] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 76.988505][ T6878] netlink: 68 bytes leftover after parsing attributes in process `syz.0.240'. [ 76.992550][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.240'. [ 77.798659][ T6899] 9pnet_fd: Insufficient options for proto=fd [ 77.846681][ T6901] ceph: Path missing in source [ 77.858334][ T6902] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 77.925742][ T6905] netlink: 'syz.2.246': attribute type 10 has an invalid length. [ 77.928152][ T6905] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 77.933009][ T6905] bond0: entered promiscuous mode [ 77.934582][ T6905] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 78.455289][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 78.588145][ T6936] 9pnet_fd: Insufficient options for proto=fd [ 78.978465][ T6953] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 79.043382][ T6954] netlink: 'syz.0.262': attribute type 10 has an invalid length. [ 79.045819][ T6954] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 79.119551][ T6964] 9pnet_fd: Insufficient options for proto=fd [ 79.394860][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.268'. [ 79.397532][ T6970] netlink: 'syz.3.268': attribute type 5 has an invalid length. [ 79.400183][ T6970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.268'. [ 79.405670][ T6970] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 79.408498][ T6970] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 79.411439][ T6970] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 79.413976][ T6970] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 79.416561][ T6970] geneve2: entered promiscuous mode [ 79.418118][ T6970] geneve2: entered allmulticast mode [ 79.734210][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 79.734221][ T40] audit: type=1326 audit(1746981446.082:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6991 comm="syz.2.276" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 80.520320][ T7005] syz.1.281 (7005) used greatest stack depth: 19288 bytes left [ 80.650254][ T7020] sp0: Synchronizing with TNC [ 80.683819][ T7023] [U] è [ 80.710282][ T7030] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 80.771564][ T7032] netlink: 'syz.0.286': attribute type 10 has an invalid length. [ 80.774141][ T7032] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 81.071388][ T40] audit: type=1326 audit(1746981447.422:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7043 comm="syz.2.291" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 81.123872][ T1328] cfg80211: failed to load regulatory.db [ 81.824162][ T7066] batadv_slave_1: entered promiscuous mode [ 81.842528][ T7066] batadv_slave_1: left promiscuous mode [ 81.872271][ T7076] sctp: [Deprecated]: syz.1.302 (pid 7076) Use of int in max_burst socket option deprecated. [ 81.872271][ T7076] Use struct sctp_assoc_value instead [ 82.050093][ T7085] xt_CT: You must specify a L4 protocol and not use inversions on it [ 82.394855][ T7089] bond0: (slave wlan1): Releasing backup interface [ 82.411847][ T7093] netlink: 'syz.1.304': attribute type 10 has an invalid length. [ 82.435551][ T7093] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 82.439338][ T7087] netlink: 'syz.3.303': attribute type 4 has an invalid length. [ 82.456310][ T7087] netlink: 'syz.3.303': attribute type 4 has an invalid length. [ 82.924200][ T7102] input: syz0 as /devices/virtual/input/input6 [ 83.114654][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 83.155939][ T40] audit: type=1326 audit(1746981449.502:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7114 comm="syz.0.313" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 83.399368][ T7121] netlink: 'syz.3.315': attribute type 10 has an invalid length. [ 83.547213][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 83.960151][ T7132] bond0: (slave wlan1): Releasing backup interface [ 83.977609][ T7132] netlink: 'syz.1.316': attribute type 10 has an invalid length. [ 83.990690][ T7132] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 84.143674][ T7140] 9pnet_fd: Insufficient options for proto=fd [ 84.162120][ T7138] (unnamed net_device) (uninitialized): peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 84.469223][ T40] audit: type=1326 audit(1746981450.812:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7154 comm="syz.3.325" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 84.559924][ T7157] lo: entered promiscuous mode [ 84.563256][ T7157] tunl0: entered promiscuous mode [ 84.566211][ T7157] gre0: entered promiscuous mode [ 84.569223][ T7157] gretap0: entered promiscuous mode [ 84.571236][ T7157] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 85.774349][ T7194] bond0: (slave wlan1): Releasing backup interface [ 85.794515][ T7194] netlink: 'syz.1.335': attribute type 10 has an invalid length. [ 85.799256][ T7194] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 85.893668][ T7198] netlink: 'syz.0.337': attribute type 1 has an invalid length. [ 85.896402][ T7198] netlink: 224 bytes leftover after parsing attributes in process `syz.0.337'. [ 85.903969][ T40] audit: type=1326 audit(1746981452.252:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7199 comm="syz.3.338" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 86.194731][ T7213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'. [ 86.197827][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 86.200295][ T7214] program syz.2.342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.710544][ T5952] Bluetooth: hci3: command 0x0405 tx timeout [ 87.073487][ T7263] netlink: 'syz.1.355': attribute type 10 has an invalid length. [ 87.084208][ T7261] bond0: (slave wlan1): Releasing backup interface [ 87.104069][ T7263] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 87.629063][ T40] audit: type=1326 audit(1746981453.972:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.3.361" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 88.139886][ T5998] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 88.259723][ T5997] libceph: connect (1)[c::]:6789 error -101 [ 88.262327][ T5997] libceph: mon0 (1)[c::]:6789 connect error [ 88.289906][ T5998] usb 6-1: Using ep0 maxpacket: 16 [ 88.293035][ T5998] usb 6-1: config 0 has no interfaces? [ 88.295965][ T5998] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.298865][ T5998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 88.301551][ T5998] usb 6-1: SerialNumber: syz [ 88.303440][ T7278] ceph: No mds server is up or the cluster is laggy [ 88.309056][ T5998] usb 6-1: config 0 descriptor?? [ 88.515799][ T5998] usb 6-1: USB disconnect, device number 3 [ 89.033264][ T7302] bond0: (slave wlan1): Releasing backup interface [ 89.068229][ T7302] netlink: 'syz.3.370': attribute type 10 has an invalid length. [ 89.075971][ T7302] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 89.115162][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 89.118853][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 89.185136][ T7309] bond0: (slave wlan1): Releasing backup interface [ 89.189199][ T7309] bond0: Destroying bond [ 89.243435][ T7309] bond0 (unregistering): Released all slaves [ 89.357957][ T40] audit: type=1326 audit(1746981455.702:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.1.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 89.378119][ T40] audit: type=1326 audit(1746981455.702:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.1.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 89.396615][ T40] audit: type=1326 audit(1746981455.702:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.1.373" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 89.404541][ T40] audit: type=1326 audit(1746981455.702:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.1.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 89.422091][ T40] audit: type=1326 audit(1746981455.702:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.1.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 89.432635][ T40] audit: type=1326 audit(1746981455.712:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.1.373" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 89.442855][ T40] audit: type=1326 audit(1746981455.792:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.1.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 89.449483][ T40] audit: type=1326 audit(1746981455.792:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7311 comm="syz.1.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 90.105943][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 90.109176][ T7341] random: crng reseeded on system resumption [ 90.112553][ T7344] netlink: 'syz.1.383': attribute type 10 has an invalid length. [ 90.474671][ T7357] bond0: (slave wlan1): Releasing backup interface [ 90.480494][ T7357] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 90.534622][ T7357] netlink: 'syz.2.386': attribute type 10 has an invalid length. [ 90.539341][ T7357] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 90.545587][ T7357] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 90.954777][ T7387] kvm: user requested TSC rate below hardware speed [ 91.615351][ T7414] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 91.657163][ T7421] netlink: 32 bytes leftover after parsing attributes in process `syz.3.406'. [ 91.754049][ T7422] bond0: (slave wlan1): Releasing backup interface [ 91.761972][ T7422] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 91.762817][ T7425] netlink: 'syz.2.405': attribute type 10 has an invalid length. [ 91.767452][ T7425] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 91.781464][ T7425] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 91.784344][ T7425] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 92.158384][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 92.158395][ T40] audit: type=1326 audit(1746981458.502:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz.1.415" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 92.470083][ T7459] syzkaller1: entered