last executing test programs: 5.522707215s ago: executing program 1 (id=317): socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) close(0x3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008840) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) recvfrom(r3, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) sendmsg$802154_raw(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) (async) sendmsg$802154_raw(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)="eb", 0x1}, 0x1, 0x0, 0x0, 0x8008040}, 0x30008080) sendmmsg$alg(r3, &(0x7f0000002a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004}], 0x1, 0x0) r4 = geteuid() ioprio_set$uid(0x3, r4, 0x6000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x100, @any, 0x100, 0x1}, 0xe) (async) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x100, @any, 0x100, 0x1}, 0xe) 5.101280798s ago: executing program 1 (id=320): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x6e8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001900)=0x2) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000400)={&(0x7f00001ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/8, 0x8, 0x1, &(0x7f0000001940)=""/4096, 0x1000}, &(0x7f0000000440)=0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$vcsu(&(0x7f0000000000), 0x800, 0x20040) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000300), &(0x7f0000000280), &(0x7f0000000200)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="eb0000000a0201030000000000000000020000090a000600c7cb442791b06a51"], 0x20}, 0x1, 0x0, 0x0, 0x140040c4}, 0x4000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.231323333s ago: executing program 1 (id=329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38001000031401002dbd7000000000000900020073797a30007e2e866eaf6aa2660adb5a217d6a0000000800410073697700140033006c6f0000000000000000000000000000ae8b8246547b0d16678b9d5a7885f1ed104905c5a6378eed0b769fe9398562c1ba8ff74b404f02e74fc389e703e5812e2ee2614f8a6a58a2339ca599793518a5e911454d0cc767d3279b1d93e3ea968a7b8e62db218bde4996592c606efa9c26f002b0cf514848a957c068175c93576a2f818cbffc401edc71b7873cb280b29b22413df6f4a699f022017bf5"], 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x9, &(0x7f0000000180)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r4, @ANYRESHEX=r4, @ANYRESDEC=r4, @ANYRESHEX=r0], &(0x7f0000000640)='syzkaller\x00', 0x7, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2.359004796s ago: executing program 1 (id=331): r0 = syz_usbip_server_init(0x3) write$usbip_server(r0, &(0x7f0000000380)=ANY=[], 0xfffffffffffffd8e) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x8, 0x4004, @fd, 0x8, &(0x7f00000003c0)=""/214, 0xd6, 0x14}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x22, 0x2, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = openat$dsp(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0x80044dfe, &(0x7f00000002c0)) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) close_range(r2, 0xffffffffffffffff, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x440d0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtclass={0x94, 0x28, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xd, 0x2}, {0xb, 0xfff2}, {0x0, 0x7}}, [@tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_qfq={{0x8}, {0x4c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x4}, @TCA_QFQ_LMAX={0x8, 0x2, 0x6}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xede7}, @TCA_QFQ_LMAX={0x8, 0x2, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xffffff01}, @TCA_QFQ_LMAX={0x8}, @TCA_QFQ_WEIGHT={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2c}}, @TCA_RATE={0x6, 0x5, {0x40, 0x1}}]}, 0x94}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 2.190641351s ago: executing program 2 (id=334): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x3, 0x0) (async, rerun: 64) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 64) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="0fee561800000039744e0e568a2f74000000009500000000000000541a2d7401a0645eeeca30a98a8bcd2dda101d754e3d03eb56d7e8cdf6823f4fe1ea2b05256d4f36cb85a62517a731be8742dc9171e8cefb947e090c60f3d75540f3987df8d8ea5f559e0f88e761178b1b7b100b9ed31ab1ce616df75ef990d158"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='contention_end\x00', r4, 0x0, 0x1}, 0x18) (async) set_thread_area(&(0x7f0000000080)={0xe, 0x20000000, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async, rerun: 64) ioctl$BSG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000100)) (async, rerun: 64) r5 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc2c45512, &(0x7f0000000a00)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x7d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3af6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) (async) io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xfffe, r3, 0x0}]) (async) r6 = syz_io_uring_setup(0x23c, &(0x7f0000000200)={0x0, 0x1c2a, 0x80, 0x41, 0x128, 0x0, r2}, &(0x7f0000000500)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) (async, rerun: 64) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001480)=@mangle={'mangle\x00', 0x1f, 0x6, 0x644, 0x240, 0xc8, 0xc8, 0x46c, 0x46c, 0x57c, 0x57c, 0x57c, 0x57c, 0x57c, 0x6, &(0x7f0000000300), {[{{@ipv6={@private1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xff000000], 'gre0\x00', 'vcan0\x00', {}, {0xff}, 0x89, 0xff, 0x6, 0x19}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x134, 0x178, 0x0, {}, [@common=@hbh={{0x48}, {0x10001, 0x4, 0x0, [0x4, 0x5f2, 0x3, 0x5, 0x9, 0x1, 0xf49, 0x109, 0x2, 0x6, 0x6, 0x7f, 0x2a9, 0x8, 0x8, 0xf], 0xc}}, @common=@dst={{0x48}, {0x7, 0x0, 0x1, [0x80, 0x6, 0xfff, 0x8001, 0x5291, 0x4, 0x3af, 0x12, 0x7, 0x6, 0x8, 0xe04, 0x2, 0x8, 0x8000, 0x9], 0x9}}]}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4=@private=0xa010102, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x38, 0x3e, 0x2}}}, {{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0x0, 0x0, 0xff000000], [0xff, 0x0, 0xffffff00, 0xffffff00], 'syzkaller1\x00', 'veth0_to_team\x00', {}, {}, 0x6, 0x9}, 0x0, 0xcc, 0x110, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0x2, 0x200}}]}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @ipv4=@multicast2, 0x14, 0x31, 0xdaa}}}, {{@ipv6={@empty, @mcast2, [0xffffff00, 0x0, 0xff], [0x0, 0xffffff00, 0xffffffff, 0xffffff00], 'macsec0\x00', 'gre0\x00', {0xff}, {0xff}, 0x2e, 0xf8, 0x1}, 0x0, 0xf8, 0x11c, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x2}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0x7f, 0x3}}]}, @HL={0x24, 'HL\x00', 0x0, {0x3, 0x9}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xffffffff], 'nr0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0xff, 0x7, 0x0, 0x22}, 0x0, 0xec, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@icmp6={{0x24}, {0xf, 'de', 0x1}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6a0) r9 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/41, 0x29}, 0x0) 2.092604547s ago: executing program 2 (id=337): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x2, 0x4) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xb4, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0x40, 0x3, "72e98ab6a1b338800a7ae360057514bed78080669c7013d1f3e89306d13fccea8400dceaf4bb4cf42283050606063be1a1e23f0e8e2b81c86dc8c21d"}, @TIPC_NLA_NODE_ID={0x4e, 0x3, "7f3a10ead7cd6f6b7970819c21c8b3522f6dad6440cbacc8f9a1537f94b5c361dd6533cb64958404abba6183c1eceb2f14b0a3df5513fc236bae74d6f53f1a41075cbd7d6f57ebe131af"}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x11}, 0x400000c0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) ioctl$sock_netdev_private(r4, 0x8815, &(0x7f0000000480)="23852d025933d7b3bf021a54b5710599af3badee6da9a2a29ef6b1c5db8ecc1aee60d8aff5d78d4458ca1d7e3326dcb076ae4d717ca2e80a85d8f670cc58a9a338bddc7ae470acbb86fbe3e83e82f557065a1a3c72b50df14ca5cf57e3d840635348bc5af970b16bc465d5c8ef27ad9ac9fe066f152690f6039f1676aa0024a9e45b18cf1e7f164c178813ae1fd5adb035de7865daae6e3c1ca800006d0e551974b563aab5c135") openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r6, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x34}}, 0x20) 1.701218774s ago: executing program 0 (id=338): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000000)="00007298", 0x4) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async, rerun: 64) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8005, &(0x7f0000000000)=0x3f, 0x9, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x41, &(0x7f0000000140)={0xa, 0x4e24, 0x9, @mcast1}, 0x1c) (async) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000500)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/174, 0xae}, {&(0x7f0000000040)=""/33, 0x21}, {&(0x7f0000000340)=""/117, 0x75}, {&(0x7f00000003c0)=""/199, 0xc7}, {&(0x7f00000004c0)=""/37, 0x25}], 0x2000000000000323, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/110, 0x6e}], 0x1, 0x0) 1.59034959s ago: executing program 0 (id=339): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0x28, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="0d94383c", 0x4}], 0x1}}], 0x1, 0x40840) 1.589761943s ago: executing program 0 (id=340): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x86, &(0x7f0000000bc0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "020810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}], "fb807f04442be993894b35a336eeca6f"}}}}}}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000900)={0x0, 0x3, &(0x7f00000008c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000df3679062c9bddf454a93c49ba357248126dbd1e", @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf250f00000008000300", @ANYRES32=r4, @ANYBLOB="0800320004000000"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0xc0) 1.482594842s ago: executing program 0 (id=341): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x7, [@union={0x0, 0xa, 0x0, 0x5, 0x0, 0x15, [{0x10, 0x0, 0x6}, {0xd, 0x2, 0x7}, {0x6, 0x2, 0x8}, {0xa, 0x5, 0x5}, {0x6, 0x0, 0x80000001}, {0xf, 0x5, 0x8}, {0x1, 0x4, 0x8}, {0x9, 0x3, 0x3b4}, {0xf, 0x3, 0x5}, {0x3, 0x5, 0x40000000}]}]}, {0x0, [0x61, 0x2e, 0x5f, 0x30, 0x30]}}, &(0x7f0000000300)=""/171, 0xa3, 0xab, 0x1, 0x4, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5f, 0x6a, 0xa, 0xff00}, [@exit, @call={0x55}, @map_fd, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0xe, '\x00', 0x0, @cgroup_skb, r0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x7, [@union={0x0, 0xa, 0x0, 0x5, 0x0, 0x15, [{0x10, 0x0, 0x6}, {0xd, 0x2, 0x7}, {0x6, 0x2, 0x8}, {0xa, 0x5, 0x5}, {0x6, 0x0, 0x80000001}, {0xf, 0x5, 0x8}, {0x1, 0x4, 0x8}, {0x9, 0x3, 0x3b4}, {0xf, 0x3, 0x5}, {0x3, 0x5, 0x40000000}]}]}, {0x0, [0x61, 0x2e, 0x5f, 0x30, 0x30]}}, &(0x7f0000000300)=""/171, 0xa3, 0xab, 0x1, 0x4, 0x10000}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5f, 0x6a, 0xa, 0xff00}, [@exit, @call={0x55}, @map_fd, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0xe, '\x00', 0x0, @cgroup_skb, r0}, 0x94) (async) 1.466402339s ago: executing program 0 (id=342): socket(0x27, 0x80000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2eb, r0, 0x0, 0x0, 0x6}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x40, 0x2c01) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0x43d3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f00000002c0)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0xe3c5, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.320789845s ago: executing program 3 (id=343): r0 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r0, &(0x7f0000000700)=""/115, 0x73, 0x5) (async) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000000)=@mmap={0x2, 0xb, 0x4, 0x0, 0x4, {0x77359400}, {0x3, 0xc, 0x10, 