last executing test programs: 7.439410549s ago: executing program 3 (id=373): r0 = socket$kcm(0x2, 0x1, 0x84) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$kcm(r0, 0x0, 0x24004000) sendmsg$inet(r0, &(0x7f0000002c00)={&(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000880)=[{&(0x7f00000006c0)='p', 0x1}], 0x1}, 0x40000) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{0x0}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 7.008249101s ago: executing program 0 (id=375): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) r1 = syz_io_uring_setup(0xa39, &(0x7f00000000c0)={0x0, 0xfdc8, 0x8}, &(0x7f00000002c0)=0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000005c0)=0xe4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000600)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="18000400010000004b0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="10000000", @ANYRES32=r1, @ANYBLOB="200000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32], 0x90, 0x4000800}}], 0x1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)={0x2c, @remote, 0x4e23, 0x2, 'wrr\x00', 0x6, 0x81, 0x4b}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000580)=@raw=[@tail_call], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010000304fcffffff3f0000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000", @ANYRES32=r8, @ANYBLOB], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x2, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801000020d77c89536c2500000000002020207b1af8ff00000000bfa100000000001a07010000f8ffffffb702000008000000b703000000002a978500000000000000956b8f84b283dc09aa4d06c14e5322a94561dfbd36af08154f6abf3c33477b2bf2563e48ea172970f0c3d33935db3a8bb183084c7782d3be73bc490bedc1c87084e35db15116e3e558e620f98be955e6e4d57ca9f7e9292f52e9e2aecf69aed5fe75fdafb27dd130742e1e3d3c4c3bb346c3261c3c41f4d50e1d4bdbf6f6c1192ba1850a42f2fd988759fff4d91c3205e2ab16da2649c9a9ac74686a320a"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r9}, 0xc) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r9, 0x68758000) connect$unix(r5, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0045543, &(0x7f0000000180)=0xf) 7.007448641s ago: executing program 1 (id=376): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 6.95801585s ago: executing program 0 (id=377): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000011000010000000000000000000a000a0000000000000001080000000000000000010000090900010073797a310000000014000000020a010300000000000000000000000020000000030a0102000000000000000001000006"], 0x7c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 6.957367731s ago: executing program 1 (id=378): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd', @ANYRESHEX]) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) write$6lowpan_control(r4, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x2c, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000900000000000000000000ac1e000100000000000000000000000000000000000000000a0040", @ANYRESHEX=r5, @ANYRES16=r5, @ANYBLOB="83727cafcb5e7f004ad486f96a29028c9c066da99f12fb02f61783e5d81fce8794eca2d9a0f413750b6ec2d335b7c0eaa7bb13f198193a3f6b988e6e2f568ac7ce1ee9cba2b156b3466c73f724d6a2bfdd43c35b1915a28f9428137426d0e598b78bbdec126adbb342a3719ed7d5b095d3b8c2cc1623eda000bd4d075bf103cfaf56f529276778dd0ed048fb7081d6536b900aa8513c7d0e59ab709b084eb4ed65511dd7a5354a0a45a2e708a2f3107ed057fb9bafe22e700643f1f1729042a135e151034b9c74ae3c"], 0xb8}, 0x1, 0x0, 0x0, 0x8041}, 0x4000) 6.90887343s ago: executing program 0 (id=379): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x3f}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c011}, 0x88a0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10}}, 0x74}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f0000000280)) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r10, 0x0) r11 = signalfd(r0, &(0x7f0000000300)={[0x1, 0xfffffeff]}, 0x8) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000000c0)={[0x10009, 0x9, 0xffffffffffffffff, 0x5, 0x3, 0xffffffffffffffff, 0x7a6e, 0x4, 0xfc, 0xf, 0x4000000000008, 0xc0, 0x2, 0x2, 0xfffffffffffffffc, 0x2], 0x5000, 0x8340}) r12 = dup(r7) syz_usb_connect$hid(0x7, 0x0, 0x0, &(0x7f0000000700)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x57, 0x6, 0x8, 0x8, 0x71}, 0x0, 0x0}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_RUN(r12, 0xae80, 0x0) 6.53818824s ago: executing program 3 (id=380): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) close(r1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) epoll_create1(0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone3(&(0x7f00000006c0)={0x10000000, &(0x7f00000007c0), 0x0, &(0x7f0000000500), {0x25}, 0x0, 0x0, &(0x7f0000000600)=""/87, &(0x7f0000000580)=[0x0, 0x0], 0x2}, 0x58) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000740)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) 6.121396303s ago: executing program 0 (id=381): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd', @ANYRESHEX]) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000090000000000000000", @ANYRESHEX=r5, @ANYRES16=r5, @ANYBLOB="83727cafcb5e7f004ad486f96a29028c9c066da99f12fb02f61783e5d81fce8794eca2d9a0f413750b6ec2d335b7c0eaa7bb13f198193a3f6b988e6e2f568ac7ce1ee9cba2b156b3466c73f724d6a2bfdd43c35b1915a28f9428137426d0e598b78bbdec126adbb342a3719ed7d5b095d3b8c2cc1623eda000bd4d075bf103cfaf56f529276778dd0ed048fb7081d6536b900aa8513c7d0e59ab709b084eb4ed65511dd7a5354a0a45a2e708a2f3107ed057fb9bafe22e700643f1f1729042a135e151034b9c74ae3c"], 0xb8}, 0x1, 0x0, 0x0, 0x8041}, 0x4000) 4.919407262s ago: executing program 3 (id=383): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) 4.915741086s ago: executing program 2 (id=391): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r2, &(0x7f0000000e00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000480)="8c3206c17e367ae04671233facb3e7ac8f79975047cc48f37cbb2a2685c6274a6e46e5222b10a12fa3", 0x29}, {0x0}], 0x2}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r4 = syz_clone(0x4038000, &(0x7f00000001c0)="ce6c21ee23995e760cf0ea262d7a25d4bf336e15dd8906a93c2aacad74a32323c3b52bd251a39ddd44219b2111783adf475deaa4ff9ae8ad0f8d55b7230cb36fb26503fa7f7b91f9f023f3844c337fd18cdc2bbba71a8225228e6af7909981e888a9942e4334d16bfb17f7f9146826fb38194fd78df46d96a6cec667d30ab0e30b53ea260bb2d3b6939a66c53afb7b266610dff2d4f1d0c2", 0x98, &(0x7f0000000280), &(0x7f0000000480), &(0x7f00000004c0)="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") prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x4010, 0xffffffffffffffff, 0x0) unshare(0x22020600) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x6, 0x16d20415, 0x8, 0xfffffffb, 0x1000, 0xb2e2, 0x6, 0xffff, 0x0, 0x9, 0x5b7d, 0xd8, 0x6, 0x3ff, 0x7, 0x0, 0x4ad, 0x101, 0x55e2, 0xffff, 0x403, 0x5}}) syz_io_uring_setup(0x7b1d, &(0x7f0000000280)={0x0, 0x0, 0x8000, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000002000000e000000200"/123], 0x18c) read$FUSE(r6, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00') 3.949599089s ago: executing program 2 (id=384): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r6 = dup2(r5, r3) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) sendmsg$nl_route(r6, 0x0, 0x4000000) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x262) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x300, 0x0, 0x0, 0x54}, 0x9c) 3.902528154s ago: executing program 1 (id=385): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000100)=@x86={0x1, 0x0, 0x40, 0x0, 0x1ed5, 0x75, 0xf, 0x81, 0x4, 0x8, 0xc0, 0x4, 0x0, 0x10, 0x85, 0x5, 0x8, 0x4, 0x4, '\x00', 0x1, 0x927}) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8000}) syz_open_dev$vim2m(&(0x7f0000000080), 0x20007, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="0002020100000000ff020000000000000000000000000001"], 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000000), 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05ffff"], 0x0, 