promiscuous mode [ 92.471902][ T7459] syzkaller1: entered allmulticast mode [ 92.921011][ T7472] þ: renamed from vcan0 (while UP) [ 93.334725][ T7491] netlink: 'syz.1.427': attribute type 10 has an invalid length. [ 93.616812][ T7508] Bluetooth: MGMT ver 1.23 [ 93.619973][ T7504] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 93.727812][ T5997] libceph: connect (1)[c::]:6789 error -101 [ 93.729981][ T5997] libceph: mon0 (1)[c::]:6789 connect error [ 93.756871][ T7516] ceph: No mds server is up or the cluster is laggy [ 93.763537][ T40] audit: type=1326 audit(1746981460.112:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.0.435" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 94.062009][ T7527] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 94.064291][ T7527] overlayfs: failed to set xattr on upper [ 94.066030][ T7527] overlayfs: ...falling back to redirect_dir=nofollow. [ 94.068143][ T7527] overlayfs: ...falling back to index=off. [ 94.070205][ T7527] overlayfs: ...falling back to uuid=null. [ 94.072081][ T7527] overlayfs: ...falling back to xino=off. [ 94.769392][ T7562] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 94.884913][ T7564] netlink: 'syz.0.446': attribute type 10 has an invalid length. [ 94.894235][ T7563] bond0: (slave wlan1): Releasing backup interface [ 95.166328][ T7563] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 95.171191][ T7564] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 95.176486][ T7564] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 95.181036][ T7564] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 95.670201][ T5944] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 95.749277][ T40] audit: type=1326 audit(1746981462.092:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.3.454" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 95.758402][ T7605] 8021q: VLANs not supported on bond0 [ 95.761788][ T7605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.908452][ T7615] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 96.025757][ T7617] netlink: 'syz.2.458': attribute type 10 has an invalid length. [ 96.032785][ T7616] bond0: (slave wlan1): Releasing backup interface [ 96.070132][ T7616] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 96.073702][ T7617] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 96.078235][ T7617] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 96.081091][ T7617] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 96.241586][ T7619] netlink: 44 bytes leftover after parsing attributes in process `syz.1.459'. [ 96.300251][ T7624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.460'. [ 96.308610][ T7624] vxcan3: entered promiscuous mode [ 96.381226][ T7628] netlink: 10 bytes leftover after parsing attributes in process `syz.1.462'. [ 96.518127][ T7633] random: crng reseeded on system resumption [ 96.798201][ T7644] netlink: 244 bytes leftover after parsing attributes in process `syz.0.468'. [ 96.837495][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'. [ 97.565523][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 97.612787][ T40] audit: type=1326 audit(1746981463.962:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.1.476" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 97.683684][ T7676] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 97.771646][ T7678] bond0: (slave wlan1): Releasing backup interface [ 97.774689][ T7678] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 97.792246][ T7678] netlink: 'syz.0.477': attribute type 10 has an invalid length. [ 97.794808][ T7678] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 97.799745][ T7678] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 97.802857][ T7678] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 98.106968][ T7692] netlink: zone id is out of range [ 98.108722][ T7692] netlink: zone id is out of range [ 98.110695][ T7692] netlink: zone id is out of range [ 98.112385][ T7692] netlink: zone id is out of range [ 98.114939][ T7692] netlink: zone id is out of range [ 98.116611][ T7692] netlink: zone id is out of range [ 98.118289][ T7692] netlink: zone id is out of range [ 98.121037][ T7692] netlink: zone id is out of range [ 98.122741][ T7692] netlink: zone id is out of range [ 98.125720][ T7692] netlink: 'syz.2.482': attribute type 1 has an invalid length. [ 98.247356][ T7701] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 98.252050][ T7701] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 98.292963][ T7705] fuse: Unknown parameter '000000000000000000000050x000000000000000b' [ 98.382261][ T7704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.394294][ T40] audit: type=1326 audit(1746981464.742:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7713 comm="syz.1.488" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 99.209533][ T7741] IPVS: length: 246 != 24 [ 99.337219][ T7751] 9pnet_fd: Insufficient options for proto=fd [ 99.370859][ T7753] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 99.464429][ T7757] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 99.468568][ T7755] bond0: (slave wlan1): Releasing backup interface [ 99.481105][ T7755] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 99.499522][ T7755] netlink: 'syz.2.499': attribute type 10 has an invalid length. [ 99.502010][ T7755] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 99.506909][ T7755] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 99.509854][ T7755] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 99.539724][ T40] audit: type=1326 audit(1746981465.882:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 99.548675][ T40] audit: type=1326 audit(1746981465.882:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 99.555362][ T40] audit: type=1326 audit(1746981465.892:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.497" exe="/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 99.562273][ T40] audit: type=1326 audit(1746981465.892:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 99.568835][ T40] audit: type=1326 audit(1746981465.892:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 99.575416][ T40] audit: type=1326 audit(1746981465.892:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.497" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 99.582065][ T40] audit: type=1326 audit(1746981465.892:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 99.588993][ T40] audit: type=1326 audit(1746981465.892:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.497" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 100.037945][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 100.040902][ T7765] netlink: 292 bytes leftover after parsing attributes in process `syz.0.503'. [ 100.153946][ T7765] wireguard0: entered promiscuous mode [ 100.159884][ T7765] wireguard0: entered allmulticast mode [ 100.192990][ T7768] netlink: 'syz.2.504': attribute type 11 has an invalid length. [ 100.452633][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 100.730345][ T5937] e1000 0000:00:06.0 eth0: Reset adapter [ 100.840237][ T5937] e1000 0000:00:06.0 eth0: Reset adapter [ 100.947796][ T7793] netlink: 'syz.1.512': attribute type 10 has an invalid length. [ 101.686959][ T7826] Cannot find del_set index 3 as target [ 101.690022][ T7826] netlink: 244 bytes leftover after parsing attributes in process `syz.1.518'. [ 102.960982][ T57] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 104.368077][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 104.368088][ T40] audit: type=1326 audit(1746981470.712:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7847 comm="syz.1.525" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 104.735422][ T7858] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 104.814120][ T7859] bond0: (slave wlan1): Releasing backup interface [ 104.828354][ T7859] netlink: 'syz.3.527': attribute type 10 has an invalid length. [ 104.833117][ T7859] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 104.850481][ T7859] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 104.974130][ T7861] xt_limit: Overflow, try lower: 330673899/4200216962 [ 105.386344][ T7888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.537'. [ 105.548954][ T7892] tipc: Started in network mode [ 105.552254][ T7892] tipc: Node identity 4, cluster identity 4711 [ 105.554853][ T7892] tipc: Node number set to 4 [ 105.934011][ T40] audit: type=1326 audit(1746981472.282:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7899 comm="syz.2.540" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 106.127721][ T7919] input: syz1 as /devices/virtual/input/input7 [ 106.174958][ T7924] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 106.266606][ T7925] bond0: (slave wlan1): Releasing backup interface [ 106.269175][ T7925] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 106.295077][ T7925] netlink: 'syz.0.546': attribute type 10 has an invalid length. [ 106.297620][ T7925] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 106.303555][ T7925] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 106.306265][ T7925] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 106.892262][ T7940] netlink: 'syz.1.552': attribute type 32 has an invalid length. [ 106.894728][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 106.897465][ T7940] netlink: 'syz.1.552': attribute type 32 has an invalid length. [ 107.042114][ T7942] netlink: 'syz.2.551': attribute type 10 has an invalid length. [ 107.051616][ T7942] veth0_vlan: left promiscuous mode [ 107.054564][ T7942] veth0_vlan: entered promiscuous mode [ 107.059285][ T7942] team0: Device veth0_vlan failed to register rx_handler [ 107.112836][ T7950] dlm: plock device version mismatch: kernel (1.2.0), user (2.0.0) [ 107.917633][ T40] audit: type=1326 audit(1746981474.262:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.0.559" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 108.575764][ T7980] bond0: (slave wlan1): Releasing backup interface [ 108.600130][ T7980] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 