0x8, 0x80, 0x60, "ad322947"}, 0x7, 0x1, {}, 0x5}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYRES32=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) (async) bind$packet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000100)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) (async) r8 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) (async) io_uring_enter(r8, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r11, 0x25, &(0x7f0000000000)={0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 1.235766941s ago: executing program 3 (id=344): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = getpgid(0xffffffffffffffff) move_pages(r0, 0x0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r2, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) write$UHID_CREATE2(r2, &(0x7f0000000340)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x4, 0x10, 0x5, 0x10, 0x100}}, 0x118) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000000000000002000000000000001a0000000500110001"], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4000050) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.225768484s ago: executing program 2 (id=345): r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x428100, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x7) r2 = dup(r0) msgget$private(0x0, 0x20f) userfaultfd(0x80000) write$proc_mixer(r0, &(0x7f00000000c0)=[{'OGAIN', @val={' \'', 'CD Capture'}}, {'IMIX', @void}, {'PHONEIN', @void}, {'MONITOR', @void}, {'PHONEIN', @val={' \'', 'Capture'}}, {'VOLUME', @val={' \'', 'Synth Capture Switch'}}, {'LINE2', @val={' \'', 'Capture Volume'}}, {'OGAIN', @void}], 0xc9) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000200)=""/168, 0x10a000, 0x1000, 0x9, 0x1}, 0x1c) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x10, r0, 0x64a05000) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ppoll(&(0x7f0000000340)=[{r4, 0x1}], 0x1, &(0x7f0000000380), &(0x7f00000003c0), 0x8) sendfile(r6, r0, &(0x7f0000000400)=0x7ba, 0x3) r8 = openat$cgroup_procs(r2, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup(r0, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) statx(r2, &(0x7f00000004c0)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000000500)) r9 = dup3(r7, r4, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r9, 0xc4009420, &(0x7f0000000600)={0x2, 0x4, {0x1, @usage=0xffff, 0x0, 0x4, 0x5, 0x5, 0x4, 0xf59, 0x59, @struct={0x3, 0x8}, 0x1, 0x5, [0xa86e, 0x6, 0x3, 0x3, 0x1ff, 0x9]}, {0x2, @struct={0x7fcb2f65, 0x1f007d29}, 0x0, 0x7, 0x9, 0xffffffffffff7fff, 0x7f, 0x3, 0x8, @usage=0xffff, 0xd, 0x6, [0x100000001, 0x9, 0x5, 0xda77, 0x3, 0x3]}, {0x3, @usage=0x7fff, 0x0, 0x8, 0x1, 0x3, 0x8, 0x8, 0x60, @struct={0x95, 0xffffff9e}, 0xf, 0x0, [0x0, 0x0, 0x8, 0xd0, 0x6, 0x1]}, {0x1, 0x3, 0x5}}) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000a00)={r10, 0xd, 0x37ee99ec, 0x1}) connect$inet(r7, &(0x7f0000000e00)={0x2, 0x4e23, @empty}, 0x10) connect$unix(r2, &(0x7f0000000e40)=@file={0x0, './file0/../file0\x00'}, 0x6e) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r9, 0x894b, &(0x7f0000000ec0)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) 1.175840653s ago: executing program 2 (id=346): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000089c0)=[{{&(0x7f0000001f00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}, {{&(0x7f00000020c0)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0x20004804) (async) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) (async) fsmount(0xffffffffffffffff, 0x1, 0x8c) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) ioperm(0x2, 0x7, 0x13) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, 0x0, 0x20004004) (async) mount$9p_rdma(0x0, 0x0, 0x0, 0x3b8c039, &(0x7f0000000440)=ANY=[]) openat$mice(0xffffffffffffff9c, 0x0, 0x20000) (async) read$msr(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x28, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x14, 0x125, 0x0, 0x0, @ipv6=@mcast2}]}, 0x28}}, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) (async) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000007, 0x10, 0xffffffffffffffff, 0x80000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) 872.550852ms ago: executing program 3 (id=347): syz_emit_vhci(0x0, 0x0) fsopen(0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) statfs(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380)=""/75) 871.719332ms ago: executing program 3 (id=348): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f275cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bind$rxrpc(r0, &(0x7f0000001280)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x3, 0x0, &(0x7f00000000c0)) timer_create(0x3, 0x0, &(0x7f0000000140)=0x0) timer_delete(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0xffffffff}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x300000}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x20050800) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060064680000080008000000000008000b0073"], 0x54}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}}, 0x2) r8 = getpid() syz_pidfd_open(r8, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_usb_disconnect(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r10, 0x0) 702.238946ms ago: executing program 1 (id=349): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) (async, rerun: 32) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f0000004200)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000043c0)=""/268, 0x10c}, {&(0x7f0000000380)=""/66, 0x42}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000000540)=""/168, 0xa8}, {&(0x7f0000000600)=""/233, 0xe9}, {&(0x7f0000000700)=""/26, 0x1a}], 0x7, &(0x7f0000000800)=""/15, 0xf}, 0x6}, {{&(0x7f0000001b40)=@caif, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001bc0)=""/33, 0x21}, {&(0x7f0000001c00)=""/32, 0x20}, {&(0x7f0000000440)=""/18, 0x12}, {&(0x7f0000001c80)=""/237, 0xed}, {&(0x7f0000004300)=""/146, 0x92}], 0x5, &(0x7f0000001e80)=""/37, 0x25}, 0x401}, {{&(0x7f0000001ec0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000002040)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/213, 0xd5}], 0x2, &(0x7f0000002080)=""/159, 0x9f}, 0x2}, {{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000002140)}, {&(0x7f0000002180)=""/94, 0x5e}, {&(0x7f0000002200)=""/61, 0x3d}, {&(0x7f0000003340)=""/220, 0xdc}, {&(0x7f0000003440)=""/214, 0xd6}, {&(0x7f0000003540)=""/237, 0xed}, {&(0x7f0000003640)=""/196, 0xc4}, {&(0x7f0000002240)=""/137, 0x89}], 0x8, &(0x7f0000003780)=""/199, 0xc7}, 0x7}, {{&(0x7f0000003880)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003900)=""/75, 0x4b}, {&(0x7f0000003980)=""/98, 0x62}, {&(0x7f0000003a00)=""/203, 0xcb}, {&(0x7f0000003b00)=""/161, 0xa1}, {&(0x7f0000002140)=""/49, 0x31}], 0x5, &(0x7f0000003c40)=""/233, 0xe9}, 0x2}, {{&(0x7f0000003d40)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000003dc0)=""/211, 0xd3}, {&(0x7f0000003ec0)=""/94, 0x5e}, {&(0x7f00000051c0)=""/4109, 0x100d}, {&(0x7f0000004f40)=""/117, 0x75}], 0x4}, 0x140}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000003f40)=""/255, 0xff}, {&(0x7f0000001c40)=""/13, 0xd}, {&(0x7f0000006200)=""/4096, 0x1000}, {&(0x7f0000004040)=""/211, 0xd3}], 0x4, &(0x7f0000004140)=""/185, 0xb9}, 0x9}], 0x7, 0x82a0b2ea1d27c4a8, 0x0) (async, rerun: 64) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 64) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) (async, rerun: 64) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001c40), 0x0, 0x840) (async) sendfile(r6, 0xffffffffffffffff, 0x0, 0x10ffff) (async, rerun: 64) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) syz_io_uring_setup(0x49f, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000140)={&(0x7f0000001000), 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r9 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) ioctl$HIDIOCGRDESC(r9, 0x4030582a, &(0x7f0000000200)={0xd, "7954bbc8e80000000000000001"}) (async) socket$inet(0x2, 0x4000000000080001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newtaction={0x1b0, 0x30, 0xfffffffffffffffd, 0x70bd2c, 0x25dfdbfd, {}, [{0x19c, 0x1, [@m_mirred={0x90, 0x15, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0x20000000, 0x3, 0x9}, 0x2565879d6985e489, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x0, 0xffffffffffffffff, 0x77, 0x2}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x11, 0x0, 0x9}, 0x90874e3c577f5f42, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x108, 0xa, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0x20000000, 0x800008, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xfffffffe, 0x0, 0x5c8, 0x7ffffffc}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd, 0x6, 0x6, 0x2410, 0x6}, 0x2}}]}, {0x7c, 0x6, "ed4807c8bf8c7109a18c004d4bf224f7c0df9f6ce9e3f9f7d3f9a6b41fc30d183ebdf20a3806e7e56b3699fc38293675cc6dfb9938517a67cbba43b0f6831a6bd3774c6715a9b1ad7ef2e5180484fba30030a312c1081125c26736eae9ba989ea34fbfd2180cf257b00148e21bf1ff898d94415a332e1ea2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x804}, 0x40800) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32) 471.60908ms ago: executing program 2 (id=350): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x6, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x7, 0x1}, {0x7, 0x2}, {0xd, 0x1}, {0x6, 0x3}]}, @fwd={0x3}, @func={0x3, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000380)=""/164, 0x62, 0xa4, 0x0, 0xf3c}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000008000850000006100000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xffffff9f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000240)="243c42e8680d85ffff03762f86dd", 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close_range(r1, 0xffffffffffffffff, 0x0) 361.703762ms ago: executing program 2 (id=351): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x1b, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYRES8], 0x159c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000845) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x42, 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x10094, &(0x7f0000001480)=ANY=[@ANYRESDEC=r1, @ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',\x00']) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x2, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="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"}) (async) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000a0000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f00000001c0)=""/239) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) listen(r1, 0x7) syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00') read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) (async) read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020) socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r7, &(0x7f00000006c0)="ab0e68abdb0383fc634bb7a9181eee2462b8c9f0cb2901ba2a34e9e28b949e1b0619f41b21e4678be0a347afd1679c647f5d6ffea9a67237117ee8da08388e306939217434f4ebad32a9187203050000b8544cd736037be439a9d54505e5bf7f5f6063f05b3dbba1c9cdba2f1ef6e432e35b872f0dd18fd3e919ae", 0xffffffffffffff1e, 0x4, &(0x7f0000000780)={0x2, 0x4e22, @broadcast}, 0x10) epoll_create1(0x80000) (async) epoll_create1(0x80000) epoll_create1(0x80000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) 280.870711ms ago: executing program 0 (id=352): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000001040)=0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) dup(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) acct(&(0x7f00000001c0)='./file0\x00') r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) 