0x1bd2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x6}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x2, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0xfffff807, 0x0, 0x5, 0x48, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x7fff, 0xa, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x7, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092aa, 0x4, 0x1, 0x30000000, 0x80, 0xdee9, 0x7, 0x6, 0x8, 0x800004, 0x1, 0x40], [0x4, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x4f6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x40, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x40, 0x1, 0x0, 0xfffffffe, 0x0, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8cd, 0x5f31, 0x4, 0x900000, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x5, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400005], [0x6, 0x3, 0x80000400, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x400, 0x800001, 0xb, 0x5, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x6, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x440, 0x80, 0x3, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0x3f, 0x10002, 0x40e, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x1, 0x6, 0x1d, 0x7, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x81, 0xbb31, 0x203, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x71, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x9, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc6, 0xee1, 0x0, 0xffff, 0x3, 0x40000004, 0x100, 0x20009602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r7, r7, r7}, &(0x7f0000001cc0)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000000)={'sha384-arm64\x00'}}) 3.654030091s ago: executing program 3 (id=386): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7}, 0x1c) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260", 0xf}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c81, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c11) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) fchdir(0xffffffffffffffff) 3.013136787s ago: executing program 0 (id=387): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt(r1, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}, r5}}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x100000, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)="ee", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x101, @loopback, 0x8000005}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="4b8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 2.957366917s ago: executing program 2 (id=388): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="d0", 0x1}], 0x1}}], 0x1, 0x0) 2.95452197s ago: executing program 1 (id=397): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000240)=ANY=[]) r7 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r7, 0x200004) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$unix(0x1, 0x1, 0x0) bind$unix(r10, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x5c}, 0x6e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$apparmor_exec(r7, 0x0, 0x8) sendfile(r3, r7, 0x0, 0x80001d00c0d1) bind$unix(0xffffffffffffffff, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.018821873s ago: executing program 2 (id=389): openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000001c0), 0x0) r3 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="580000000206030000000000090000000000000013000300686173683a6e65f115cc46e8b46e4a747b2e81befa08a6742c696661636500000900020073797a31000000000c000780080012400ffffffc05000500ee0248d09ee3508ab882fbfc3c6a08965188da1340efa7efc51ee7ab06a303fb8c15ff"], 0x58}}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000040)={0x3fffffff, 0x0, "6a3ce4ab8ed6c54797be28dc6b7dcc8d5eba4a0f1dea455e02c75ec18cfcdbf4"}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_emit_ethernet(0x2e1, &(0x7f0000000400)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2ab, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, [{0x0, 0x5, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad9657926974"}, {0x0, 0x1, "000000050000"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d000000000000"}, {0x0, 0x5, "17dcea46c56aa00148c356de6b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e6"}, {0x18, 0x7, "b8a3e10000a3e1100000006f00ff12164039d0ebab140888c235c0fffe00000000600000ff0bc0fe0000000000000000fe20e23f6541c3"}, {0x3, 0xa, "41489859faad6b7894fe1137424008d432183a0113681c77fc82aec87a233d898a11c5cd98182e0722cd47409df61e0bba337962ebd666210dc03bdacde3052d2e9c5aa731b244867e503ea12228ee0be34e90"}]}}}}}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) r6 = openat$vim2m(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0cc5605, &(0x7f0000000c80)={0x2, @sliced={0x8, [0x4, 0x7fff, 0x8, 0xf800, 0x2, 0x9, 0x2, 0x7, 0x1, 0xfff9, 0x401, 0xa9ef, 0x6, 0x2, 0x4, 0x6, 0x2, 0x38, 0x1, 0xffff, 0x8, 0x7, 0x3, 0xfffd, 0x5, 0xacb, 0x3, 0x7, 0x5f, 0x40, 0x4, 0xfc00, 0x2, 0x2, 0x0, 0xfffc, 0x2, 0x972, 0x1ff, 0x8, 0xc00, 0xddb, 0x4, 0x4, 0xd477, 0x9, 0x8], 0x2}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r7}, 0x50) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x38) 2.018605782s ago: executing program 3 (id=390): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r2, 0x4000000007, 0x1) 1.894657187s ago: executing program 1 (id=392): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x454, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x38c, 0x1398, 0x1398, 0x38c, 0x1398, 0x3, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffff00, 0xffffff00, 0xff000000, 0xff], [0xff000000, 0xffffff00], 'nr0\x00', 'vlan0\x00', {}, {}, 0x6, 0x8, 0x2, 0xf}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x4, 0x0, [], [], 0xfd}}, @common=@unspec=@connmark={{0x2c}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'veth0_to_hsr\x00'}}}, {{@uncond, 0x0, 0x1dc, 0x224, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@remote, @local, @remote, @remote, @private1, @rand_addr=' \x01\x00', @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x2, 0xfffffffe, 0x7, 'pptp\x00', {0x233c}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4b0) listen(0xffffffffffffffff, 0x802) socket$packet(0x11, 0xf8ee34745f88a816, 0x300) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000200)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="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", 0x3bd}], 0x1}}], 0x1, 0x40000d0) sendto$inet(r3, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea4", 0x4d, 0x40040011, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 1.876834584s ago: executing program 0 (id=393): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='decodes m'], 0xf) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000040)={0x27, 0x7fffffff, {}, {0xffffffffffffffff}, 0x0, 0x401}) getegid() getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000010) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000280)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x80000000, 0x3a, '#$\xd8.