108.620123][ T7980] netlink: 'syz.2.561': attribute type 10 has an invalid length. [ 108.623621][ T7980] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 108.626427][ T7980] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 108.937634][ T7992] syz.1.566 uses obsolete (PF_INET,SOCK_PACKET) [ 108.946319][ T7992] net_ratelimit: 3 callbacks suppressed [ 108.946329][ T7992] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 109.202644][ T40] audit: type=1326 audit(1746981475.542:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.3.570" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 109.265052][ T40] audit: type=1804 audit(1746981475.612:97): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.568" name="/newroot/135/file0" dev="tmpfs" ino=735 res=1 errno=0 [ 109.278231][ T8003] ref_ctr_offset mismatch. inode: 0x2df offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xc [ 110.190387][ T8037] bond0: (slave wlan1): Releasing backup interface [ 110.193327][ T8037] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 110.213838][ T8037] netlink: 'syz.0.579': attribute type 10 has an invalid length. [ 110.219142][ T8037] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 110.222614][ T8037] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.901851][ T8055] bridge_slave_0: entered promiscuous mode [ 110.929172][ T8057] mkiss: ax0: crc mode is auto. [ 110.937656][ T40] audit: type=1326 audit(1746981477.282:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.3.587" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 111.002508][ T8063] ======================================================= [ 111.002508][ T8063] WARNING: The mand mount option has been deprecated and [ 111.002508][ T8063] and is ignored by this kernel. Remove the mand [ 111.002508][ T8063] option from the mount to silence this warning. [ 111.002508][ T8063] ======================================================= [ 111.157758][ T8069] program syz.0.589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.449888][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.620714][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 111.624773][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.627630][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.631357][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.634838][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.637666][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.641188][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.644028][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.646844][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.650329][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.653139][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.656032][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.659499][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.663412][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.666293][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.669728][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.672610][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.675456][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.678950][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.681891][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.684959][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.688484][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.691560][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 111.694485][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 111.697912][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.702477][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 111.705391][ T10] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 111.708066][ T10] usb 5-1: Product: syz [ 111.709446][ T10] usb 5-1: Manufacturer: syz [ 111.712026][ T10] usb 5-1: SerialNumber: syz [ 111.715935][ T10] usb 5-1: config 0 descriptor?? [ 111.724885][ T10] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 111.923060][ T5937] usb 5-1: USB disconnect, device number 3 [ 111.931880][ T5937] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 112.030380][ T8081] Debayer A: ================= START STATUS ================= [ 112.032871][ T8081] Debayer A: Debayer Mean Window Size: 3 [ 112.035468][ T8081] Debayer A: ================== END STATUS ================== [ 112.217312][ T8094] bond0: (slave wlan1): Releasing backup interface [ 112.284141][ T34] libceph: connect (1)[c::]:6789 error -101 [ 112.286143][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 112.337362][ T8086] netlink: 'syz.3.596': attribute type 10 has an invalid length. [ 112.350232][ T8086] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 112.541770][ T34] libceph: connect (1)[c::]:6789 error -101 [ 112.544213][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 112.560976][ T5952] Bluetooth: hci3: command 0x0405 tx timeout [ 112.698532][ T40] audit: type=1326 audit(1746981479.042:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8102 comm="syz.0.599" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 112.983083][ T8096] ceph: No mds server is up or the cluster is laggy [ 113.319858][ T8121] 9pnet_fd: Insufficient options for proto=fd [ 113.432446][ T8121] [U]  [ 113.433518][ T8121] [U] K{‘ [ 113.434504][ T8121] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 113.436643][ T8121] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 113.442409][ T8121] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 113.445779][ T8121] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 113.457088][ T8121] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 113.464619][ T8121] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 113.468157][ T8121] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 113.471890][ T8121] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 113.499844][ T8121] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 113.502525][ T8121] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 113.506797][ T8121] [U] 22½“Æ©Ðû©x?0;3u± [ 113.508180][ T8121] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 113.515992][ T8121] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 113.519017][ T8121] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 113.521851][ T8121] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 113.523886][ T8121] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 113.527919][ T8121] [U] ¹ ec [ 113.528978][ T8121] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÚVžÙÿÆë,îlâ,Õ [ 113.536218][ T8120] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 113.684425][ T8130] netlink: 68 bytes leftover after parsing attributes in process `syz.3.607'. [ 113.803045][ T8136] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 113.805280][ T8136] overlayfs: failed to set xattr on upper [ 113.807146][ T8136] overlayfs: ...falling back to redirect_dir=nofollow. [ 113.809328][ T8136] overlayfs: ...falling back to index=off. [ 113.811314][ T8136] overlayfs: ...falling back to uuid=null. [ 113.820145][ T8136] evm: overlay not supported [ 114.601658][ T8150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.613'. [ 114.658814][ T40] audit: type=1326 audit(1746981481.002:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8154 comm="syz.0.614" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 115.122169][ T8172] netlink: 84 bytes leftover after parsing attributes in process `syz.2.620'. [ 115.525673][ T8179] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 115.597941][ T8180] bond0: (slave wlan1): Releasing backup interface [ 115.600827][ T8180] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 115.632672][ T8180] netlink: 'syz.0.621': attribute type 10 has an invalid length. [ 115.635219][ T8180] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 115.638835][ T8180] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 115.641584][ T8180] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.070260][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.626'. [ 116.696917][ T8204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.629'. [ 117.030327][ T8214] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 117.062437][ T8211] ptrace attach of ""[8212] was attempted by "/syz-executor exec"[8211] [ 117.100994][ T8215] bond0: (slave wlan1): Releasing backup interface [ 117.103741][ T8215] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 117.113799][ T8215] netlink: 'syz.0.632': attribute type 10 has an invalid length. [ 117.116541][ T8215] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 117.120772][ T8215] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 117.124043][ T8215] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 118.048114][ T8226] veth0_vlan: entered allmulticast mode [ 118.331847][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'. [ 118.430514][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.637'. [ 118.631720][ T8244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.639'. [ 118.765802][ T8247] netlink: 80 bytes leftover after parsing attributes in process `syz.2.641'. [ 118.771054][ T8247] netlink: 80 bytes leftover after parsing attributes in process `syz.2.641'. [ 118.806063][ T8250] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 118.878876][ T8251] bond0: (slave wlan1): Releasing backup interface [ 118.882251][ T8251] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 118.889723][ T8251] netlink: 'syz.2.642': attribute type 10 has an invalid length. [ 118.893044][ T8251] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 118.896902][ T8251] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 118.901243][ T8251] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 119.044003][ T1135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.132345][ T1135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.230473][ T5952] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.233577][ T5952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.242012][ T5952] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.242075][ T1135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.248388][ T5952] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.252236][ T5952] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.314354][ T1135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.400474][ T8264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.647'. [ 119.405795][ T8264] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 119.422355][ T8257] chnl_net:caif_netlink_parms(): no params data found [ 119.452305][ T8266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.646'. [ 119.592530][ T8257] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.595295][ T8257] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.597719][ T8257] bridge_slave_0: entered allmulticast mode [ 119.600824][ T8257] bridge_slave_0: entered promiscuous mode [ 119.603965][ T8257] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.606242][ T8257] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.608529][ T8257] bridge_slave_1: entered allmulticast mode [ 119.612033][ T8257] bridge_slave_1: entered promiscuous mode [ 120.114279][ T1135] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 120.126357][ T1135] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 120.156857][ T1135] bond0 (unregistering): Released all slaves [ 120.167273][ T8257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.173351][ T8257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.356735][ T8257] team0: Port device team_slave_0 added [ 120.363896][ T8257] team0: Port device team_slave_1 added [ 120.551408][ T8257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.553589][ T8257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.571434][ T8257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.580463][ T8257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.582870][ T8257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.592565][ T8257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.673571][ T8257] hsr_slave_0: entered promiscuous mode [ 120.675763][ T8257] hsr_slave_1: entered promiscuous mode [ 120.677737][ T8257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.683635][ T8257] Cannot create hsr debugfs directory [ 120.715108][ T1135] hsr_slave_0: left promiscuous mode [ 120.717379][ T1135] hsr_slave_1: left promiscuous mode [ 120.737823][ T1135] veth1_macvtap: left promiscuous mode [ 120.741378][ T1135] veth0_macvtap: left promiscuous mode [ 120.743261][ T1135] veth1_vlan: left promiscuous mode [ 120.745080][ T1135] veth0_vlan: left promiscuous mode [ 120.793048][ T8285] overlay: filesystem on ./bus not supported as upperdir [ 121.131770][ T8295] 9pnet_virtio: no channels available for device ./file0/file0 [ 121.194391][ T8305] libceph: resolve '0.' (ret=-3): failed [ 121.273605][ T5952] Bluetooth: hci2: command tx timeout [ 121.364198][ T8311] fuse: Unknown parameter '' [ 121.578435][ T8314] netlink: 56 bytes leftover after parsing attributes in process `syz.3.659'. [ 122.729171][ T8337] random: crng reseeded on system resumption [ 122.760590][ T8337] Restarting kernel threads ... done. [ 122.845486][ T8257] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.851165][ T8257] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.861688][ T8257] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.866418][ T8257] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.903169][ T8257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.913035][ T8257] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.917898][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.920180][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.936551][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.939612][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.151510][ T8257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.207338][ T8257] veth0_vlan: entered promiscuous mode [ 123.213897][ T8257] veth1_vlan: entered promiscuous mode [ 123.242097][ T8257] veth0_macvtap: entered promiscuous mode [ 123.246031][ T8257] veth1_macvtap: entered promiscuous mode [ 123.255768][ T8257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.264764][ T8257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.269489][ T8257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.272669][ T8257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.275422][ T8257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.278183][ T8257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.326745][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.329251][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.345553][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.350041][ T5952] Bluetooth: hci2: command tx timeout [ 123.358281][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.443541][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 124.214571][ T8375] fuse: Bad value for 'user_id' [ 124.216204][ T8375] fuse: Bad value for 'user_id' [ 125.432784][ T5952] Bluetooth: hci2: command tx timeout [ 125.743414][ T8406] syz_tun: entered allmulticast mode [ 125.774624][ T8403] syz_tun: left allmulticast mode [ 125.933391][ T8429] 9pnet_fd: Insufficient options for proto=fd [ 125.953205][ T8429] can: request_module (can-proto-3) failed. [ 125.955869][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 126.008611][ T8431] netlink: 32 bytes leftover after parsing attributes in process `syz.0.689'. [ 126.012403][ T8431] tmpfs: Bad value for 'mpol' [ 126.343385][ T8441] netlink: 'syz.1.691': attribute type 10 has an invalid length. [ 126.914738][ T8446] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 127.009158][ T8451] bridge_slave_0: left allmulticast mode [ 127.011125][ T8451] bridge_slave_0: left promiscuous mode [ 127.014125][ T8451] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.032229][ T8451] bridge_slave_1: left allmulticast mode [ 127.037215][ T8452] block device autoloading is deprecated and will be removed. [ 127.037541][ T8451] bridge_slave_1: left promiscuous mode [ 127.043399][ T8451] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.056124][ T8454] netlink: 'syz.0.692': attribute type 10 has an invalid length. [ 127.058985][ T8451] bond0: (slave bond_slave_0): Releasing backup interface [ 127.075005][ T8451] bond0: (slave bond_slave_1): Releasing backup interface [ 127.109165][ T8451] team0: Port device team_slave_0 removed [ 127.135216][ T8451] team0: Port device team_slave_1 removed [ 127.138563][ T8451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.142174][ T8451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.151454][ T8451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.153983][ T8451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.172036][ T8454] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 127.182947][ T8454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.193714][ T8454] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.348009][ T8472] netlink: 'syz.2.701': attribute type 4 has an invalid length. [ 127.352032][ T5952] Bluetooth: hci0: unexpected subevent 0x06 length: 11 > 10 [ 127.476233][ T8485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.700'. [ 127.510016][ T5952] Bluetooth: hci2: command tx timeout [ 127.623514][ T8496] bond0: (slave wlan1): Releasing backup interface [ 127.680308][ T8500] syz.2.706: attempt to access beyond end of device [ 127.680308][ T8500] loop2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 127.687422][ T8500] hfsplus: unable to find HFS+ superblock [ 127.688492][ T8497] netlink: 'syz.1.703': attribute type 10 has an invalid length. [ 128.054454][ T40] audit: type=1800 audit(1746981494.402:101): pid=8509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.708" name="cgroup.controllers" dev="tmpfs" ino=66 res=0 errno=0 [ 128.244219][ T8513] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 128.323999][ T8515] overlay: filesystem on ./file0 not supported [ 128.353598][ T8516] bond0: (slave wlan1): Releasing backup interface [ 128.471514][ T8516] netlink: 'syz.0.709': attribute type 10 has an invalid length. [ 128.474197][ T8516] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 128.505810][ T8516] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 129.182566][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.716'. [ 129.355050][ T8550] netlink: 'syz.1.718': attribute type 10 has an invalid length. [ 129.705981][ T8555] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.720'. [ 129.708973][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'. [ 129.811819][ T8558] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 129.978814][ T8557] netlink: 'syz.3.721': attribute type 10 has an invalid length. [ 129.981255][ T8557] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 129.984923][ T8557] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 130.520538][ T8561] netlink: 'syz.1.722': attribute type 10 has an invalid length. [ 130.590430][ T8572] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 130.793150][ T8577] bond0: (slave wlan1): Releasing backup interface [ 130.801729][ T8577] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 130.876646][ T8577] netlink: 'syz.2.724': attribute type 10 has an invalid length. [ 130.879205][ T8577] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 130.884001][ T8577] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 130.886411][ T8577] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 131.491711][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.728'. [ 132.002639][ T8596] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 132.088243][ T8597] bond0: (slave wlan1): Releasing backup interface [ 132.104816][ T8597] netlink: 'syz.3.730': attribute type 10 has an invalid length. [ 132.107685][ T8597] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 132.116758][ T8597] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 132.311718][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.313753][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.006765][ T40] audit: type=1326 audit(1746981499.352:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8615 comm="syz.2.735" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 133.078089][ T8619] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 133.086900][ T40] audit: type=1326 audit(1746981499.432:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8620 comm="syz.0.737" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x0 [ 133.159198][ T8622] bond0: (slave wlan1): Releasing backup interface [ 133.195384][ T8622] netlink: 'syz.3.736': attribute type 10 has an invalid length. [ 133.198405][ T8622] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 133.205790][ T8622] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 133.384908][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'. [ 133.974737][ T8634] IPVS: length: 246 != 24 [ 134.083815][ T8639] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 134.196762][ T8642] bond0: (slave wlan1): Releasing backup interface [ 134.203369][ T8642] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 134.358158][ T8639] netlink: 'syz.2.743': attribute type 10 has an invalid length. [ 134.360885][ T8639] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 134.371304][ T8639] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 134.376380][ T8639] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 134.422248][ T8651] netlink: 'syz.1.744': attribute type 10 has an invalid length. [ 134.580838][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.747'. [ 134.788756][ T8668] loop4: detected capacity change from 0 to 524255232 [ 135.062365][ T8677] mmap: syz.0.753 (8677): VmData 37404672 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 135.105099][ T8680] netlink: 36 bytes leftover after parsing attributes in process `syz.0.754'. [ 135.519577][ T8689] netlink: 'syz.1.751': attribute type 10 has an invalid length. [ 135.949949][ T8685] syz.0.754 (8685) used greatest stack depth: 18536 bytes left [ 136.056040][ T8701] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 136.148016][ T8704] bond0: (slave wlan1): Releasing backup interface [ 136.224453][ T8704] netlink: 'syz.3.757': attribute type 10 has an invalid length. [ 136.227023][ T8704] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 136.235067][ T8704] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 136.473833][ T8705] netlink: 'syz.1.758': attribute type 10 has an invalid length. [ 136.602180][ T8711] syz.2.755 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 136.614338][ T8713] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 136.682449][ T8714] bond0: (slave wlan1): Releasing backup interface [ 136.691086][ T8714] netlink: 'syz.0.759': attribute type 10 has an invalid length. [ 136.693663][ T8714] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 136.697766][ T8714] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 136.949765][ T8721] 9pnet_fd: Insufficient options for proto=fd [ 137.868588][ T57] IPVS: starting estimator thread 0... [ 137.960133][ T8748] IPVS: using max 45 ests per chain, 108000 per kthread [ 138.070018][ T24] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 138.236751][ T24] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 138.240380][ T24] usb 7-1: config 0 has no interface number 0 [ 138.242894][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 138.257501][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 138.261728][ T24] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 138.265658][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 138.269318][ T24] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 138.279846][ T24] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 138.284160][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 138.287438][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.299178][ T24] usb 7-1: config 0 descriptor?? [ 138.302478][ T8744] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.304985][ T8744] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.311544][ T24] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 138.714082][ T5997] usb 7-1: USB disconnect, device number 2 [ 138.717416][ T5997] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 138.761575][ T8780] overlay: Unknown parameter '/' [ 139.762198][ T8813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'. [ 140.501777][ T40] audit: type=1326 audit(1746981506.852:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.3.791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 140.508302][ T40] audit: type=1326 audit(1746981506.852:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.3.791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 140.524245][ T40] audit: type=1326 audit(1746981506.852:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.3.791" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 140.531124][ T40] audit: type=1326 audit(1746981506.852:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.3.791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 140.537755][ T40] audit: type=1326 audit(1746981506.852:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.3.791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 140.544920][ T40] audit: type=1326 audit(1746981506.852:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.3.791" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 140.558840][ T40] audit: type=1326 audit(1746981506.852:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.3.791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 140.565463][ T40] audit: type=1326 audit(1746981506.852:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.3.791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 140.574232][ T40] audit: type=1326 audit(1746981506.852:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.3.791" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 140.582751][ T40] audit: type=1326 audit(1746981506.852:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.3.791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 140.611289][ T8834] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 140.702388][ T8844] bond0: (slave wlan1): Releasing backup interface [ 140.723998][ T8845] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 140.729160][ T8844] netlink: 'syz.0.793': attribute type 10 has an invalid length. [ 140.733645][ T8844] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 140.741464][ T8844] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 140.820059][ T8847] bond0: (slave wlan1): Releasing backup interface [ 140.866129][ T8847] netlink: 'syz.3.796': attribute type 10 has an invalid length. [ 140.870115][ T8847] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 140.889537][ T8847] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 141.821349][ T8879] wireguard0: entered promiscuous mode [ 141.823965][ T8879] wireguard0: entered allmulticast mode [ 142.259967][ T10] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 142.355183][ T8891] netlink: 'syz.1.808': attribute type 10 has an invalid length. [ 142.692398][ T8898] netlink: 'syz.3.809': attribute type 4 has an invalid length. [ 142.694829][ T8898] netlink: 152 bytes leftover after parsing attributes in process `syz.3.809'. [ 142.697651][ T8898] wlan1: mtu less than device minimum [ 142.706896][ T8898] syz.3.809: attempt to access beyond end of device [ 142.706896][ T8898] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 142.711494][ T8898] XFS (nbd3): SB validate failed with error -5. [ 142.720475][ T10] usb 7-1: Invalid ep0 maxpacket: 16 [ 142.754986][ T8907] 9pnet_fd: Insufficient options for proto=fd [ 142.848535][ T8910] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 142.860354][ T10] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 142.929313][ T8911] bond0: (slave wlan1): Releasing backup interface [ 142.958991][ T8911] netlink: 'syz.0.811': attribute type 10 has an invalid length. [ 142.961649][ T8911] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 142.968494][ T8911] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 143.010098][ T10] usb 7-1: Invalid ep0 maxpacket: 16 [ 143.012026][ T10] usb usb7-port1: attempt power cycle [ 143.349966][ T10] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 143.453226][ T10] usb 7-1: Invalid ep0 maxpacket: 16 [ 143.582284][ T10] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 143.600342][ T10] usb 7-1: Invalid ep0 maxpacket: 16 [ 143.602994][ T10] usb usb7-port1: unable to enumerate USB device [ 144.550021][ T10] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 144.553443][ T5349] udevd[5349]: worker [8779] terminated by signal 33 (Unknown signal 33) [ 144.556114][ T5349] udevd[5349]: worker [8779] failed while handling '/devices/platform/dummy_udc.1/udc/dummy_udc.1' [ 144.632418][ T8959] program syz.0.826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.711415][ T10] usb 7-1: Invalid ep0 maxpacket: 16 [ 144.769856][ T5977] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 144.839917][ T10] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 144.931220][ T5977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.934657][ T5977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.937593][ T5977] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.944762][ T5977] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.947697][ T5977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.952527][ T5977] usb 6-1: config 0 descriptor?? [ 144.964842][ T5349] udevd[5349]: worker [8745] terminated by signal 33 (Unknown signal 33) [ 144.968443][ T5349] udevd[5349]: worker [8745] failed while handling '/devices/platform/dummy_hcd.1/usb6/6-1' [ 144.999973][ T10] usb 7-1: Invalid ep0 maxpacket: 16 [ 145.002580][ T10] usb usb7-port1: attempt power cycle [ 145.429972][ T10] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 145.463767][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.466632][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 145.469132][ T10] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 