188.704366ms ago: executing program 1 (id=353): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r3, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0x4, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000001}}}, 0x118) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280), &(0x7f0000000300)=@v1={0x2, "705f2961a1f248d8d5"}, 0xa, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(0x0) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e810b0c", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, &(0x7f00000015c0)=[{0x0, 0xb3c9de750fa141ee}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x1}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7bfc", 0xd4}], 0x6, 0x9, 0x0) 20.380018ms ago: executing program 3 (id=354): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="8a6bc9d9004a852d278e903c74bebcf661ef6da5ac32bc6f125c4d46aa39ea090aae1332fddc738657b412a9fc3ae50181d8308289cb53a5ea231fce90af4e80db7d3cd76f2da64296718b5d274c30f2ed1b393cf1862c35f9bd8b832db9646d7cc8cb770e", 0x82) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 0s ago: executing program 3 (id=355): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000180)) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000140)={0x0, 0x1, 0x847, 0x101}) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$ndctl0(0xffffff9c, &(0x7f0000000040), 0x400200, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x8000) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:50764' (ED25519) to the list of known hosts. [ 41.461067][ T5875] cgroup: Unknown subsys name 'net' [ 41.607119][ T5875] cgroup: Unknown subsys name 'cpuset' [ 41.613379][ T5875] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.621627][ T5875] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.542758][ T5961] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.549361][ T5965] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.551767][ T5965] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.554516][ T5965] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.557545][ T5965] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.559720][ T5965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.562661][ T5965] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.565281][ T5965] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.568575][ T5974] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.572643][ T5974] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.576288][ T5974] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.578092][ T5970] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.578602][ T5971] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.579287][ T5971] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.582895][ T5970] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.584802][ T5971] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.589467][ T5970] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.592317][ T5965] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.595030][ T5970] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.596708][ T5965] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.900778][ T5963] chnl_net:caif_netlink_parms(): no params data found [ 46.938375][ T5966] chnl_net:caif_netlink_parms(): no params data found [ 46.978139][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 46.982642][ T5968] chnl_net:caif_netlink_parms(): no params data found [ 47.149200][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.152237][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.154851][ T5963] bridge_slave_0: entered allmulticast mode [ 47.157606][ T5963] bridge_slave_0: entered promiscuous mode [ 47.179590][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.181955][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.184487][ T5966] bridge_slave_0: entered allmulticast mode [ 47.188152][ T5966] bridge_slave_0: entered promiscuous mode [ 47.197602][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.200537][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.202942][ T5966] bridge_slave_1: entered allmulticast mode [ 47.207074][ T5966] bridge_slave_1: entered promiscuous mode [ 47.224290][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.226526][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.228780][ T5963] bridge_slave_1: entered allmulticast mode [ 47.231345][ T5963] bridge_slave_1: entered promiscuous mode [ 47.285463][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.363905][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.367842][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.370987][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.374220][ T5968] bridge_slave_0: entered allmulticast mode [ 47.378047][ T5968] bridge_slave_0: entered promiscuous mode [ 47.384570][ T5963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.445163][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.447370][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.449541][ T5968] bridge_slave_1: entered allmulticast mode [ 47.452151][ T5968] bridge_slave_1: entered promiscuous mode [ 47.455768][ T5963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.458605][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.460792][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.463425][ T5959] bridge_slave_0: entered allmulticast mode [ 47.469061][ T5959] bridge_slave_0: entered promiscuous mode [ 47.474232][ T5966] team0: Port device team_slave_0 added [ 47.518629][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.521565][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.524710][ T5959] bridge_slave_1: entered allmulticast mode [ 47.528255][ T5959] bridge_slave_1: entered promiscuous mode [ 47.532728][ T5966] team0: Port device team_slave_1 added [ 47.536223][ T5968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.620032][ T5968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.625462][ T5963] team0: Port device team_slave_0 added [ 47.629881][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.668309][ T5963] team0: Port device team_slave_1 added [ 47.671615][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.688363][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.690763][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.699183][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.759388][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.762229][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.771219][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.776760][ T5968] team0: Port device team_slave_0 added [ 47.802558][ T5959] team0: Port device team_slave_0 added [ 47.809871][ T5959] team0: Port device team_slave_1 added [ 47.813349][ T5968] team0: Port device team_slave_1 added [ 47.815912][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.818832][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.828411][ T5963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.833137][ T5963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.836136][ T5963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.844158][ T5963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.936662][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.938912][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.948706][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.968089][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.970651][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.981345][ T5968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.987517][ T5968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.990554][ T5968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.002565][ T5968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.014062][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.016679][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.025620][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.055472][ T5966] hsr_slave_0: entered promiscuous mode [ 48.057908][ T5966] hsr_slave_1: entered promiscuous mode [ 48.121388][ T5963] hsr_slave_0: entered promiscuous mode [ 48.124026][ T5963] hsr_slave_1: entered promiscuous mode [ 48.126894][ T5963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.130136][ T5963] Cannot create hsr debugfs directory [ 48.252890][ T5968] hsr_slave_0: entered promiscuous mode [ 48.257610][ T5968] hsr_slave_1: entered promiscuous mode [ 48.260454][ T5968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.263952][ T5968] Cannot create hsr debugfs directory [ 48.308762][ T5959] hsr_slave_0: entered promiscuous mode [ 48.311113][ T5959] hsr_slave_1: entered promiscuous mode [ 48.313326][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.316444][ T5959] Cannot create hsr debugfs directory [ 48.644139][ T63] Bluetooth: hci3: command tx timeout [ 48.644143][ T5970] Bluetooth: hci2: command tx timeout [ 48.644171][ T5965] Bluetooth: hci0: command tx timeout [ 48.646308][ T5322] Bluetooth: hci1: command tx timeout [ 48.672687][ T5966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.681900][ T5966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.687777][ T5966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.697002][ T5966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.728787][ T5963] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.733143][ T5963] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.743850][ T5963] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.759554][ T5963] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.790698][ T5968] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.800820][ T5968] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.814899][ T5968] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.831440][ T5968] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.872027][ T5959] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.878229][ T5959] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.882979][ T5959] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.889945][ T5959] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.920305][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.961071][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.969954][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.972380][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.986750][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.988997][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.002420][ T5963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.031268][ T5968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.052256][ T5963] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.063277][ T5968] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.071718][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.074697][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.084934][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.087283][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.102508][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.105543][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.116864][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.119287][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.145260][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.185566][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.204415][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.207431][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.218287][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.221322][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.264304][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.307541][ T5966] veth0_vlan: entered promiscuous mode [ 49.317690][ T5966] veth1_vlan: entered promiscuous mode [ 49.339436][ T5963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.350725][ T5966] veth0_macvtap: entered promiscuous mode [ 49.357198][ T5968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.366310][ T5966] veth1_macvtap: entered promiscuous mode [ 49.399579][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.408487][ T5963] veth0_vlan: entered promiscuous mode [ 49.417120][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.427512][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.431101][ T5968] veth0_vlan: entered promiscuous mode [ 49.435056][ T5966] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.438526][ T5966] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.441572][ T5966] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.445222][ T5966] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.454688][ T5963] veth1_vlan: entered promiscuous mode [ 49.461787][ T5968] veth1_vlan: entered promiscuous mode [ 49.500956][ T5963] veth0_macvtap: entered promiscuous mode [ 49.516981][ T5963] veth1_macvtap: entered promiscuous mode [ 49.517154][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.522180][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.545598][ T5968] veth0_macvtap: entered promiscuous mode [ 49.552619][ T5959] veth0_vlan: entered promiscuous mode [ 49.561244][ T5968] veth1_macvtap: entered promiscuous mode [ 49.566303][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.567750][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.568865][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.572195][ T5959] veth1_vlan: entered promiscuous mode [ 49.583053][ T5963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.589081][ T5963] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.591836][ T5963] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.595487][ T5963] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.598881][ T5963] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.612547][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.617602][ T5968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.621805][ T5968] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.622869][ T5966] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.625727][ T5968] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.633768][ T5968] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.637400][ T5968] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.679194][ T5959] veth0_macvtap: entered promiscuous mode [ 49.686906][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.690065][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.697334][ T5959] veth1_macvtap: entered promiscuous mode [ 49.703683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.706457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.709072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.711636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.714983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.717878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.750533][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.753943][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.756360][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.758492][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.772476][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.796959][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.799437][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.800715][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.809289][ T5959] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.812082][ T5959] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.814903][ T5959] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.817603][ T5959] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.903744][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 49.929454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 49.999744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.161661][ T97] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.166247][ T97] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.204601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.243887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.609357][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.612492][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.750029][ T5322] Bluetooth: hci3: command tx timeout [ 50.752421][ T5322] Bluetooth: hci1: command tx timeout [ 50.760150][ T5322] Bluetooth: hci2: command tx timeout [ 50.762220][ T5322] Bluetooth: hci0: command tx timeout [ 51.033107][ T6056] 9pnet: Could not find request transport: rdmat=0x0000000000004e24 [ 51.071716][ T6065] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5'. [ 51.088821][ T6065] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5'. [ 51.101589][ T6065] netlink: 'syz.0.5': attribute type 8 has an invalid length. [ 51.330723][ T5322] Bluetooth: hci0: connection err: -111 [ 51.859139][ T6089] Zero length message leads to an empty skb [ 52.653625][ T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.803645][ T5970] Bluetooth: hci2: command tx timeout [ 52.806082][ T5970] Bluetooth: hci0: command tx timeout [ 52.808364][ T5970] Bluetooth: hci1: command tx timeout [ 52.810593][ T5970] Bluetooth: hci3: command tx timeout [ 52.813577][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 52.831999][ T34] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 52.853060][ T34] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.900129][ T34] usb 7-1: config 0 has no interfaces? [ 52.925193][ T34] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 52.982385][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.096384][ T34] usb 7-1: config 0 descriptor?? [ 53.542693][ T6031] usb 7-1: USB disconnect, device number 2 [ 53.660241][ T6098] ip6gretap0: entered promiscuous mode [ 53.665578][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 53.742573][ T6104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14'. [ 54.088825][ T6116] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 54.089200][ T6115] IPVS: stopping master sync thread 6116 ... [ 54.883597][ T5322] Bluetooth: hci3: command tx timeout [ 54.884695][ T5965] Bluetooth: hci0: command tx timeout [ 54.885394][ T5322] Bluetooth: hci2: command tx timeout [ 54.887142][ T5970] Bluetooth: hci1: command tx timeout [ 55.365563][ T6142] atomic_op ffff88804a2fa198 conn xmit_atomic 0000000000000000 [ 55.846544][ T6140] capability: warning: `syz.1.24' uses deprecated v2 capabilities in a way that may be insecure [ 56.088331][ T6147] netlink: 32 bytes leftover after parsing attributes in process `syz.0.25'. [ 56.607176][ T6160] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.923834][ T5795] libceph: connect (1)[c::]:6789 error -101 [ 56.926722][ T5795] libceph: mon0 (1)[c::]:6789 connect error [ 56.947254][ T6162] ceph: No mds server is up or the cluster is laggy [ 58.171076][ T6174] syz.0.32 (6174): /proc/6173/oom_adj is deprecated, please use /proc/6173/oom_score_adj instead. [ 59.722693][ T5970] Bluetooth: hci0: connection err: -111 [ 59.730905][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 60.517884][ T6219] atomic_op ffff88806be01198 conn xmit_atomic 0000000000000000 [ 61.174291][ T6229] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.43' sets config #1 [ 61.671503][ T6247] ======================================================= [ 61.671503][ T6247] WARNING: The mand mount option has been deprecated and [ 61.671503][ T6247] and is ignored by this kernel. Remove the mand [ 61.671503][ T6247] option from the mount to silence this warning. [ 61.671503][ T6247] ======================================================= [ 61.687962][ T6247] syz.3.49: attempt to access beyond end of device [ 61.687962][ T6247] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 61.692587][ T6247] qnx4: unable to read the superblock [ 61.962076][ T6256] bridge_slave_0: left allmulticast mode [ 61.964153][ T6256] bridge_slave_0: left promiscuous mode [ 61.966372][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.973037][ T6256] bridge_slave_1: left allmulticast mode [ 61.974930][ T6256] bridge_slave_1: left promiscuous mode [ 61.977007][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.000343][ T6256] bond0: (slave bond_slave_0): Releasing backup interface [ 62.007872][ T6256] bond0: (slave bond_slave_1): Releasing backup interface [ 62.044034][ T6256] team0: Port device team_slave_0 removed [ 62.058301][ T6256] team0: Port device team_slave_1 removed [ 62.062056][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.065730][ T6256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.071397][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.073890][ T6256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.102405][ T6260] netlink: 'syz.2.51': attribute type 10 has an invalid length. [ 62.127813][ T6257] team0: Mode changed to "loadbalance" [ 62.148198][ T6260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.152549][ T6260] team0: Port device bond0 added [ 62.329075][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 62.412615][ T6256] team0 (unregistering): Port device bond0 removed [ 62.458005][ T6257] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.579555][ T6257] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.675611][ T6257] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.696232][ T6271] Illegal XDP return value 4294967274 on prog (id 8) dev syz_tun, expect packet loss! [ 62.743301][ T6257] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.749702][ T6279] mmap: syz.3.57 (6279) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.820613][ T6257] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.829106][ T6257] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.836579][ T6257] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.843039][ T6257] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.063558][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 63.226220][ T9] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 63.229794][ T9] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 63.232969][ T9] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 63.236522][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.242197][ T6284] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 63.250683][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 63.323089][ T6287] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.333861][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.59'. [ 63.455319][ T34] usb 8-1: USB disconnect, device number 2 [ 63.568426][ T6297] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 63.576586][ T6297] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 63.602271][ T6301] trusted_key: encrypted_key: insufficient parameters specified [ 63.605079][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 63.605319][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 63.611513][ T6298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.61'. [ 63.612912][ T6297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.61'. [ 63.617863][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 63.620404][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 65.446812][ T6361] vlan0: entered promiscuous mode [ 65.448883][ T6361] vlan0: entered allmulticast mode [ 65.450556][ T6361] hsr_slave_1: entered allmulticast mode [ 65.469550][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 65.920275][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.81'. [ 65.928301][ T6386] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 65.930486][ T6386] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 65.937770][ T6386] vhci_hcd vhci_hcd.0: Device attached [ 65.953668][ T40] audit: type=1326 audit(1751955736.850:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 65.972861][ T40] audit: type=1326 audit(1751955736.850:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 65.984953][ T40] audit: type=1326 audit(1751955736.870:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 65.991629][ T40] audit: type=1326 audit(1751955736.870:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 65.998991][ T40] audit: type=1326 audit(1751955736.870:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 66.007015][ T40] audit: type=1326 audit(1751955736.870:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 66.023623][ T40] audit: type=1326 audit(1751955736.910:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 66.030169][ T40] audit: type=1326 audit(1751955736.910:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 66.036872][ T40] audit: type=1326 audit(1751955736.920:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 66.043385][ T40] audit: type=1326 audit(1751955736.920:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.3.