}', 0x3a, '^,.', 0x3a, './file0', 0x3a, [0x4f, 0x50, 0x46, 0x4f]}, 0x33) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/profiling', 0x22042, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) get_mempolicy(&(0x7f0000000000), 0x0, 0x3, &(0x7f0000761000/0x4000)=nil, 0x3) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) r9 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in=@local, 0x1, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x100000000, 0xc6}, {0x4, 0xfef2}, 0x0, 0x41, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x3, 0x0, 0x0, 0x40, 0xb}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4e24, 0x0, 0x0, 0x9, 0x2, 0x0, 0x20, 0x73}, {0x10000, 0xecd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7789, 0x10000}, {0x0, 0xfffffffffffffffd, 0x1}}, {{@in6=@mcast2, 0x4d7, 0x3c}, 0x0, @in=@private=0xa0100fc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xe4) close(r9) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.088528415s ago: executing program 3 (id=394): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r2, &(0x7f0000000e00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000480)="8c3206c17e367ae04671233facb3e7ac8f79975047cc48f37cbb2a2685c6274a6e46e5222b10a12fa3", 0x29}, {0x0}], 0x2}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r4 = syz_clone(0x4038000, &(0x7f00000001c0)="ce6c21ee23995e760cf0ea262d7a25d4bf336e15dd8906a93c2aacad74a32323c3b52bd251a39ddd44219b2111783adf475deaa4ff9ae8ad0f8d55b7230cb36fb26503fa7f7b91f9f023f3844c337fd18cdc2bbba71a8225228e6af7909981e888a9942e4334d16bfb17f7f9146826fb38194fd78df46d96a6cec667d30ab0e30b53ea260bb2d3b6939a66c53afb7b266610dff2d4f1d0c29c9b", 0x9a, &(0x7f0000000280), &(0x7f0000000480), &(0x7f00000004c0)="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") prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x4010, 0xffffffffffffffff, 0x0) unshare(0x22020600) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x6, 0x16d20415, 0x8, 0xfffffffb, 0x1000, 0xb2e2, 0x6, 0xffff, 0x0, 0x9, 0x5b7d, 0xd8, 0x6, 0x3ff, 0x7, 0x0, 0x4ad, 0x101, 0x55e2, 0xffff, 0x403, 0x5}}) syz_io_uring_setup(0x7b1d, &(0x7f0000000280)={0x0, 0x0, 0x8000, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000"], 0x18c) read$FUSE(r6, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00') 1.078721319s ago: executing program 2 (id=395): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) unshare(0x22020400) flistxattr(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) close(r2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000000)={0x1, 0x5, [{0x8, 0x0, 0x6}]}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0xf, 0x1, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x2, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x8000000, 0xffff1000, 0x0, 0x2, 0xfe, 0x10, 0x0, 0x0, 0x3, 0x8, 0x4}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5}, {0xe000, 0x5000, 0xa, 0x0, 0x7, 0xf9, 0x0, 0xfe, 0x3a, 0x2}, {0x3000, 0x3000, 0xa, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x0, 0x5}, {0x8080000, 0x400}, {}, 0xddf8ffdb, 0x0, 0x1, 0x100, 0x8, 0x8000, 0x80a0000, [0xdd41, 0x4, 0x6]}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f00000002c0)={0x1000, 0x4, 0x2, 0x5, 0x50}) 8.948681ms ago: executing program 2 (id=396): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x9, 0x14, 0xc2}, &(0x7f00000007c0)=0x0, &(0x7f0000000200)) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) close(0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) recvmsg$can_j1939(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000400)=""/143, 0x8f}], 0x1, &(0x7f00000004c0)=""/66, 0x42}, 0x0) memfd_create(&(0x7f0000000540)=':\x91!/\x00', 0x1) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x74a, 0x410000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r6, 0xc25c4111, &(0x7f0000000100)={0x3, [[0x7, 0x101, 0x80, 0x3, 0x4c7, 0x5, 0x4, 0x8], [0x2, 0x6, 0xd4, 0x7, 0x7fffffff, 0x4, 0x400, 0x3], [0x7ff, 0xffffff21, 0x1, 0x8, 0x5, 0x800000, 0x1, 0x6]], '\x00', [{0x5, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x9, 0x1, 0x1, 0x1}, {0x1, 0x7fffffff, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x7fff, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xfffffff7, 0x6, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x1, 0x0, 0x1}, {0xe3, 0x8c4, 0x0, 0x1, 0x1, 0x1}, {0x1000, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x4, 0x0, 0x0, 0x1}, {0xb85, 0x4, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x0, 0x1}], '\x00', 0xc823}) 0s ago: executing program 1 (id=405): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2}, 'syz0\x00', 0x35}) ioctl$UI_DEV_CREATE(r0, 0x5501) read(r0, &(0x7f0000000280)=""/44, 0x2c) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:17966' (ED25519) to the list of known hosts. [ 56.386644][ T5955] cgroup: Unknown subsys name 'net' [ 56.493237][ T5955] cgroup: Unknown subsys name 'cpuset' [ 56.499077][ T5955] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 57.648103][ T5955] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.102186][ T5969] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.108866][ T5969] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.112217][ T5969] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.115812][ T5969] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.119504][ T5969] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.143428][ T5324] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.147529][ T5324] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.151120][ T5324] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.154928][ T5324] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.179631][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.183054][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.185381][ T5981] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.188176][ T5981] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.192507][ T5981] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.196251][ T5981] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.212089][ T5978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.215228][ T5978] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.218983][ T5969] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.222078][ T5969] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.225654][ T5969] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.285999][ T5966] chnl_net:caif_netlink_parms(): no params data found [ 62.465554][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.468414][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.471737][ T5966] bridge_slave_0: entered allmulticast mode [ 62.474503][ T5966] bridge_slave_0: entered promiscuous mode [ 62.478330][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.480920][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.483213][ T5966] bridge_slave_1: entered allmulticast mode [ 62.485845][ T5966] bridge_slave_1: entered promiscuous mode [ 62.540887][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.546616][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.601723][ T5966] team0: Port device team_slave_0 added [ 62.608689][ T5966] team0: Port device team_slave_1 added [ 62.698282][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.700681][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.708702][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.726555][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.729742][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.740419][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.785262][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 62.881651][ T5966] hsr_slave_0: entered promiscuous mode [ 62.885039][ T5966] hsr_slave_1: entered promiscuous mode [ 62.936658][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 62.975657][ T5974] chnl_net:caif_netlink_parms(): no params data found [ 63.041440][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.043754][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.046262][ T5972] bridge_slave_0: entered allmulticast mode [ 63.049391][ T5972] bridge_slave_0: entered promiscuous mode [ 63.058023][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.060421][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.062768][ T5972] bridge_slave_1: entered allmulticast mode [ 63.065405][ T5972] bridge_slave_1: entered promiscuous mode [ 63.143536][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.151426][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.253564][ T5972] team0: Port device team_slave_0 added [ 63.307128][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.310330][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.313216][ T5974] bridge_slave_0: entered allmulticast mode [ 63.316588][ T5974] bridge_slave_0: entered promiscuous mode [ 63.322009][ T5972] team0: Port device team_slave_1 added [ 