145.471782][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.475390][ T10] usb 7-1: config 0 descriptor?? [ 145.490234][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 145.492379][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 145.497142][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 145.500408][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 145.502538][ T10] usb 7-1: media controller created [ 145.504998][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.512348][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 145.514165][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 145.520873][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input9 [ 145.529102][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 145.536698][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 145.543403][ T8948] usb 7-1: USB disconnect, device number 9 [ 145.567227][ T8948] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 145.582567][ T5977] usbhid 6-1:0.0: can't add hid device: -71 [ 145.590098][ T5977] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 145.602796][ T5977] usb 6-1: USB disconnect, device number 4 [ 145.724759][ T9006] FAULT_INJECTION: forcing a failure. [ 145.724759][ T9006] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 145.729358][ T9006] CPU: 0 UID: 0 PID: 9006 Comm: syz.0.835 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 145.729378][ T9006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.729388][ T9006] Call Trace: [ 145.729393][ T9006] [ 145.729399][ T9006] dump_stack_lvl+0x16c/0x1f0 [ 145.729423][ T9006] should_fail_ex+0x512/0x640 [ 145.729453][ T9006] _copy_from_user+0x2e/0xd0 [ 145.729476][ T9006] get_compat_msghdr+0xa7/0x170 [ 145.729494][ T9006] ? __pfx_get_compat_msghdr+0x10/0x10 [ 145.729509][ T9006] ? __pfx__kstrtoull+0x10/0x10 [ 145.729528][ T9006] ___sys_sendmsg+0x1ae/0x1d0 [ 145.729547][ T9006] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.729575][ T9006] ? find_held_lock+0x2b/0x80 [ 145.729598][ T9006] __sys_sendmmsg+0x2f9/0x420 [ 145.729617][ T9006] ? __pfx___sys_sendmmsg+0x10/0x10 [ 145.729641][ T9006] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 145.729672][ T9006] ? fput+0x70/0xf0 [ 145.729685][ T9006] ? ksys_write+0x1b9/0x240 [ 145.729698][ T9006] ? __pfx_ksys_write+0x10/0x10 [ 145.729716][ T9006] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 145.729733][ T9006] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 145.729754][ T9006] __do_fast_syscall_32+0x73/0x120 [ 145.729786][ T9006] do_fast_syscall_32+0x32/0x80 [ 145.729808][ T9006] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 145.729827][ T9006] RIP: 0023:0xf7f11579 [ 145.729838][ T9006] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 145.729851][ T9006] RSP: 002b:00000000f501555c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 145.729862][ T9006] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f40 [ 145.729872][ T9006] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.729880][ T9006] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.729888][ T9006] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 145.729897][ T9006] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.729916][ T9006] [ 146.132964][ T9016] netlink: 'syz.1.838': attribute type 2 has an invalid length. [ 146.159858][ T9013] netlink: 44 bytes leftover after parsing attributes in process `syz.0.837'. [ 146.319720][ T9023] netlink: 48 bytes leftover after parsing attributes in process `syz.2.840'. [ 146.626734][ T9034] netlink: 148 bytes leftover after parsing attributes in process `syz.2.842'. [ 146.936292][ T9040] 9pnet_fd: Insufficient options for proto=fd [ 147.429353][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 147.429364][ T40] audit: type=1326 audit(1746981513.772:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.0.848" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x0 [ 148.309125][ T9063] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 148.453443][ T9068] bond0: (slave wlan1): Releasing backup interface [ 148.470009][ T9068] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 148.549684][ T9068] netlink: 'syz.2.851': attribute type 10 has an invalid length. [ 148.573701][ T9068] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 148.583250][ T9068] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 148.589118][ T9068] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 149.319961][ T9094] netlink: 'syz.1.855': attribute type 10 has an invalid length. [ 149.609714][ T9100] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 149.742409][ T40] audit: type=1326 audit(1746981516.092:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9108 comm="syz.2.860" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x0 [ 150.040361][ T9119] fuse: Unknown parameter 'gd' [ 150.044418][ T9119] netlink: 'syz.0.864': attribute type 1 has an invalid length. [ 150.061522][ T9119] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.064180][ T9119] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.066822][ T9119] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.069462][ T9119] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 150.073900][ T9119] bond1: (slave geneve2): making interface the new active one [ 150.076792][ T9119] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 150.235400][ T9124] input: syz0 as /devices/virtual/input/input10 [ 150.326079][ T9127] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 150.411711][ T9128] bond0: (slave wlan1): Releasing backup interface [ 150.415720][ T9128] bond1: (slave geneve2): Releasing active interface [ 150.419320][ T9128] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 150.423510][ T9128] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 150.426426][ T9128] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 150.429270][ T9128] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 150.493905][ T9126] bond0: entered promiscuous mode [ 150.948679][ T9137] FAULT_INJECTION: forcing a failure. [ 150.948679][ T9137] name failslab, interval 1, probability 0, space 0, times 0 [ 150.953998][ T9137] CPU: 3 UID: 0 PID: 9137 Comm: syz.1.870 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 150.954015][ T9137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.954021][ T9137] Call Trace: [ 150.954025][ T9137] [ 150.954029][ T9137] dump_stack_lvl+0x16c/0x1f0 [ 150.954047][ T9137] should_fail_ex+0x512/0x640 [ 150.954061][ T9137] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 150.954072][ T9137] should_failslab+0xc2/0x120 [ 150.954084][ T9137] __kmalloc_cache_noprof+0x6a/0x3e0 [ 150.954094][ T9137] ? __pfx_ip_dst_mtu_maybe_forward.constprop.0+0x10/0x10 [ 150.954109][ T9137] ? ip_setup_cork+0x6dc/0xae0 [ 150.954122][ T9137] ip_setup_cork+0x6dc/0xae0 [ 150.954135][ T9137] ip_append_data+0x163/0x1a0 [ 150.954146][ T9137] ? __pfx_raw_getfrag+0x10/0x10 [ 150.954161][ T9137] raw_sendmsg+0xeed/0x38b0 [ 150.954179][ T9137] ? aa_label_sk_perm+0xbd/0x5a0 [ 150.954191][ T9137] ? __pfx_raw_sendmsg+0x10/0x10 [ 150.954205][ T9137] ? __pfx___might_resched+0x10/0x10 [ 150.954225][ T9137] ? __pfx___might_resched+0x10/0x10 [ 150.954234][ T9137] ? __lock_acquire+0xaa4/0x1ba0 [ 150.954246][ T9137] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 150.954261][ T9137] ? aa_sk_perm+0x2f4/0xb10 [ 150.954275][ T9137] ? __import_iovec+0x1c8/0x660 [ 150.954289][ T9137] ? __pfx_raw_sendmsg+0x10/0x10 [ 150.954304][ T9137] inet_sendmsg+0x119/0x140 [ 150.954319][ T9137] ____sys_sendmsg+0x973/0xc70 [ 150.954334][ T9137] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.954347][ T9137] ? get_compat_msghdr+0x11a/0x170 [ 150.954360][ T9137] ? __pfx__kstrtoull+0x10/0x10 [ 150.954374][ T9137] ___sys_sendmsg+0x134/0x1d0 [ 150.954386][ T9137] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.954403][ T9137] ? find_held_lock+0x2b/0x80 [ 150.954420][ T9137] __sys_sendmmsg+0x2f9/0x420 [ 150.954433][ T9137] ? __pfx___sys_sendmmsg+0x10/0x10 [ 150.954448][ T9137] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 150.954468][ T9137] ? fput+0x70/0xf0 [ 150.954479][ T9137] ? ksys_write+0x1b9/0x240 [ 150.954488][ T9137] ? __pfx_ksys_write+0x10/0x10 [ 150.954499][ T9137] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 150.954510][ T9137] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 150.954525][ T9137] __do_fast_syscall_32+0x73/0x120 [ 150.954540][ T9137] do_fast_syscall_32+0x32/0x80 [ 150.954554][ T9137] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.954566][ T9137] RIP: 0023:0xf70de579 [ 150.954575][ T9137] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 150.954584][ T9137] RSP: 002b:00000000f50ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 150.954594][ T9137] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f40 [ 150.954600][ T9137] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.954605][ T9137] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.954610][ T9137] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 150.954616][ T9137] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.954634][ T9137] [ 151.388338][ T9147] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.648597][ T40] audit: type=1326 audit(1746981517.992:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.0.876" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x0 [ 152.131927][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.877'. [ 152.148578][ T9162] hub 6-0:1.0: USB hub found [ 152.155357][ T9162] hub 6-0:1.0: 1 port detected [ 152.373681][ T9166] 9pnet_fd: Insufficient options for proto=fd [ 152.557729][ T9174] FAULT_INJECTION: forcing a failure. [ 152.557729][ T9174] name failslab, interval 1, probability 0, space 0, times 0 [ 152.562630][ T9174] CPU: 2 UID: 0 PID: 9174 Comm: syz.0.880 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 152.562646][ T9174] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 152.562652][ T9174] Call Trace: [ 152.562656][ T9174] [ 152.562660][ T9174] dump_stack_lvl+0x16c/0x1f0 [ 152.562678][ T9174] should_fail_ex+0x512/0x640 [ 152.562692][ T9174] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 152.562705][ T9174] should_failslab+0xc2/0x120 [ 152.562717][ T9174] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 152.562728][ T9174] ? __alloc_skb+0x2b2/0x380 [ 152.562740][ T9174] __alloc_skb+0x2b2/0x380 [ 152.562750][ T9174] ? __pfx___alloc_skb+0x10/0x10 [ 152.562759][ T9174] ? __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 152.562770][ T9174] ? __do_fast_syscall_32+0x73/0x120 [ 152.562785][ T9174] ? do_fast_syscall_32+0x32/0x80 [ 152.562798][ T9174] ? entry_SYSENTER_compat+0x20/0x2d [ 152.562813][ T9174] __ip_append_data+0x3102/0x41e0 [ 152.562828][ T9174] ? __pfx_raw_getfrag+0x10/0x10 [ 152.562847][ T9174] ? __pfx___ip_append_data+0x10/0x10 [ 152.562860][ T9174] ? __asan_memcpy+0x3c/0x60 [ 152.562870][ T9174] ip_append_data+0x10f/0x1a0 [ 152.562883][ T9174] ? __pfx_raw_getfrag+0x10/0x10 [ 152.562898][ T9174] raw_sendmsg+0xeed/0x38b0 [ 152.562916][ T9174] ? aa_label_sk_perm+0xbd/0x5a0 [ 152.562928][ T9174] ? __pfx_raw_sendmsg+0x10/0x10 [ 152.562942][ T9174] ? __pfx___might_resched+0x10/0x10 [ 152.562962][ T9174] ? __pfx___might_resched+0x10/0x10 [ 152.562971][ T9174] ? __lock_acquire+0xaa4/0x1ba0 [ 152.562983][ T9174] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.562998][ T9174] ? aa_sk_perm+0x2f4/0xb10 [ 152.563013][ T9174] ? __import_iovec+0x1c8/0x660 [ 152.563027][ T9174] ? __pfx_raw_sendmsg+0x10/0x10 [ 152.563043][ T9174] inet_sendmsg+0x119/0x140 [ 152.563070][ T9174] ____sys_sendmsg+0x973/0xc70 [ 152.563086][ T9174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.563099][ T9174] ? get_compat_msghdr+0x11a/0x170 [ 152.563111][ T9174] ? __pfx__kstrtoull+0x10/0x10 [ 152.563125][ T9174] ___sys_sendmsg+0x134/0x1d0 [ 152.563137][ T9174] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.563154][ T9174] ? find_held_lock+0x2b/0x80 [ 152.563172][ T9174] __sys_sendmmsg+0x2f9/0x420 [ 152.563184][ T9174] ? __pfx___sys_sendmmsg+0x10/0x10 [ 152.563200][ T9174] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 152.563220][ T9174] ? fput+0x70/0xf0 [ 152.563232][ T9174] ? ksys_write+0x1b9/0x240 [ 152.563241][ T9174] ? __pfx_ksys_write+0x10/0x10 [ 152.563252][ T9174] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 152.563264][ T9174] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 152.563278][ T9174] __do_fast_syscall_32+0x73/0x120 [ 152.563292][ T9174] do_fast_syscall_32+0x32/0x80 [ 152.563306][ T9174] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.563318][ T9174] RIP: 0023:0xf7f11579 [ 152.563326][ T9174] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 152.563336][ T9174] RSP: 002b:00000000f501555c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 152.563345][ T9174] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f40 [ 152.563352][ T9174] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.563357][ T9174] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.563362][ T9174] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 152.563368][ T9174] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.563380][ T9174] [ 152.903637][ T9178] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.581723][ T9192] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 153.917635][ T9195] bond0: (slave wlan1): Releasing backup interface [ 153.952994][ T9195] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 154.016807][ T9202] 9pnet_fd: Insufficient options for proto=fd [ 154.259858][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 154.411829][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 154.523676][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.530261][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.533337][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.537842][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.540979][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.570965][ T10] usb 6-1: config 0 descriptor?? [ 154.833328][ T10] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 154.854715][ T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 155.117781][ T1328] usb 6-1: USB disconnect, device number 5 [ 155.230090][ T9214] netlink: 60 bytes leftover after parsing attributes in process `syz.0.893'. [ 155.277773][ T9225] FAULT_INJECTION: forcing a failure. [ 155.277773][ T9225] name failslab, interval 1, probability 0, space 0, times 0 [ 155.281973][ T9225] CPU: 1 UID: 0 PID: 9225 Comm: syz.1.895 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 155.281987][ T9225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.281993][ T9225] Call Trace: [ 155.281997][ T9225] [ 155.282001][ T9225] dump_stack_lvl+0x16c/0x1f0 [ 155.282018][ T9225] should_fail_ex+0x512/0x640 [ 155.282035][ T9225] should_failslab+0xc2/0x120 [ 155.282047][ T9225] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 155.282059][ T9225] ? dst_alloc+0x99/0x1a0 [ 155.282072][ T9225] dst_alloc+0x99/0x1a0 [ 155.282082][ T9225] rt_dst_alloc+0x35/0x3a0 [ 155.282095][ T9225] ip_route_output_key_hash_rcu+0x87a/0x28f0 [ 155.282114][ T9225] ip_route_output_key_hash+0x137/0x2e0 [ 155.282130][ T9225] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 155.282148][ T9225] ? icmp_route_lookup.constprop.0+0x389/0x13d0 [ 155.282161][ T9225] icmp_route_lookup.constprop.0+0x3d4/0x13d0 [ 155.282173][ T9225] ? __pfx_icmp_route_lookup.constprop.0+0x10/0x10 [ 155.282186][ T9225] ? __ip_options_echo+0x54c/0x1210 [ 155.282199][ T9225] ? lock_acquire+0x179/0x350 [ 155.282212][ T9225] ? __pfx___ip_options_echo+0x10/0x10 [ 155.282222][ T9225] ? find_held_lock+0x2b/0x80 [ 155.282233][ T9225] __icmp_send+0xacd/0x1950 [ 155.282247][ T9225] ? __pfx___icmp_send+0x10/0x10 [ 155.282258][ T9225] ? __lock_acquire+0x5ca/0x1ba0 [ 155.282272][ T9225] ? __lock_acquire+0x5ca/0x1ba0 [ 155.282285][ T9225] ? __ip_options_compile+0x873/0x1670 [ 155.282307][ T9225] ? ipv4_link_failure+0x751/0xbc0 [ 155.282323][ T9225] ipv4_link_failure+0x424/0xbc0 [ 155.282338][ T9225] ? __pfx_ipv4_link_failure+0x10/0x10 [ 155.282351][ T9225] ? __kernel_text_address+0xd/0x40 [ 155.282370][ T9225] ? __pfx_ipv4_link_failure+0x10/0x10 [ 155.282383][ T9225] vti6_tnl_xmit+0x7ce/0x21d0 [ 155.282400][ T9225] ? __lock_acquire+0xaa4/0x1ba0 [ 155.282412][ T9225] ? __pfx_vti6_tnl_xmit+0x10/0x10 [ 155.282432][ T9225] dev_hard_start_xmit+0x93/0x740 [ 155.282450][ T9225] __dev_queue_xmit+0x7eb/0x43e0 [ 155.282464][ T9225] ? __pfx___dev_queue_xmit+0x10/0x10 [ 155.282480][ T9225] ? __local_bh_enable_ip+0xa4/0x120 [ 155.282491][ T9225] ? lockdep_hardirqs_on+0x7c/0x110 [ 155.282504][ T9225] ? ipt_do_table+0xd48/0x1ac0 [ 155.282516][ T9225] ? __local_bh_enable_ip+0xa4/0x120 [ 155.282529][ T9225] ? __lock_acquire+0xaa4/0x1ba0 [ 155.282548][ T9225] ? find_held_lock+0x2b/0x80 [ 155.282560][ T9225] neigh_connected_output+0x3da/0x620 [ 155.282577][ T9225] ip_finish_output2+0x7f5/0x21a0 [ 155.282590][ T9225] ? ip_skb_dst_mtu+0x487/0xe90 [ 155.282603][ T9225] ? __pfx_ip_finish_output2+0x10/0x10 [ 155.282613][ T9225] ? ip_skb_dst_mtu+0x496/0xe90 [ 155.282624][ T9225] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 155.282635][ T9225] ? __pfx_nf_hook+0x10/0x10 [ 155.282648][ T9225] __ip_finish_output+0x49e/0x950 [ 155.282659][ T9225] ? __ip_make_skb+0x1266/0x2320 [ 155.282672][ T9225] ip_finish_output+0x35/0x380 [ 155.282686][ T9225] ip_output+0x13b/0x2a0 [ 155.282696][ T9225] ? __pfx_ip_output+0x10/0x10 [ 155.282709][ T9225] ip_push_pending_frames+0x2fe/0x5b0 [ 155.282723][ T9225] raw_sendmsg+0x145e/0x38b0 [ 155.282740][ T9225] ? aa_label_sk_perm+0xbd/0x5a0 [ 155.282753][ T9225] ? __pfx_raw_sendmsg+0x10/0x10 [ 155.282767][ T9225] ? __pfx___might_resched+0x10/0x10 [ 155.282786][ T9225] ? __pfx___might_resched+0x10/0x10 [ 155.282795][ T9225] ? __lock_acquire+0xaa4/0x1ba0 [ 155.282806][ T9225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 155.282822][ T9225] ? aa_sk_perm+0x2f4/0xb10 [ 155.282836][ T9225] ? __import_iovec+0x1c8/0x660 [ 155.282851][ T9225] ? __pfx_raw_sendmsg+0x10/0x10 [ 155.282865][ T9225] inet_sendmsg+0x119/0x140 [ 155.282880][ T9225] ____sys_sendmsg+0x973/0xc70 [ 155.282895][ T9225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.282908][ T9225] ? get_compat_msghdr+0x11a/0x170 [ 155.282921][ T9225] ? __pfx__kstrtoull+0x10/0x10 [ 155.282934][ T9225] ___sys_sendmsg+0x134/0x1d0 [ 155.282946][ T9225] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.282964][ T9225] ? find_held_lock+0x2b/0x80 [ 155.282981][ T9225] __sys_sendmmsg+0x2f9/0x420 [ 155.282994][ T9225] ? __pfx___sys_sendmmsg+0x10/0x10 [ 155.283009][ T9225] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 155.283029][ T9225] ? fput+0x70/0xf0 [ 155.283041][ T9225] ? ksys_write+0x1b9/0x240 [ 155.283050][ T9225] ? __pfx_ksys_write+0x10/0x10 [ 155.283061][ T9225] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 155.283072][ T9225] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 155.283087][ T9225] __do_fast_syscall_32+0x73/0x120 [ 155.283102][ T9225] do_fast_syscall_32+0x32/0x80 [ 155.283115][ T9225] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.283127][ T9225] RIP: 0023:0xf70de579 [ 155.283136][ T9225] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 155.283145][ T9225] RSP: 002b:00000000f50ad55c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 155.283155][ T9225] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f40 [ 155.283161][ T9225] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.283166][ T9225] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.283172][ T9225] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 155.283178][ T9225] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.283190][ T9225] [ 155.458273][ T9226] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 155.458658][ C3] ------------[ cut here ]------------ [ 155.462323][ C3] WARNING: CPU: 3 PID: 71 at net/mac80211/rx.c:5329 ieee80211_rx_list+0x15e3/0x2980 [ 155.465229][ C3] Modules linked in: [ 155.466711][ C3] CPU: 3 UID: 0 PID: 71 Comm: kworker/3:1H Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 155.471636][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.474962][ C3] Workqueue: events_highpri snd_vmidi_output_work [ 155.476961][ C3] RIP: 0010:ieee80211_rx_list+0x15e3/0x2980 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 155.478846][ C3] Code: 43 af 59 fe 48 85 c0 0f 85 0a 01 00 00 e8 75 38 d4 f6 48 89 df e8 9d 90 59 fe e8 68 38 d4 f6 e9 cd ee ff ff e8 5e 38 d4 f6 90 <0f> 0b 90 e9 d4 ee ff ff e8 50 38 d4 f6 44 89 ef e8 48 d0 d2 ff 31 [ 155.485054][ C3] RSP: 0018:ffffc900005e8c68 EFLAGS: 00010246 [ 155.487270][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8ae65120 [ 155.489760][ C3] RDX: ffff88801f2fc880 RSI: ffffffff8ae66482 RDI: 0000000000000001 [ 155.492240][ C3] RBP: ffff8880222edb80 R08: 0000000000000001 R09: 0000000000000000 [ 155.494691][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88806b1db0c8 [ 155.497162][ C3] R13: ffff8880222edc58 R14: ffff88806b1d8e40 R15: 0000000000000000 [ 155.499647][ C3] FS: 0000000000000000(0000) GS:ffff888097aec000(0000) knlGS:0000000000000000 [ 155.502446][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.504507][ C3] CR2: 0000000080a73000 CR3: 0000000022776000 CR4: 0000000000352ef0 [ 155.507006][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.509462][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 155.511936][ C3] Call Trace: [ 155.513006][ C3] [ 155.513934][ C3] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 155.515642][ C3] ? __lock_acquire+0xaa4/0x1ba0 [ 155.517180][ C3] ? lock_acquire+0x179/0x350 [ 155.518673][ C3] ieee80211_rx_napi+0xdc/0x410 [ 155.520229][ C3] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 155.521928][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 155.523580][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 155.525402][ C3] ieee80211_handle_queued_frames+0xd5/0x130 [ 155.527265][ C3] tasklet_action_common+0x281/0x400 [ 155.528935][ C3] handle_softirqs+0x216/0x8e0 [ 155.530568][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 155.532235][ C3] __irq_exit_rcu+0x109/0x170 [ 155.533728][ C3] irq_exit_rcu+0x9/0x30 [ 155.535071][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 155.536823][ C3] [ 155.537785][ C3] [ 155.538732][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 155.540640][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 155.542586][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 a8 2b f6 48 89 df e8 fe fb 2b f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 55 68 1c f6 65 8b 05 3e 54 37 08 85 c0 74 16 5b [ 155.548424][ C3] RSP: 0018:ffffc90000affb60 EFLAGS: 00000246 [ 155.550362][ C3] RAX: 0000000000000006 RBX: ffff888046aa5138 RCX: 0000000000000006 [ 155.552733][ C3] RDX: 0000000000000000 RSI: ffffffff8dbdb989 RDI: ffffffff8bf46d60 [ 155.555157][ C3] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 155.557532][ C3] R10: ffffffff90851417 R11: 0000000000000001 R12: 0000000000000293 [ 155.559979][ C3] R13: 0000000000001000 R14: 0000000000000000 R15: ffffc90000affd18 [ 155.562438][ C3] snd_rawmidi_proceed+0x105/0x160 [ 155.564048][ C3] snd_vmidi_output_work+0x30c/0x390 [ 155.565710][ C3] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 155.567534][ C3] ? rcu_is_watching+0x12/0xc0 [ 155.569063][ C3] process_one_work+0x9cc/0x1b70 [ 155.570675][ C3] ? __pfx_process_one_work+0x10/0x10 [ 155.572384][ C3] ? assign_work+0x1a0/0x250 [ 155.573869][ C3] worker_thread+0x6c8/0xf10 [ 155.575344][ C3] ? __kthread_parkme+0x19e/0x250 [ 155.576937][ C3] ? __pfx_worker_thread+0x10/0x10 [ 155.578606][ C3] kthread+0x3c2/0x780 [ 155.579964][ C3] ? __pfx_kthread+0x10/0x10 [ 155.581438][ C3] ? __pfx_kthread+0x10/0x10 [ 155.582889][ C3] ? __pfx_kthread+0x10/0x10 [ 155.584344][ C3] ? __pfx_kthread+0x10/0x10 [ 155.585764][ C3] ? rcu_is_watching+0x12/0xc0 [ 155.587223][ C3] ? __pfx_kthread+0x10/0x10 [ 155.588692][ C3] ret_from_fork+0x45/0x80 [ 155.590139][ C3] ? __pfx_kthread+0x10/0x10 [ 155.591600][ C3] ret_from_fork_asm+0x1a/0x30 [ 155.593122][ C3] [ 155.594129][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 155.596398][ C3] CPU: 3 UID: 0 PID: 71 Comm: kworker/3:1H Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 155.600119][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.603424][ C3] Workqueue: events_highpri snd_vmidi_output_work [ 155.605420][ C3] Call Trace: [ 155.606473][ C3] [ 155.607385][ C3] dump_stack_lvl+0x3d/0x1f0 [ 155.608872][ C3] panic+0x71c/0x800 [ 155.610112][ C3] ? __pfx_panic+0x10/0x10 [ 155.611513][ C3] ? show_trace_log_lvl+0x29b/0x3e0 [ 155.613141][ C3] ? check_panic_on_warn+0x1f/0xb0 [ 155.614739][ C3] ? ieee80211_rx_list+0x15e3/0x2980 [ 155.616391][ C3] check_panic_on_warn+0xab/0xb0 [ 155.617973][ C3] __warn+0xf6/0x3c0 [ 155.619225][ C3] ? ieee80211_rx_list+0x15e3/0x2980 [ 155.620873][ C3] report_bug+0x3c3/0x580 [ 155.622237][ C3] ? ieee80211_rx_list+0x15e3/0x2980 [ 155.623889][ C3] handle_bug+0x184/0x210 [ 155.625380][ C3] exc_invalid_op+0x17/0x50 [ 155.626820][ C3] asm_exc_invalid_op+0x1a/0x20 [ 155.628382][ C3] RIP: 0010:ieee80211_rx_list+0x15e3/0x2980 [ 155.630260][ C3] Code: 43 af 59 fe 48 85 c0 0f 85 0a 01 00 00 e8 75 38 d4 f6 48 89 df e8 9d 90 59 fe e8 68 38 d4 f6 e9 cd ee ff ff e8 5e 38 d4 f6 90 <0f> 0b 90 e9 d4 ee ff ff e8 50 38 d4 f6 44 89 ef e8 48 d0 d2 ff 31 [ 155.636291][ C3] RSP: 0018:ffffc900005e8c68 EFLAGS: 00010246 [ 155.638223][ C3] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8ae65120 [ 155.640671][ C3] RDX: ffff88801f2fc880 RSI: ffffffff8ae66482 RDI: 0000000000000001 [ 155.643104][ C3] RBP: ffff8880222edb80 R08: 0000000000000001 R09: 0000000000000000 [ 155.645503][ C3] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88806b1db0c8 [ 155.647916][ C3] R13: ffff8880222edc58 R14: ffff88806b1d8e40 R15: 0000000000000000 [ 155.650383][ C3] ? ieee80211_rx_list+0x280/0x2980 [ 155.652020][ C3] ? ieee80211_rx_list+0x15e2/0x2980 [ 155.653695][ C3] ? ieee80211_rx_list+0x15e2/0x2980 [ 155.655371][ C3] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 155.657075][ C3] ? __lock_acquire+0xaa4/0x1ba0 [ 155.658667][ C3] ? lock_acquire+0x179/0x350 [ 155.660154][ C3] ieee80211_rx_napi+0xdc/0x410 [ 155.661697][ C3] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 155.663403][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 155.665033][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 155.666873][ C3] ieee80211_handle_queued_frames+0xd5/0x130 [ 155.668773][ C3] tasklet_action_common+0x281/0x400 [ 155.670440][ C3] handle_softirqs+0x216/0x8e0 [ 155.671948][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 155.673611][ C3] __irq_exit_rcu+0x109/0x170 [ 155.675092][ C3] irq_exit_rcu+0x9/0x30 [ 155.676429][ C3] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 155.678196][ C3] [ 155.679135][ C3] [ 155.680065][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 155.681949][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 155.683944][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 a8 2b f6 48 89 df e8 fe fb 2b f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 55 68 1c f6 65 8b 05 3e 54 37 08 85 c0 74 16 5b [ 155.689902][ C3] RSP: 0018:ffffc90000affb60 EFLAGS: 00000246 [ 155.691840][ C3] RAX: 0000000000000006 RBX: ffff888046aa5138 RCX: 0000000000000006 [ 155.694334][ C3] RDX: 0000000000000000 RSI: ffffffff8dbdb989 RDI: ffffffff8bf46d60 [ 155.696790][ C3] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 155.699299][ C3] R10: ffffffff90851417 R11: 0000000000000001 R12: 0000000000000293 [ 155.701758][ C3] R13: 0000000000001000 R14: 0000000000000000 R15: ffffc90000affd18 [ 155.704226][ C3] snd_rawmidi_proceed+0x105/0x160 [ 155.705893][ C3] snd_vmidi_output_work+0x30c/0x390 [ 155.707579][ C3] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 155.709428][ C3] ? rcu_is_watching+0x12/0xc0 [ 155.710942][ C3] process_one_work+0x9cc/0x1b70 [ 155.712527][ C3] ? __pfx_process_one_work+0x10/0x10 [ 155.714226][ C3] ? assign_work+0x1a0/0x250 [ 155.715694][ C3] worker_thread+0x6c8/0xf10 [ 155.717179][ C3] ? __kthread_parkme+0x19e/0x250 [ 155.718808][ C3] ? __pfx_worker_thread+0x10/0x10 [ 155.720449][ C3] kthread+0x3c2/0x780 [ 155.721761][ C3] ? __pfx_kthread+0x10/0x10 [ 155.723225][ C3] ? __pfx_kthread+0x10/0x10 [ 155.724700][ C3] ? __pfx_kthread+0x10/0x10 [ 155.726174][ C3] ? __pfx_kthread+0x10/0x10 [ 155.727656][ C3] ? rcu_is_watching+0x12/0xc0 [ 155.729159][ C3] ? __pfx_kthread+0x10/0x10 [ 155.730617][ C3] ret_from_fork+0x45/0x80 [ 155.731980][ C3] ? __pfx_kthread+0x10/0x10 [ 155.733422][ C3] ret_from_fork_asm+0x1a/0x30 [ 155.734902][ C3] [ 155.736419][ C3] Kernel Offset: disabled [ 155.737758][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:38:42 Registers: info registers vcpu 0 CPU#0 RAX=00000000006e4ba7 RBX=0000000000000000 RCX=ffffffff8b6953e9 RDX=0000000000000000 RSI=ffffffff8dbdb989 RDI=ffffffff8bf46d60 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90851410 R15=0000000000000000 RIP=ffffffff8b693c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080578000 CR3=0000000022530000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff82164e74 RDX=ffff888023abc880 RSI=ffffffff82164d20 RDI=0000000000000001 RBP=ffffea0000bb4580 RSP=ffffc90006a2f2d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81ba9ce8 RFL=00000297 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800044c0 CR3=0000000022852000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffffffff8e3bf380 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff8bf46ce0 RDI=ffffffff8bf46d20 RBP=0000000000000002 RSP=ffffc90002dbf6b0 R8 =0000000000000000 R9 =0000000000000000 R10=000000000000000d R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b695b74 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f96e40 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7432ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854c23b5 RDI=ffffffff9addfc00 RBP=ffffffff9addfbc0 RSP=ffffc900005e85d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000006f R14=ffffffff9addfbc0 R15=ffffffff854c2350 RIP=ffffffff854c23df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097aec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080a73000 CR3=0000000022776000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000