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 66.123606][ T34] vhci_hcd: vhci_device speed not set [ 66.133015][ T6392] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 66.135189][ T6392] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 66.138620][ T6392] vhci_hcd vhci_hcd.0: Device attached [ 66.193568][ T34] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 66.506961][ T6410] dvmrp0: entered allmulticast mode [ 66.693628][ T61] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.749613][ T6393] vhci_hcd: connection closed [ 66.751356][ T59] vhci_hcd: stop threads [ 66.761549][ T59] vhci_hcd: release socket [ 66.763768][ T59] vhci_hcd: disconnect device [ 66.844268][ T6387] vhci_hcd: connection reset by peer [ 66.846584][ T1147] vhci_hcd: stop threads [ 66.848086][ T1147] vhci_hcd: release socket [ 66.849979][ T1147] vhci_hcd: disconnect device [ 66.855418][ T61] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 66.858789][ T61] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 66.861862][ T61] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 66.864774][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.876275][ T6404] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 66.880652][ T61] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 67.082901][ T6007] usb 5-1: USB disconnect, device number 2 [ 67.471601][ T6423] netlink: 'syz.3.91': attribute type 4 has an invalid length. [ 68.303607][ T6285] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.475115][ T6285] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 68.479531][ T6285] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 68.484453][ T6285] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 68.488599][ T6285] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.509910][ T6447] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 68.517350][ T6285] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 68.749763][ T841] usb 7-1: USB disconnect, device number 3 [ 68.818753][ T6471] input: syz0 as /devices/virtual/input/input6 [ 68.821405][ T6471] input: failed to attach handler leds to device input6, error: -6 [ 68.993809][ T6477] netlink: 'syz.3.105': attribute type 3 has an invalid length. [ 68.996272][ T6477] netlink: 666 bytes leftover after parsing attributes in process `syz.3.105'. [ 70.432723][ T6499] netlink: 44 bytes leftover after parsing attributes in process `syz.3.114'. [ 70.507322][ T6501] atomic_op ffff88804e740198 conn xmit_atomic 0000000000000000 [ 70.724094][ T5970] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 70.724129][ T5322] Bluetooth: hci4: command 0x1003 tx timeout [ 70.806865][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.808965][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.923570][ T842] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 71.085714][ T842] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 71.089229][ T842] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 71.092295][ T842] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 71.095436][ T842] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.100184][ T6499] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 71.106249][ T842] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 71.165390][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.168095][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.234577][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.242205][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.291037][ T6511] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.294544][ T6511] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.294616][ T34] vhci_hcd: vhci_device speed not set [ 71.297623][ T6511] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.302499][ T6511] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.318405][ T61] usb 8-1: USB disconnect, device number 3 [ 71.412369][ T5795] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 71.416825][ T5795] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 71.422900][ T5795] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 71.428046][ T5795] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 71.430428][ T5795] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 71.432859][ T5795] hid-generic 00A0:0008:0003.0002: unknown main item tag 0x0 [ 71.442601][ T5795] hid-generic 00A0:0008:0003.0002: item fetching failed at offset 13/15 [ 71.447603][ T5795] hid-generic 00A0:0008:0003.0002: probe with driver hid-generic failed with error -22 [ 72.622743][ T6532] syz.0.123: attempt to access beyond end of device [ 72.622743][ T6532] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 72.627234][ T6532] qnx4: unable to read the superblock [ 72.919839][ T6536] fuse: Bad value for 'fd' [ 73.157802][ T6550] openvswitch: netlink: Flow key attribute not present in set flow. [ 73.176252][ T6552] syz.1.128: attempt to access beyond end of device [ 73.176252][ T6552] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 73.180584][ T6552] hpfs: hpfs_map_sector(): read error [ 73.483698][ T61] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 73.613581][ T61] usb 7-1: device descriptor read/64, error -71 [ 73.636847][ T6556] binder: 6551:6556 ioctl 400c620e 80000000 returned -22 [ 73.838565][ T6559] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.849206][ T6559] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 73.873593][ T61] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 74.013577][ T61] usb 7-1: device descriptor read/64, error -71 [ 74.124285][ T61] usb usb7-port1: attempt power cycle [ 74.473860][ T61] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 74.504355][ T61] usb 7-1: device descriptor read/8, error -71 [ 74.774176][ T61] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 74.794565][ T61] usb 7-1: device descriptor read/8, error -71 [ 74.903958][ T61] usb usb7-port1: unable to enumerate USB device [ 76.098257][ T6603] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 76.119662][ T6603] evm: overlay not supported [ 76.504451][ T6615] fuse: Bad value for 'fd' [ 76.512315][ T6615] Invalid source name [ 78.194052][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 78.194063][ T40] audit: type=1326 audit(1751955749.100:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.150" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 78.293278][ T6650] syz.0.152 uses obsolete (PF_INET,SOCK_PACKET) [ 78.414007][ T6650] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 78.464316][ T6658] process 'syz.1.153' launched './file1' with NULL argv: empty string added [ 78.469649][ T60] cfg80211: failed to load regulatory.db [ 78.531044][ T6659] netlink: 60 bytes leftover after parsing attributes in process `syz.1.153'. [ 78.633827][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 78.786442][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.791116][ T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 78.795689][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 78.799439][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.807027][ T6653] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.818362][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 78.821553][ T6663] atomic_op ffff88806cda9198 conn xmit_atomic 0000000000000000 [ 79.197974][ T6673] warning: `syz.1.156' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.521919][ T6679] netlink: 272 bytes leftover after parsing attributes in process `syz.0.157'. [ 80.139908][ T6683] lo speed is unknown, defaulting to 1000 [ 80.142621][ T6683] lo speed is unknown, defaulting to 1000 [ 80.146276][ T6683] lo speed is unknown, defaulting to 1000 [ 80.292684][ T6683] infiniband sz1: set down [ 80.294375][ T6683] infiniband sz1: added lo [ 80.302000][ T5795] lo speed is unknown, defaulting to 1000 [ 80.322019][ T6683] RDS/IB: sz1: added [ 80.323789][ T6683] smc: adding ib device sz1 with port count 1 [ 80.325793][ T6683] smc: ib device sz1 port 1 has pnetid [ 80.329239][ T6683] lo speed is unknown, defaulting to 1000 [ 80.338258][ T5795] lo speed is unknown, defaulting to 1000 [ 80.417928][ T6683] lo speed is unknown, defaulting to 1000 [ 80.513328][ T6683] lo speed is unknown, defaulting to 1000 [ 80.516207][ T5335] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 80.605212][ T6683] lo speed is unknown, defaulting to 1000 [ 80.665412][ T5335] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 80.669144][ T5335] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 80.672181][ T5335] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 80.683539][ T5335] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.694565][ T6687] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 80.699411][ T5335] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 81.125411][ T6714] atomic_op ffff888068223998 conn xmit_atomic 0000000000000000 [ 81.352659][ T840] usb 7-1: USB disconnect, device number 8 [ 81.621639][ T24] IPVS: starting estimator thread 0... [ 81.625581][ T6725] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20003 [ 81.656562][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'. [ 81.715403][ T6726] IPVS: using max 42 ests per chain, 100800 per kthread [ 82.526707][ T5335] usb 8-1: USB disconnect, device number 4 [ 82.547973][ T40] audit: type=1804 audit(1751955753.450:56): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.172" name="/newroot/39/file0/file0" dev="9p" ino=35913919 res=1 errno=0 [ 82.770019][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 82.821242][ T6755] FAT-fs (nullb0): bogus number of reserved sectors [ 82.823537][ T6755] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 83.063621][ T34] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 83.216601][ T34] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 83.221089][ T34] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 83.225437][ T34] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 83.229130][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.243196][ T6757] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 83.252517][ T34] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 