63.367783][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.370437][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.373085][ T5974] bridge_slave_1: entered allmulticast mode [ 63.375730][ T5974] bridge_slave_1: entered promiscuous mode [ 63.410990][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.414007][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.416964][ T5970] bridge_slave_0: entered allmulticast mode [ 63.420536][ T5970] bridge_slave_0: entered promiscuous mode [ 63.425244][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.428016][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.430563][ T5970] bridge_slave_1: entered allmulticast mode [ 63.433226][ T5970] bridge_slave_1: entered promiscuous mode [ 63.486252][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.491327][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.495139][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.498120][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.509217][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.562479][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.565492][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.576634][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.590552][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.623740][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.628981][ T5974] team0: Port device team_slave_0 added [ 63.633452][ T5974] team0: Port device team_slave_1 added [ 63.738435][ T5970] team0: Port device team_slave_0 added [ 63.741226][ T5966] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.799338][ T5970] team0: Port device team_slave_1 added [ 63.801478][ T5966] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.808711][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.811179][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.820316][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.828095][ T5972] hsr_slave_0: entered promiscuous mode [ 63.831721][ T5972] hsr_slave_1: entered promiscuous mode [ 63.834741][ T5972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.837998][ T5972] Cannot create hsr debugfs directory [ 63.879929][ T5966] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.886709][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.889914][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.900802][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.906910][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.909386][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.918385][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.923514][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.925698][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.933774][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.937319][ T5966] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.051174][ T5970] hsr_slave_0: entered promiscuous mode [ 64.053634][ T5970] hsr_slave_1: entered promiscuous mode [ 64.055690][ T5970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.058072][ T5970] Cannot create hsr debugfs directory [ 64.085301][ T5974] hsr_slave_0: entered promiscuous mode [ 64.087926][ T5974] hsr_slave_1: entered promiscuous mode [ 64.090833][ T5974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.093432][ T5974] Cannot create hsr debugfs directory [ 64.169857][ T5969] Bluetooth: hci0: command tx timeout [ 64.239262][ T5969] Bluetooth: hci3: command tx timeout [ 64.239271][ T5976] Bluetooth: hci1: command tx timeout [ 64.248951][ T5969] Bluetooth: hci2: command tx timeout [ 64.401872][ T5972] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.414439][ T5972] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.429230][ T5972] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.437869][ T5972] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.491752][ T5970] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.497261][ T5970] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.502206][ T5970] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.507015][ T5970] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.541740][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.584263][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.601952][ T5974] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.609846][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.612205][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.620064][ T5974] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.626616][ T5974] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.633581][ T5974] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.656220][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.659350][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.717935][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.741886][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.757389][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.760617][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.769786][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.782949][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.785911][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.800344][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.815243][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.817950][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.832963][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.836046][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.875199][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.912085][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.917598][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.932328][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.935365][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.953236][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.956284][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.993439][ T5974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.016840][ T5966] veth0_vlan: entered promiscuous mode [ 65.028065][ T5966] veth1_vlan: entered promiscuous mode [ 65.037956][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.072180][ T5966] veth0_macvtap: entered promiscuous mode [ 65.078189][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.086869][ T5966] veth1_macvtap: entered promiscuous mode [ 65.121813][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.124477][ T5972] veth0_vlan: entered promiscuous mode [ 65.140249][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.156986][ T5972] veth1_vlan: entered promiscuous mode [ 65.164008][ T5966] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.167820][ T5966] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.172130][ T5966] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.175783][ T5966] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.205138][ T5970] veth0_vlan: entered promiscuous mode [ 65.213542][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.240565][ T5970] veth1_vlan: entered promiscuous mode [ 65.267535][ T5972] veth0_macvtap: entered promiscuous mode [ 65.281661][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.285305][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.285887][ T5972] veth1_macvtap: entered promiscuous mode [ 65.322071][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.325389][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.331380][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.350785][ T5970] veth0_macvtap: entered promiscuous mode [ 65.355991][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.372747][ T5972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.376446][ T5972] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.381579][ T5972] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.385311][ T5972] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.386306][ T5966] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.392385][ T5970] veth1_macvtap: entered promiscuous mode [ 65.409066][ T5974] veth0_vlan: entered promiscuous mode [ 65.422618][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.442361][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.447770][ T5974] veth1_vlan: entered promiscuous mode [ 65.462593][ T5970] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.466173][ T5970] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.470525][ T5970] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.474564][ T5970] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.580739][ T5974] veth0_macvtap: entered promiscuous mode [ 65.585629][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.591294][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.607537][ T5974] veth1_macvtap: entered promiscuous mode [ 65.729967][ T6057] team0 (unregistering): Port device team_slave_0 removed [ 65.740630][ T6057] team0 (unregistering): Port device team_slave_1 removed [ 65.819141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.822965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.870728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.955061][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.969141][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.996942][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.006913][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.050983][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.054588][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.054664][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.138635][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.152244][ T5974] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.155944][ T5974] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.163113][ T5974] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.165672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.167570][ T5974] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.240153][ T5969] Bluetooth: hci0: command tx timeout [ 66.268051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 66.318936][ T5969] Bluetooth: hci2: command tx timeout [ 66.321731][ T5976] Bluetooth: hci3: command tx timeout [ 66.328925][ T5976] Bluetooth: hci1: command tx timeout [ 66.467561][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.477009][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.517114][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.525480][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.891301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.119394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.672274][ T6085] Zero length message leads to an empty skb [ 67.906318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.319439][ T5976] Bluetooth: hci0: command tx timeout [ 68.409066][ T5976] Bluetooth: hci1: command tx timeout [ 68.411456][ T5969] Bluetooth: hci3: command tx timeout [ 68.411813][ T63] Bluetooth: hci2: command tx timeout [ 68.520939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 68.524506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 69.277043][ T6105] block device autoloading is deprecated and will be removed. [ 69.770103][ T5975] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 69.774246][ T5975] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 69.778609][ T5975] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 69.807001][ T5975] hid-generic 0003:0004:0000.0002: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 70.399235][ T63] Bluetooth: hci0: command tx timeout [ 70.479148][ T63] Bluetooth: hci2: command tx timeout [ 70.489577][ T5976] Bluetooth: hci3: command tx timeout [ 70.489751][ T63] Bluetooth: hci1: command tx timeout [ 70.544246][ T6128] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 73.138824][ T135] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 73.270072][ T135] usb 8-1: device descriptor read/64, error -71 [ 73.508847][ T135] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 73.639045][ T135] usb 8-1: device descriptor read/64, error -71 [ 73.639195][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 73.750483][ T135] usb usb8-port1: attempt power cycle [ 74.108872][ T135] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 74.139672][ T135] usb 8-1: device descriptor read/8, error -71 [ 74.388933][ T135] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 74.409596][ T135] usb 8-1: device descriptor read/8, error -71 [ 74.520087][ T135] usb usb8-port1: unable to enumerate USB device [ 76.199718][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.204775][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.801308][ T6163] block nbd1: shutting down sockets [ 78.209919][ T6213] loop2: detected capacity change from 0 to 7 [ 78.215956][ T6213] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 78.220244][ T6213] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 78.223146][ T6213] Dev loop2: unable to read RDB block 7 [ 78.226038][ T6213] loop2: AHDI p2 p3 [ 78.227744][ T6213] loop2: partition table partially beyond EOD, truncated [ 78.233054][ T6213] loop2: p3 start 335544320 is beyond EOD, truncated [ 78.569033][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 78.709077][ T9] usb 7-1: device descriptor read/64, error -71 [ 78.961133][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 79.098905][ T9] usb 7-1: device descriptor read/64, error -71 [ 79.209135][ T9] usb usb7-port1: attempt power cycle [ 79.559073][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 79.585956][ T9] usb 7-1: device descriptor read/8, error -71 [ 79.828935][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 79.850056][ T9] usb 7-1: device descriptor read/8, error -71 [ 79.959590][ T9] usb usb7-port1: unable to enumerate USB device [ 82.172006][ T6262] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 83.528897][ T55] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 83.659110][ T55] usb 6-1: device descriptor read/64, error -71 [ 83.918844][ T55] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 84.048958][ T55] usb 6-1: device descriptor read/64, error -71 [ 84.159500][ T55] usb usb6-port1: attempt power cycle [ 84.498857][ T55] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 84.529522][ T55] usb 6-1: device descriptor read/8, error -71 [ 84.779523][ T55] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 84.803913][ T55] usb 6-1: device descriptor read/8, error -71 [ 84.914319][ T55] usb usb6-port1: unable to enumerate USB device [ 85.544101][ T6312] team0 (unregistering): Port device team_slave_0 removed [ 85.577296][ T6312] team0 (unregistering): Port device team_slave_1 removed [ 86.400232][ T10] cfg80211: failed to load regulatory.db [ 88.629358][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 88.769947][ T9] usb 8-1: device descriptor read/64, error -71 [ 89.009696][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 89.139140][ T9] usb 8-1: device descriptor read/64, error -71 [ 89.249934][ T9] usb usb8-port1: attempt power cycle [ 89.589008][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 89.610447][ T9] usb 8-1: device descriptor read/8, error -71 [ 89.888917][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 89.919587][ T9] usb 8-1: device descriptor read/8, error -71 [ 90.038851][ T9] usb usb8-port1: unable to enumerate USB device [ 91.537550][ T6400] random: crng reseeded on system resumption [ 94.191613][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.338873][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 94.351943][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 94.357646][ T10] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 94.362877][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.366702][ T10] usb 5-1: Product: syz [ 94.369283][ T10] usb 5-1: Manufacturer: syz [ 94.369300][ T10] usb 5-1: SerialNumber: syz [ 94.373792][ T10] usb 5-1: config 0 descriptor?? [ 94.782296][ T10] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 94.822214][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 95.195768][ T5676] gs_usb 5-1:0.0 can0: bit-timing not yet defined [ 95.197320][ T29] usb 5-1: USB disconnect, device number 2 [ 97.211127][ T6536] netlink: 152 bytes leftover after parsing attributes in process `syz.0.139'. [ 97.553024][ T55] IPVS: starting estimator thread 0... [ 97.658958][ T6546] IPVS: using max 28 ests per chain, 67200 per kthread [ 99.447017][ T6591] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 99.449963][ T6591] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.454655][ T6591] vhci_hcd vhci_hcd.0: Device attached [ 99.534669][ T6593] vhci_hcd: connection closed [ 99.536653][ T12] vhci_hcd: stop threads [ 99.541761][ T12] vhci_hcd: release socket [ 99.543417][ T12] vhci_hcd: disconnect device [ 103.634345][ T6672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.183'. [ 105.014949][ T6695] netlink: 'syz.2.191': attribute type 1 has an invalid length. [ 105.077150][ T6695] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 105.381564][ T6702] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.486259][ T6702] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.580377][ T6702] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.666874][ T6702] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.817909][ T6702] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.832984][ T6702] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.852221][ T6702] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.872566][ T6702] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.136645][ T6719] process 'syz.3.197' launched '/dev/fd/5' with NULL argv: empty string added [ 106.849814][ T6731] block device autoloading is deprecated and will be removed. [ 106.853594][ T6731] syz.0.202: attempt to access beyond end of device [ 106.853594][ T6731] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 107.339428][ T55] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 108.077887][ T55] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 108.571162][ T6755] kernel profiling enabled (shift: 17) [ 108.736682][ T6763] warning: `syz.1.211' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.697515][ T6028] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 110.968896][ T5976] Bluetooth: hci3: command 0x0405 tx timeout [ 123.572164][ T135] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 130.969475][ T55] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 131.133876][ T55] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 131.137983][ T55] usb 6-1: config 0 interface 0 has no altsetting 0 [ 131.143391][ T55] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 131.147028][ T55] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 131.150629][ T55] usb 6-1: Product: syz [ 131.152516][ T55] usb 6-1: Manufacturer: syz [ 131.154387][ T55] usb 6-1: SerialNumber: syz [ 131.158228][ T55] usb 6-1: config 0 descriptor?? [ 131.167105][ T55] usb 6-1: selecting invalid altsetting 0 [ 131.269000][ T135] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.377872][ T6935] binder: 6933:6935 ioctl c00c620f 80000740 returned -22 [ 131.385989][ T34] usb 6-1: USB disconnect, device number 6 [ 131.418869][ T135] usb 5-1: Using ep0 maxpacket: 8 [ 131.423705][ T135] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.426751][ T135] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.431085][ T135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.436091][ T135] usb 5-1: config 0 descriptor?? [ 131.439532][ T135] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 132.582191][ T5975] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 134.011956][ T34] usb 5-1: USB disconnect, device number 3 [ 134.369463][ T135] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 135.428940][ T135] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 135.579413][ T55] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 135.630601][ T135] usb 7-1: Using ep0 maxpacket: 8 [ 135.634518][ T135] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.638548][ T135] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.642085][ T135] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.646677][ T135] usb 7-1: config 0 descriptor?? [ 135.650415][ T135] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 135.818195][ T7038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.277'. [ 137.602840][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.605769][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.196362][ T34] usb 7-1: USB disconnect, device number 6 [ 139.389304][ T135] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 140.249603][ T135] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 140.728973][ T1336] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 140.799951][ T135] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 140.879290][ T1336] usb 6-1: Using ep0 maxpacket: 32 [ 140.892725][ T1336] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 140.896620][ T1336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.900250][ T1336] usb 6-1: Product: syz [ 140.902160][ T1336] usb 6-1: Manufacturer: syz [ 140.904114][ T1336] usb 6-1: SerialNumber: syz [ 140.910043][ T1336] usb 6-1: config 0 descriptor?? [ 140.914601][ T1336] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 140.948961][ T135] usb 8-1: Using ep0 maxpacket: 8 [ 140.951775][ T135] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.954999][ T135] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 140.957983][ T135] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.963656][ T135] usb 8-1: config 0 descriptor?? [ 140.967610][ T135] iowarrior 8-1:0.0: no interrupt-in endpoint found [ 142.658934][ T53] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 142.731721][ T1336] gspca_ov534_9: reg_r err -110 [ 142.989481][ T9] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 143.090430][ T53] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 143.094534][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 143.100615][ T53] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 143.104317][ T53] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 143.107788][ T53] usb 7-1: Product: syz [ 143.109770][ T53] usb 7-1: Manufacturer: syz [ 143.111881][ T53] usb 7-1: SerialNumber: syz [ 143.116824][ T53] usb 7-1: config 0 descriptor?? [ 143.125386][ T53] usb 7-1: selecting invalid altsetting 0 [ 143.250926][ T1336] gspca_ov534_9: Unknown sensor 0000 [ 143.251009][ T1336] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 143.380010][ T7142] binder: 7135:7142 ioctl c00c620f 80000740 returned -22 [ 143.430760][ T1336] usb 6-1: USB disconnect, device number 7 [ 143.680153][ T1336] usb 8-1: USB disconnect, device number 10 [ 144.060724][ T135] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 144.632056][ T7156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.311'. [ 144.770377][ T135] usb 7-1: USB disconnect, device number 7 [ 144.900798][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.313'. [ 145.978846][ T53] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 146.093886][ T7193] netlink: 36 bytes leftover after parsing attributes in process `syz.2.321'. [ 146.138853][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 146.142786][ T53] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.145872][ T53] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.150306][ T53] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 146.153003][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.156394][ T53] usb 5-1: config 0 descriptor?? [ 146.162028][ T53] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 146.238940][ T54] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 146.251651][ T7198] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.520368][ T54] usb 8-1: Using ep0 maxpacket: 32 [ 146.527236][ T54] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 146.531214][ T54] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.534577][ T54] usb 8-1: Product: syz [ 146.536437][ T54] usb 8-1: Manufacturer: syz [ 146.538482][ T54] usb 8-1: SerialNumber: syz [ 146.540243][ T135] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 146.547850][ T54] usb 8-1: config 0 descriptor?? [ 146.554554][ T54] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 147.285781][ T7208] binder: 7206:7208 ioctl c00c620f 80000740 returned -22 [ 148.274240][ T7218] netlink: 'syz.1.327': attribute type 1 has an invalid length. [ 148.298683][ T7218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.325936][ T7218] vlan2: entered allmulticast mode [ 148.327654][ T7218] veth1: entered allmulticast mode [ 148.332611][ T7218] bond1: (slave vlan2): making interface the new active one [ 148.338473][ T7218] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 148.361771][ T54] gspca_ov534_9: reg_r err -110 [ 148.406607][ T7223] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 148.465650][ T7220] netlink: 'syz.2.326': attribute type 29 has an invalid length. [ 148.475515][ T7220] netlink: 'syz.2.326': attribute type 29 has an invalid length. [ 148.659288][ T54] gspca_ov534_9: Unknown sensor 0000 [ 148.659396][ T54] ov534_9 8-1:0.0: probe with driver ov534_9 failed with error -22 [ 148.759030][ T5975] usb 5-1: USB disconnect, device number 4 [ 149.040422][ T5975] usb 8-1: USB disconnect, device number 11 [ 149.172144][ T7236] netlink: 36 bytes leftover after parsing attributes in process `syz.3.331'. [ 149.699316][ T135] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 150.338877][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 151.116525][ T7274] syz.1.338 uses obsolete (PF_INET,SOCK_PACKET) [ 151.321408][ T7278] kvm: pic: single mode not supported [ 151.321491][ T7278] kvm: pic: level sensitive irq not supported [ 151.324223][ T7278] kvm: pic: level sensitive irq not supported [ 151.327083][ T7278] kvm: pic: level sensitive irq not supported [ 151.331996][ T7278] kvm: pic: non byte write [ 151.336819][ T7278] kvm: pic: non byte write [ 151.344370][ T7278] kvm: pic: non byte write [ 151.346371][ T7278] kvm: pic: non byte write [ 151.350000][ T7278] kvm: pic: level sensitive irq not supported [ 151.355144][ T7278] kvm: pic: level sensitive irq not supported [ 151.358567][ T7278] kvm: pic: level sensitive irq not supported [ 151.361200][ T7278] kvm: pic: level sensitive irq not supported [ 151.363877][ T7278] kvm: pic: level sensitive irq not supported [ 151.365963][ T7278] kvm: pic: level sensitive irq not supported [ 151.528870][ T1336] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 151.688858][ T1336] usb 6-1: Using ep0 maxpacket: 8 [ 151.699830][ T1336] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.704082][ T1336] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.788600][ T1336] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 151.794156][ T1336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.804080][ T1336] usb 6-1: config 0 descriptor?? [ 151.903892][ T7290] netlink: 'syz.3.342': attribute type 29 has an invalid length. [ 151.908997][ T7290] netlink: 'syz.3.342': attribute type 29 has an invalid length. [ 151.956428][ T1336] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 152.441173][ T135] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 152.522755][ T7299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.346'. [ 152.791879][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'. [ 154.128115][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 154.298125][ T5975] usb 6-1: USB disconnect, device number 8 [ 154.406948][ T7336] netlink: 36 bytes leftover after parsing attributes in process `syz.2.357'. [ 154.525733][ T7341] binder: 7338:7341 ioctl c00c620f 80000740 returned -22 [ 154.530944][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 154.537559][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 154.542309][ T7332] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.542913][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 154.546596][ T7332] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 154.559588][ T7332] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 154.563686][ T7332] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.565574][ T7332] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 154.576930][ T7332] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 154.592687][ T7332] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.596009][ T7332] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 154.613404][ T7332] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 154.631461][ T7332] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.637940][ T7332] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 154.665852][ T7332] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 155.190749][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 155.492734][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 155.500566][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 155.513335][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 155.521126][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 156.560748][ T5969] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.638940][ T5969] Bluetooth: hci3: command 0x0405 tx timeout [ 156.638995][ T5976] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.639030][ T5978] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.738985][ T1336] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 156.888849][ T1336] usb 7-1: Using ep0 maxpacket: 8 [ 156.893079][ T1336] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.897303][ T1336] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.902793][ T1336] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 156.906546][ T1336] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.912147][ T1336] usb 7-1: config 0 descriptor?? [ 156.916428][ T1336] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 157.050041][ T7367] netlink: 36 bytes leftover after parsing attributes in process `syz.1.366'. [ 157.297378][ T7377] binder: 7375:7377 ioctl c00c620f 80000740 returned -22 [ 158.648923][ T5978] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.718994][ T5978] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.719433][ T5969] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.730261][ T5969] Bluetooth: hci3: command 0x0405 tx timeout [ 158.815019][ T7396] netlink: 36 bytes leftover after parsing attributes in process `syz.0.375'. [ 158.874412][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 159.168388][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 159.174099][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 159.179843][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 159.294837][ T7411] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 159.297116][ T7411] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 159.301242][ T7411] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 159.303870][ T7411] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 159.516819][ T29] usb 7-1: USB disconnect, device number 8 [ 159.549159][ T135] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 159.721054][ T135] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 159.724137][ T135] usb 8-1: config 0 interface 0 has no altsetting 0 [ 159.729706][ T135] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 159.733313][ T135] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 159.736554][ T135] usb 8-1: Product: syz [ 159.738981][ T135] usb 8-1: Manufacturer: syz [ 159.740920][ T135] usb 8-1: SerialNumber: syz [ 159.744761][ T135] usb 8-1: config 0 descriptor?? [ 159.750490][ T135] usb 8-1: selecting invalid altsetting 0 [ 