83.373640][ T841] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 83.455982][ T840] usb 6-1: USB disconnect, device number 2 [ 83.513306][ T6783] delete_channel: no stack [ 83.533733][ T841] usb 8-1: Using ep0 maxpacket: 16 [ 83.536674][ T841] usb 8-1: config 0 interface 0 has no altsetting 0 [ 83.538804][ T841] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 83.541805][ T841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.546090][ T841] usb 8-1: config 0 descriptor?? [ 84.024460][ T841] usbhid 8-1:0.0: can't add hid device: -71 [ 84.026467][ T841] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 84.030351][ T841] usb 8-1: USB disconnect, device number 5 [ 84.268342][ T6802] 9pnet: Found fid 0 not clunked [ 84.408373][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 84.510633][ T6819] syzkaller1: entered allmulticast mode [ 84.883726][ T841] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 85.043591][ T841] usb 6-1: Using ep0 maxpacket: 8 [ 85.047060][ T841] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 85.050068][ T841] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.055114][ T841] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.059660][ T841] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.063079][ T841] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 85.069110][ T841] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 85.071444][ T841] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.075392][ T841] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.079406][ T841] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.082882][ T841] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 85.088264][ T841] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 85.091507][ T841] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 85.096109][ T841] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.100473][ T841] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.103854][ T841] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 85.109772][ T841] usb 6-1: string descriptor 0 read error: -22 [ 85.111830][ T841] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 85.114804][ T841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.128137][ T841] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 85.439494][ T24] usb 6-1: USB disconnect, device number 3 [ 85.590878][ T6844] netlink: 36 bytes leftover after parsing attributes in process `syz.1.200'. [ 85.735629][ T6031] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 85.863855][ T6031] usb 7-1: device descriptor read/64, error -71 [ 85.895805][ T6854] random: crng reseeded on system resumption [ 85.977171][ T6854] tmpfs: Unknown parameter 'grpq' [ 86.113842][ T6031] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 86.141534][ T841] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 86.254274][ T6031] usb 7-1: device descriptor read/64, error -71 [ 86.370712][ T6031] usb usb7-port1: attempt power cycle [ 86.674521][ T6866] tmpfs: Unknown parameter 'quot”–l [ 86.674521][ T6866] Ra³ÆÈ9“´g­»tpHû}b¹.ç:4úÎY¦¶™ [ 86.674521][ T6866] o–{Íeú¢«é¨£9}Ùܼâ&þ­ôl:•' [ 86.682332][ T6866] overlayfs: missing 'workdir' [ 86.686107][ T6866] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 86.689480][ T6866] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 86.693645][ T6866] overlayfs: missing 'lowerdir' [ 86.744101][ T6031] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 86.768025][ T6031] usb 7-1: device descriptor read/8, error -71 [ 86.984019][ T840] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 87.003593][ T841] usb 8-1: Using ep0 maxpacket: 32 [ 87.006575][ T841] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 87.011230][ T841] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 87.014584][ T841] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 87.017203][ T841] usb 8-1: Product: syz [ 87.018523][ T841] usb 8-1: Manufacturer: syz [ 87.020034][ T841] usb 8-1: SerialNumber: syz [ 87.022741][ T841] usb 8-1: config 0 descriptor?? [ 87.023582][ T6031] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 87.024928][ T6856] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 87.025918][ T841] hub 8-1:0.0: bad descriptor, ignoring hub [ 87.031380][ T841] hub 8-1:0.0: probe with driver hub failed with error -5 [ 87.044046][ T6031] usb 7-1: device descriptor read/8, error -71 [ 87.133561][ T840] usb 6-1: Using ep0 maxpacket: 8 [ 87.138029][ T840] usb 6-1: config 2 has an invalid interface number: 68 but max is 3 [ 87.140941][ T840] usb 6-1: config 2 has an invalid interface number: 128 but max is 3 [ 87.144878][ T840] usb 6-1: config 2 has an invalid interface number: 115 but max is 3 [ 87.147641][ T840] usb 6-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 87.150694][ T840] usb 6-1: config 2 has no interface number 1 [ 87.152966][ T840] usb 6-1: config 2 has no interface number 2 [ 87.155135][ T840] usb 6-1: config 2 has no interface number 3 [ 87.157389][ T840] usb 6-1: config 2 interface 68 altsetting 109 endpoint 0x3 has an invalid bInterval 58, changing to 9 [ 87.160950][ T840] usb 6-1: config 2 interface 68 altsetting 109 has an invalid descriptor for endpoint zero, skipping [ 87.163795][ T6031] usb usb7-port1: unable to enumerate USB device [ 87.166527][ T840] usb 6-1: config 2 interface 68 altsetting 109 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 87.173284][ T840] usb 6-1: config 2 interface 68 altsetting 109 has an invalid descriptor for endpoint zero, skipping [ 87.177048][ T840] usb 6-1: config 2 interface 68 altsetting 109 has an invalid descriptor for endpoint zero, skipping [ 87.180536][ T840] usb 6-1: config 2 interface 68 altsetting 109 has a duplicate endpoint with address 0xD, skipping [ 87.186627][ T840] usb 6-1: config 2 interface 68 altsetting 109 bulk endpoint 0x9 has invalid maxpacket 32 [ 87.189925][ T840] usb 6-1: config 2 interface 68 altsetting 109 has an invalid descriptor for endpoint zero, skipping [ 87.193343][ T840] usb 6-1: config 2 interface 68 altsetting 109 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 87.198135][ T840] usb 6-1: config 2 interface 68 altsetting 109 has a duplicate endpoint with address 0x3, skipping [ 87.202111][ T840] usb 6-1: config 2 interface 128 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 16 [ 87.205463][ T840] usb 6-1: config 2 interface 128 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 87.209020][ T840] usb 6-1: config 2 interface 128 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 87.212323][ T840] usb 6-1: config 2 interface 128 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 87.217082][ T840] usb 6-1: config 2 interface 128 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 87.221141][ T840] usb 6-1: config 2 interface 115 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 87.225289][ T840] usb 6-1: config 2 interface 115 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 87.228692][ T840] usb 6-1: config 2 interface 115 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 87.232065][ T840] usb 6-1: config 2 interface 115 altsetting 1 has an endpoint descriptor with address 0x1F, changing to 0xF [ 87.238007][ T840] usb 6-1: config 2 interface 115 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 87.241314][ T840] usb 6-1: config 2 interface 115 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 87.247641][ T840] usb 6-1: config 2 interface 0 altsetting 203 has a duplicate endpoint with address 0x8, skipping [ 87.254915][ T840] usb 6-1: config 2 interface 0 altsetting 203 has a duplicate endpoint with address 0x2, skipping [ 87.258332][ T840] usb 6-1: config 2 interface 0 altsetting 203 has a duplicate endpoint with address 0x5, skipping [ 87.261818][ T840] usb 6-1: config 2 interface 0 altsetting 203 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 87.265516][ T840] usb 6-1: config 2 interface 0 altsetting 203 has a duplicate endpoint with address 0xC, skipping [ 87.268954][ T840] usb 6-1: config 2 interface 68 has no altsetting 0 [ 87.271066][ T840] usb 6-1: config 2 interface 128 has no altsetting 0 [ 87.273243][ T840] usb 6-1: config 2 interface 115 has no altsetting 0 [ 87.278249][ T840] usb 6-1: config 2 interface 0 has no altsetting 0 [ 87.282308][ T840] usb 6-1: Dual-Role OTG device on HNP port [ 87.282971][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.205'. [ 87.286999][ T840] usb 6-1: New USB device found, idVendor=07aa, idProduct=002f, bcdDevice=96.0c [ 87.290379][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.293088][ T840] usb 6-1: Product: syz [ 87.297210][ T840] usb 6-1: Manufacturer: syz [ 87.298731][ T840] usb 6-1: SerialNumber: syz [ 87.306773][ T6868] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 87.536801][ T840] usb 6-1: USB disconnect, device number 4 [ 87.704696][ T6856] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 87.843666][ T6856] usb 8-1: device descriptor read/64, error -71 [ 88.113747][ T6856] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 88.255212][ T6856] usb 8-1: device descriptor read/64, error -71 [ 88.286567][ T6936] netlink: 'syz.1.221': attribute type 2 has an invalid length. [ 88.289483][ T6936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.221'. [ 88.330552][ T6941] netlink: 256 bytes leftover after parsing attributes in process `syz.1.222'. [ 88.504224][ T6856] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 88.525996][ T6856] usb 8-1: device descriptor read/8, error -71 [ 88.707594][ T6966] trusted_key: syz.0.229 sent an empty control message without MSG_MORE. [ 88.778591][ T6856] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 88.861168][ T6856] usb 8-1: device descriptor read/8, error -71 [ 88.966433][ T6979] netlink: 'syz.0.231': attribute type 10 has an invalid length. [ 88.970018][ T6979] lo: entered promiscuous mode [ 88.973677][ T6979] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 89.115676][ T6007] usb 8-1: USB disconnect, device number 6 [ 89.557835][ T34] kernel read not supported for file /dsp (pid: 34 comm: kworker/3:0) [ 89.582796][ T40] audit: type=1326 audit(1751955760.480:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6994 comm="syz.0.235" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x0 [ 89.734375][ T7000] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.736899][ T7000] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.746537][ T7004] netlink: 4696 bytes leftover after parsing attributes in process `syz.0.236'. [ 89.776831][ T7003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.237'. [ 89.779634][ T7003] openvswitch: netlink: Flow actions attr not present in new flow. [ 89.814926][ T7000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.821369][ T7000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.858633][ T7000] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.862256][ T7000] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.866432][ T7000] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.869474][ T7000] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.887003][ T7004] netlink: 204 bytes leftover after parsing attributes in process `syz.0.236'. [ 90.283694][ T5795] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 90.443783][ T5795] usb 6-1: Using ep0 maxpacket: 32 [ 90.447577][ T5795] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 90.453356][ T5795] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 90.456552][ T5795] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 90.459398][ T5795] usb 6-1: Product: syz [ 90.460996][ T5795] usb 6-1: Manufacturer: syz [ 90.462827][ T5795] usb 6-1: SerialNumber: syz [ 90.539766][ T5795] usb 6-1: config 0 descriptor?? [ 90.542388][ T7013] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 90.724760][ T5795] hub 6-1:0.0: bad descriptor, ignoring hub [ 90.726936][ T5795] hub 6-1:0.0: probe with driver hub failed with error -5 [ 90.921427][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.244'. [ 91.213831][ T61] usb 6-1: USB disconnect, device number 5 [ 91.644974][ T7052] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 91.647065][ T7052] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 91.664404][ T7052] vhci_hcd vhci_hcd.0: Device attached [ 91.670693][ T7053] usbip_core: unknown command [ 91.672713][ T7053] vhci_hcd: unknown pdu 0 [ 91.675813][ T7053] usbip_core: unknown command [ 91.679794][ T70] vhci_hcd: stop threads [ 91.681173][ T70] vhci_hcd: release socket [ 91.682579][ T70] vhci_hcd: disconnect device [ 91.797482][ T7058] netlink: 'syz.2.248': attribute type 10 has an invalid length. [ 91.800178][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'. [ 91.948068][ T61] kernel write not supported for file /snd/midiC2D0 (pid: 61 comm: kworker/3:1) [ 92.583577][ T61] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 92.754873][ T61] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 92.758372][ T61] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 92.761891][ T61] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.769100][ T61] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 92.772049][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 92.775211][ T61] usb 8-1: Product: syz [ 92.776605][ T61] usb 8-1: Manufacturer: syz [ 92.778535][ T61] usb 8-1: SerialNumber: syz [ 92.802018][ T7078] wireguard0: entered promiscuous mode [ 92.803852][ T7078] wireguard0: entered allmulticast mode [ 92.863710][ T6031] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 92.986088][ T61] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 93.024835][ T6031] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.028203][ T6031] usb 6-1: config 0 has no interfaces? [ 93.029954][ T6031] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.032877][ T6031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.041057][ T6031] usb 6-1: config 0 descriptor?? [ 93.195252][ T6031] usb 8-1: USB disconnect, device number 7 [ 93.200759][ T6031] usblp0: removed [ 93.315834][ T7080] lo speed is unknown, defaulting to 1000 [ 93.671828][ T7096] netlink: 196 bytes leftover after parsing attributes in process `syz.2.257'. [ 93.674873][ T7096] netlink: 196 bytes leftover after parsing attributes in process `syz.2.257'. [ 93.865955][ T40] audit: type=1326 audit(1751955764.770:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 93.872745][ T40] audit: type=1326 audit(1751955764.770:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 93.880058][ T40] audit: type=1326 audit(1751955764.770:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 93.888516][ T40] audit: type=1326 audit(1751955764.770:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 93.899243][ T40] audit: type=1326 audit(1751955764.770:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 93.925966][ T7103] syzkaller1: entered promiscuous mode [ 93.927981][ T7103] syzkaller1: entered allmulticast mode [ 94.099882][ T61] usb 6-1: USB disconnect, device number 6 [ 94.188471][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 94.583631][ T40] audit: type=1800 audit(1751955765.480:63): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.262" name="/" dev="9p" ino=2 res=0 errno=0 [ 94.790767][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 95.036410][ T7128] team0: Port device team_slave_0 removed [ 95.125385][ T7127] input: syz1 as /devices/virtual/input/input7 [ 95.130087][ T7127] input: failed to attach handler leds to device input7, error: -6 [ 95.130300][ T7135] sp0: Synchronizing with TNC [ 95.216227][ T7143] 9pnet_fd: Insufficient options for proto=fd [ 95.293064][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 95.682410][ T7130] [U] è` [ 95.689286][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 95.852245][ T7150] pim6reg: entered allmulticast mode [ 96.011308][ T7155] pim6reg: left allmulticast mode [ 96.351597][ T7165] lo speed is unknown, defaulting to 1000 [ 96.475234][ T7176] netlink: 'syz.1.279': attribute type 2 has an invalid length. [ 96.480769][ T7177] netlink: 'syz.1.279': attribute type 2 has an invalid length. [ 96.573634][ T7183] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 96.576068][ T7183] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 96.584432][ T7183] vhci_hcd vhci_hcd.0: Device attached [ 96.589884][ T7184] usbip_core: unknown command [ 96.591915][ T7184] vhci_hcd: unknown pdu 0 [ 96.594293][ T7184] usbip_core: unknown command [ 96.608553][ T13] vhci_hcd: stop threads [ 96.610374][ T13] vhci_hcd: release socket [ 96.612124][ T13] vhci_hcd: disconnect device [ 96.694184][ T7189] binder: 7182:7189 ioctl c01cf509 80000280 returned -22 [ 96.732140][ T7189] netlink: 'syz.2.281': attribute type 10 has an invalid length. [ 96.737160][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 98.123702][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 98.296170][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.301233][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.305286][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.317701][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.332890][ T7201] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.344922][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.540783][ T10] usb 6-1: USB disconnect, device number 7 [ 98.845196][ T7209] tipc: Failed to remove unknown binding: 66,2,3/0:1748156549/1748156550 [ 98.905498][ T40] audit: type=1326 audit(1751955769.800:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7199 comm="syz.1.284" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7fc00000 [ 98.945321][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 98.956653][ T40] audit: type=1326 audit(1751955769.860:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.1.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 98.964405][ T40] audit: type=1326 audit(1751955769.860:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.1.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 98.972907][ T40] audit: type=1326 audit(1751955769.860:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.1.288" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 98.981341][ T40] audit: type=1326 audit(1751955769.860:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.1.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 98.988673][ T40] audit: type=1326 audit(1751955769.860:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.1.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 98.997612][ T40] audit: type=1326 audit(1751955769.860:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.1.288" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 99.006067][ T40] audit: type=1326 audit(1751955769.860:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.1.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 99.013031][ T40] audit: type=1326 audit(1751955769.860:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.1.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 99.164569][ T7214] syz.1.288 (7214) used greatest stack depth: 20568 bytes left [ 100.282347][ T7234] lo speed is unknown, defaulting to 1000 [ 100.506216][ T40] kauditd_printk_skb: 71 callbacks suppressed [ 100.506280][ T40] audit: type=1326 audit(1751955771.400:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 100.515633][ T40] audit: type=1326 audit(1751955771.400:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 100.522735][ T40] audit: type=1326 audit(1751955771.410:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 100.530101][ T40] audit: type=1326 audit(1751955771.410:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 100.538220][ T40] audit: type=1326 audit(1751955771.410:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 100.545356][ T40] audit: type=1326 audit(1751955771.410:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 100.553414][ T40] audit: type=1326 audit(1751955771.410:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 100.560496][ T40] audit: type=1326 audit(1751955771.410:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 100.568203][ T40] audit: type=1326 audit(1751955771.410:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 100.575424][ T40] audit: type=1326 audit(1751955771.410:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 100.827290][ T7250] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 100.829871][ T7250] overlayfs: failed to set xattr on upper [ 100.831766][ T7250] overlayfs: ...falling back to redirect_dir=nofollow. [ 100.834070][ T7250] overlayfs: ...falling back to index=off. [ 101.074768][ T7253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.084229][ T7253] bond0: (slave rose0): Enslaving as an active interface with an up link [ 101.596293][ T7270] lo speed is unknown, defaulting to 1000 [ 102.452007][ T7290] sctp: [Deprecated]: syz.3.307 (pid 7290) Use of int in max_burst socket option deprecated. [ 102.452007][ T7290] Use struct sctp_assoc_value instead [ 102.562660][ T7297] netfs: Couldn't get user pages (rc=-14) [ 102.617282][ T7300] tmpfs: Bad value for 'nr_blocks' [ 103.112212][ T7313] netlink: 'syz.2.314': attribute type 1 has an invalid length. [ 103.126638][ T7313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.135554][ T7313] vlan0: entered allmulticast mode [ 103.137346][ T7313] geneve1: entered allmulticast mode [ 103.140347][ T7315] netlink: 'syz.2.314': attribute type 1 has an invalid length. [ 103.815870][ T7337] netlink: 'syz.1.320': attribute type 10 has an invalid length. [ 103.818620][ T7337] netlink: 40 bytes leftover after parsing attributes in process `syz.1.320'. [ 103.821516][ T7337] dummy0: entered promiscuous mode [ 104.516137][ T7339] netlink: 'syz.1.320': attribute type 39 has an invalid length. [ 106.266827][ T7377] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 106.678425][ T7392] netlink: 84 bytes leftover after parsing attributes in process `syz.2.333'. [ 107.358114][ T7419] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 107.945281][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'. [ 108.294875][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.349'. [ 108.298809][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 108.317500][ T5970] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 108.320879][ T5970] CPU: 3 UID: 0 PID: 5970 Comm: kworker/u33:5 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 108.320894][ T5970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.320901][ T5970] Workqueue: hci3 hci_rx_work [ 108.320924][ T5970] Call Trace: [ 108.320930][ T5970] [ 108.320937][ T5970] dump_stack_lvl+0x16c/0x1f0 [ 108.320964][ T5970] sysfs_warn_dup+0x7f/0xa0 [ 108.320989][ T5970] sysfs_create_dir_ns+0x24b/0x2b0 [ 108.321011][ T5970] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 108.321033][ T5970] ? find_held_lock+0x2b/0x80 [ 108.321057][ T5970] ? do_raw_spin_unlock+0x172/0x230 [ 108.321085][ T5970] kobject_add_internal+0x2c4/0x9b0 [ 108.321101][ T5970] kobject_add+0x16e/0x240 [ 108.321111][ T5970] ? __pfx_kobject_add+0x10/0x10 [ 108.321122][ T5970] ? do_raw_spin_unlock+0x172/0x230 [ 108.321139][ T5970] ? kobject_put+0xab/0x5a0 [ 108.321160][ T5970] device_add+0x288/0x1a70 [ 108.321172][ T5970] ? __pfx_dev_set_name+0x10/0x10 [ 108.321185][ T5970] ? __pfx_device_add+0x10/0x10 [ 108.321196][ T5970] ? mgmt_send_event_skb+0x2fb/0x460 [ 108.321217][ T5970] hci_conn_add_sysfs+0x17e/0x230 [ 108.321236][ T5970] le_conn_complete_evt+0x1075/0x1d70 [ 108.321256][ T5970] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 108.321271][ T5970] ? hci_event_packet+0x459/0x11c0 [ 108.321291][ T5970] hci_le_conn_complete_evt+0x23c/0x370 [ 108.321312][ T5970] hci_le_meta_evt+0x357/0x5e0 [ 108.321329][ T5970] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 108.321347][ T5970] hci_event_packet+0x682/0x11c0 [ 108.321363][ T5970] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 108.321381][ T5970] ? __pfx_hci_event_packet+0x10/0x10 [ 108.321398][ T5970] ? kcov_remote_start+0x3c9/0x6d0 [ 108.321414][ T5970] ? lockdep_hardirqs_on+0x7c/0x110 [ 108.321433][ T5970] hci_rx_work+0x2c5/0x16b0 [ 108.321451][ T5970] ? rcu_is_watching+0x12/0xc0 [ 108.321464][ T5970] process_one_work+0x9cc/0x1b70 [ 108.321489][ T5970] ? __pfx_process_one_work+0x10/0x10 [ 108.321512][ T5970] ? assign_work+0x1a0/0x250 [ 108.321529][ T5970] worker_thread+0x6c8/0xf10 [ 108.321552][ T5970] ? __pfx_worker_thread+0x10/0x10 [ 108.321570][ T5970] kthread+0x3c5/0x780 [ 108.321586][ T5970] ? __pfx_kthread+0x10/0x10 [ 108.321603][ T5970] ? rcu_is_watching+0x12/0xc0 [ 108.321614][ T5970] ? __pfx_kthread+0x10/0x10 [ 108.321630][ T5970] ret_from_fork+0x5d4/0x6f0 [ 108.321646][ T5970] ? __pfx_kthread+0x10/0x10 [ 108.321662][ T5970] ret_from_fork_asm+0x1a/0x30 [ 108.321681][ T5970] [ 108.321696][ T5970] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 108.324499][ T5322] Bluetooth: hci0: command tx timeout [ 108.326080][ T5970] Bluetooth: hci3: failed to register connection device [ 108.449861][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.349'. [ 108.452695][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 108.459834][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.349'. [ 108.462631][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 108.466540][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.349'. [ 109.023632][ T7472] wireguard0: entered promiscuous mode [ 109.025637][ T7472] wireguard0: entered allmulticast mode [ 109.068309][ T7474] __nla_validate_parse: 59 callbacks suppressed [ 109.068349][ T7474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.352'. [ 109.074773][ T7474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.352'. [ 109.114719][ T7474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.352'. [ 109.117674][ T7474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.352'. [ 109.160002][ T7477] ================================================================== [ 109.160012][ T7477] BUG: KASAN: global-out-of-bounds in bit_putcs+0xa63/0xde0 [ 109.160029][ T7477] Read of size 1 at addr ffffffff8c187210 by task syz.0.352/7477 [ 109.160038][ T7477] [ 109.160044][ T7477] CPU: 0 UID: 0 PID: 7477 Comm: syz.0.352 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 109.160057][ T7477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.160064][ T7477] Call Trace: [ 109.160068][ T7477] [ 109.160072][ T7477] dump_stack_lvl+0x116/0x1f0 [ 109.160091][ T7477] print_report+0xcd/0x680 [ 109.160101][ T7477] ? __virt_addr_valid+0x81/0x610 [ 109.160113][ T7477] ? __phys_addr+0xe8/0x180 [ 109.160125][ T7477] ? bit_putcs+0xa63/0xde0 [ 109.160133][ T7477] kasan_report+0xe0/0x110 [ 109.160143][ T7477] ? bit_putcs+0xa63/0xde0 [ 109.160154][ T7477] bit_putcs+0xa63/0xde0 [ 109.160167][ T7477] ? __pfx_bit_putcs+0x10/0x10 [ 109.160178][ T7477] ? fb_get_color_depth+0x120/0x250 [ 109.160194][ T7477] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.160213][ T7477] ? __pfx_bit_putcs+0x10/0x10 [ 109.160222][ T7477] fbcon_putcs+0x380/0x4a0 [ 109.160237][ T7477] ? __pfx_fbcon_putcs+0x10/0x10 [ 109.160253][ T7477] do_con_write+0xff0/0x8280 [ 109.160267][ T7477] ? __pfx___mutex_lock+0x10/0x10 [ 109.160284][ T7477] ? __pfx_do_con_write+0x10/0x10 [ 109.160293][ T7477] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 109.160313][ T7477] con_write+0x23/0xb0 [ 109.160322][ T7477] n_tty_write+0x40f/0x1160 [ 109.160337][ T7477] ? __pfx_n_tty_write+0x10/0x10 [ 109.160350][ T7477] ? __pfx_woken_wake_function+0x10/0x10 [ 109.160362][ T7477] ? __pfx___might_resched+0x10/0x10 [ 109.160375][ T7477] ? __pfx_n_tty_write+0x10/0x10 [ 109.160387][ T7477] file_tty_write.constprop.0+0x501/0x9b0 [ 109.160407][ T7477] vfs_write+0x6c4/0x1150 [ 109.160423][ T7477] ? __pfx_tty_write+0x10/0x10 [ 109.160440][ T7477] ? __pfx_vfs_write+0x10/0x10 [ 109.160454][ T7477] ? find_held_lock+0x2b/0x80 [ 109.160472][ T7477] ksys_write+0x12a/0x250 [ 109.160487][ T7477] ? __pfx_ksys_write+0x10/0x10 [ 109.160503][ T7477] ? rcu_is_watching+0x12/0xc0 [ 109.160516][ T7477] __do_fast_syscall_32+0x7c/0x3a0 [ 109.160533][ T7477] do_fast_syscall_32+0x32/0x80 [ 109.160550][ T7477] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.160564][ T7477] RIP: 0023:0xf708e579 [ 109.160577][ T7477] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 109.160588][ T7477] RSP: 002b:00000000f4c1955c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 109.160599][ T7477] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000080000000 [ 109.160605][ T7477] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.160612][ T7477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.160618][ T7477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.160624][ T7477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.160634][ T7477] [ 109.160638][ T7477] [ 109.160640][ T7477] The buggy address belongs to the variable: [ 109.160644][ T7477] type_check_kinds+0x2d0/0xc80 [ 109.160660][ T7477] [ 109.160662][ T7477] The buggy address belongs to the physical page: [ 109.160666][ T7477] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xc187 [ 109.160676][ T7477] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 109.160692][ T7477] raw: 00fff00000002000 ffffea00003061c8 ffffea00003061c8 0000000000000000 [ 109.160702][ T7477] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 109.160708][ T7477] page dumped because: kasan: bad access detected [ 109.160713][ T7477] page_owner info is not present (never set?) [ 109.160717][ T7477] [ 109.160719][ T7477] Memory state around the buggy address: [ 109.160724][ T7477] ffffffff8c187100: 00 01 f9 f9 f9 f9 f9 f9 00 05 f9 f9 f9 f9 f9 f9 [ 109.160731][ T7477] ffffffff8c187180: 03 f9 f9 f9 f9 f9 f9 f9 03 f9 f9 f9 f9 f9 f9 f9 [ 109.160739][ T7477] >ffffffff8c187200: 03 f9 f9 f9 f9 f9 f9 f9 00 07 f9 f9 f9 f9 f9 f9 [ 109.160745][ T7477] ^ [ 109.160750][ T7477] ffffffff8c187280: 00 07 f9 f9 f9 f9 f9 f9 00 06 f9 f9 f9 f9 f9 f9 [ 109.160758][ T7477] ffffffff8c187300: 06 f9 f9 f9 f9 f9 f9 f9 00 06 f9 f9 f9 f9 f9 f9 [ 109.160763][ T7477] ================================================================== [ 109.160770][ T7477] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.160776][ T7477] CPU: 0 UID: 0 PID: 7477 Comm: syz.0.352 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 109.160789][ T7477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 109.160795][ T7477] Call Trace: [ 109.160799][ T7477] [ 109.160803][ T7477] dump_stack_lvl+0x3d/0x1f0 [ 109.160819][ T7477] panic+0x71c/0x800 [ 109.160835][ T7477] ? __pfx_panic+0x10/0x10 [ 109.160851][ T7477] ? __pfx__printk+0x10/0x10 [ 109.160869][ T7477] ? bit_putcs+0xa63/0xde0 [ 109.160878][ T7477] check_panic_on_warn+0xab/0xb0 [ 109.160895][ T7477] end_report+0x107/0x170 [ 109.160905][ T7477] kasan_report+0xee/0x110 [ 109.160915][ T7477] ? bit_putcs+0xa63/0xde0 [ 109.160926][ T7477] bit_putcs+0xa63/0xde0 [ 109.160938][ T7477] ? __pfx_bit_putcs+0x10/0x10 [ 109.160950][ T7477] ? fb_get_color_depth+0x120/0x250 [ 109.160966][ T7477] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.160983][ T7477] ? __pfx_bit_putcs+0x10/0x10 [ 109.160993][ T7477] fbcon_putcs+0x380/0x4a0 [ 109.161008][ T7477] ? __pfx_fbcon_putcs+0x10/0x10 [ 109.161024][ T7477] do_con_write+0xff0/0x8280 [ 109.161037][ T7477] ? __pfx___mutex_lock+0x10/0x10 [ 109.161054][ T7477] ? __pfx_do_con_write+0x10/0x10 [ 109.161063][ T7477] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 109.161083][ T7477] con_write+0x23/0xb0 [ 109.161092][ T7477] n_tty_write+0x40f/0x1160 [ 109.161107][ T7477] ? __pfx_n_tty_write+0x10/0x10 [ 109.161120][ T7477] ? __pfx_woken_wake_function+0x10/0x10 [ 109.161131][ T7477] ? __pfx___might_resched+0x10/0x10 [ 109.161143][ T7477] ? __pfx_n_tty_write+0x10/0x10 [ 109.161156][ T7477] file_tty_write.constprop.0+0x501/0x9b0 [ 109.161175][ T7477] vfs_write+0x6c4/0x1150 [ 109.161191][ T7477] ? __pfx_tty_write+0x10/0x10 [ 109.161208][ T7477] ? __pfx_vfs_write+0x10/0x10 [ 109.161223][ T7477] ? find_held_lock+0x2b/0x80 [ 109.161238][ T7477] ksys_write+0x12a/0x250 [ 109.161253][ T7477] ? __pfx_ksys_write+0x10/0x10 [ 109.161269][ T7477] ? rcu_is_watching+0x12/0xc0 [ 109.161282][ T7477] __do_fast_syscall_32+0x7c/0x3a0 [ 109.161299][ T7477] do_fast_syscall_32+0x32/0x80 [ 109.161316][ T7477] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.161329][ T7477] RIP: 0023:0xf708e579 [ 109.161337][ T7477] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 109.161347][ T7477] RSP: 002b:00000000f4c1955c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 109.161357][ T7477] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000080000000 [ 109.161364][ T7477] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.161371][ T7477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.161377][ T7477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.161384][ T7477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.161394][ T7477] [ 109.162110][ T7477] Kernel Offset: disabled VM DIAGNOSIS: 06:23:00 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85582c95 RDI=ffffffff9b0a9980 RBP=ffffffff9b0a9940 RSP=ffffc90004fcf258 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000063 R14=ffffffff9b0a9940 R15=ffffffff85582c30 RIP=ffffffff85582cbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097523000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73e7554 CR3=000000001b524000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff816048c0 RDX=ffff88801deda440 RSI=ffffffff81604908 RDI=ffffffff93d4f080 RBP=0000000000000001 RSP=ffffc90000590fd0 R8 =0000000000000001 R9 =fffffbfff27a9e10 R10=ffffffff93d4f087 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81604909 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097623000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000a000 CR3=000000001b524000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff816048c0 RDX=ffff88801dedc880 RSI=ffffffff81604908 RDI=ffffffff93d4f080 RBP=0000000000000002 RSP=ffffc90000538fd0 R8 =0000000000000001 R9 =fffffbfff27a9e10 R10=ffffffff93d4f087 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81604909 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097723000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa47d44c8a0 CR3=00000000683a1000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff816048c0 RDX=ffff88802a752440 RSI=ffffffff81604908 RDI=ffffffff93d4f080 RBP=0000000000000003 RSP=ffffc900005e8fd0 R8 =0000000000000001 R9 =fffffbfff27a9e10 R10=ffffffff93d4f087 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81604909 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097823000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa47d17deb8 CR3=00000000282ef000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00312e6f732e7875 6e696c657362696c ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00312e6f732e7875 6e696c657362696c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000