160.017653][ T7426] binder: 7414:7426 ioctl c00c620f 80000740 returned -22 [ 160.343561][ T135] usb 8-1: USB disconnect, device number 12 [ 161.159611][ T1336] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 161.199310][ T5978] Bluetooth: hci0: command 0x0c1a tx timeout [ 161.318825][ T1336] usb 8-1: Using ep0 maxpacket: 16 [ 161.324810][ T1336] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 161.328115][ T1336] usb 8-1: config 0 has no interface number 0 [ 161.333249][ T1336] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 161.337717][ T1336] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 161.344684][ T1336] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 161.348502][ T1336] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 161.352153][ T1336] usb 8-1: Product: syz [ 161.354006][ T1336] usb 8-1: SerialNumber: syz [ 161.358968][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 161.358980][ T1336] usb 8-1: config 0 descriptor?? [ 161.358991][ T5976] Bluetooth: hci1: command 0x0c1a tx timeout [ 161.361662][ T5978] Bluetooth: hci3: command 0x0405 tx timeout [ 161.362506][ T1336] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 161.364422][ T1336] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.8/input/input5 [ 161.656266][ C3] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 161.656451][ T135] usb 8-1: USB disconnect, device number 13 [ 161.658481][ C3] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 161.667997][ T135] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 162.111830][ T7443] could not allocate digest TFM handle [ 162.396174][ T7451] __nla_validate_parse: 4 callbacks suppressed [ 162.396203][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.386'. [ 162.899333][ T40] audit: type=1326 audit(1752927330.674:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 162.907345][ T40] audit: type=1326 audit(1752927330.674:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 162.915120][ T40] audit: type=1326 audit(1752927330.674:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 162.923661][ T40] audit: type=1326 audit(1752927330.674:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 162.935173][ T40] audit: type=1326 audit(1752927330.674:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 162.943657][ T40] audit: type=1326 audit(1752927330.674:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 162.952261][ T40] audit: type=1326 audit(1752927330.674:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 162.960727][ T40] audit: type=1326 audit(1752927330.674:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 163.065076][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 163.067860][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 163.070990][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 163.438916][ T5969] Bluetooth: hci3: command 0x0405 tx timeout [ 163.884037][ T40] audit: type=1326 audit(1752927331.654:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.397" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 164.384220][ T7484] binfmt_misc: register: failed to install interpreter file ./file0 [ 164.744162][ T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 165.134828][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.138414][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 165.144771][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 165.148237][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 165.151906][ T10] usb 5-1: SerialNumber: syz [ 165.157605][ T10] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 165.160535][ T10] usb-storage 5-1:1.0: USB Mass Storage device detected [ 165.174803][ T10] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 165.178072][ T10] scsi host6: usb-storage 5-1:1.0 [ 165.277030][ T7495] fuse: Bad value for 'fd' [ 165.518912][ T5969] Bluetooth: hci3: command 0x0405 tx timeout [ 165.850344][ T7499] [ 165.850949][ T7502] input: syz0 as /devices/virtual/input/input6 [ 165.851426][ T7499] ====================================================== [ 165.856768][ T7499] WARNING: possible circular locking dependency detected [ 165.859591][ T7499] 6.16.0-rc6-syzkaller-00237-gc7de79e662b8 #0 Not tainted [ 165.867473][ T7499] ------------------------------------------------------ [ 165.869961][ T7499] syz.0.393/7499 is trying to acquire lock: [ 165.872336][ T7499] ffff88805ff62888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 165.875968][ T7499] [ 165.875968][ T7499] but task is already holding lock: [ 165.878801][ T7499] ffff88805f02ac68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 165.881850][ T7499] [ 165.881850][ T7499] which lock already depends on the new lock. [ 165.881850][ T7499] [ 165.885515][ T7499] [ 165.885515][ T7499] the existing dependency chain (in reverse order) is: [ 165.888679][ T7499] [ 165.888679][ T7499] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 165.891320][ T7499] __mutex_lock+0x199/0xb90 [ 165.893018][ T7499] anon_pipe_write+0x15d/0x1a70 [ 165.894690][ T7499] __kernel_write_iter+0x720/0xa90 [ 165.896522][ T7499] __kernel_write+0xf5/0x140 [ 165.898471][ T7499] autofs_notify_daemon+0x4db/0xd60 [ 165.900713][ T7499] autofs_wait+0x10ca/0x1a70 [ 165.902589][ T7499] autofs_mount_wait+0x132/0x380 [ 165.904678][ T7499] autofs_d_automount+0x390/0x7f0 [ 165.906894][ T7499] __traverse_mounts+0x195/0x790 [ 165.909014][ T7499] step_into+0x5aa/0x2270 [ 165.910992][ T7499] walk_component+0xfc/0x5b0 [ 165.913004][ T7499] link_path_walk+0x627/0xe20 [ 165.914990][ T7499] path_lookupat+0x15a/0x6d0 [ 165.917025][ T7499] filename_lookup+0x224/0x5f0 [ 165.919080][ T7499] user_path_at+0x3a/0x60 [ 165.920959][ T7499] bpf_obj_get_user+0xae/0x490 [ 165.923087][ T7499] __sys_bpf+0x2845/0x4ea0 [ 165.924964][ T7499] __ia32_sys_bpf+0x76/0xe0 [ 165.926989][ T7499] __do_fast_syscall_32+0x7c/0x3a0 [ 165.929257][ T7499] do_fast_syscall_32+0x32/0x80 [ 165.931446][ T7499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.934184][ T7499] [ 165.934184][ T7499] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 165.937250][ T7499] __mutex_lock+0x199/0xb90 [ 165.939328][ T7499] autofs_notify_daemon+0x4a6/0xd60 [ 165.941631][ T7499] autofs_wait+0x10ca/0x1a70 [ 165.943724][ T7499] autofs_mount_wait+0x132/0x380 [ 165.945731][ T7499] autofs_d_automount+0x390/0x7f0 [ 165.947479][ T7499] __traverse_mounts+0x195/0x790 [ 165.949508][ T7499] step_into+0x5aa/0x2270 [ 165.951032][ T7499] walk_component+0xfc/0x5b0 [ 165.952772][ T7499] path_lookupat+0x142/0x6d0 [ 165.954751][ T7499] filename_lookup+0x224/0x5f0 [ 165.956813][ T7499] kern_path+0x35/0x50 [ 165.958615][ T7499] lookup_bdev+0xd8/0x280 [ 165.960384][ T7499] resume_store+0x1d6/0x460 [ 165.962057][ T7499] kobj_attr_store+0x55/0x80 [ 165.963893][ T7499] sysfs_kf_write+0xf2/0x150 [ 165.965896][ T7499] kernfs_fop_write_iter+0x351/0x510 [ 165.968220][ T7499] vfs_write+0x6c4/0x1150 [ 165.970219][ T7499] ksys_write+0x12a/0x250 [ 165.972422][ T7499] __do_fast_syscall_32+0x7c/0x3a0 [ 165.974904][ T7499] do_fast_syscall_32+0x32/0x80 [ 165.977280][ T7499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.980099][ T7499] [ 165.980099][ T7499] -> #0 (&of->mutex){+.+.}-{4:4}: [ 165.983170][ T7499] __lock_acquire+0x126f/0x1c90 [ 165.985305][ T7499] lock_acquire+0x179/0x350 [ 165.987344][ T7499] __mutex_lock+0x199/0xb90 [ 165.989355][ T7499] kernfs_fop_write_iter+0x28f/0x510 [ 165.991733][ T7499] iter_file_splice_write+0x91f/0x1150 [ 165.994166][ T7499] do_splice+0x1478/0x1fc0 [ 165.996212][ T7499] __do_splice+0x32a/0x360 [ 165.998367][ T7499] __ia32_sys_splice+0x189/0x250 [ 166.000569][ T7499] __do_fast_syscall_32+0x7c/0x3a0 [ 166.002904][ T7499] do_fast_syscall_32+0x32/0x80 [ 166.005206][ T7499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.008009][ T7499] [ 166.008009][ T7499] other info that might help us debug this: [ 166.008009][ T7499] [ 166.012194][ T7499] Chain exists of: [ 166.012194][ T7499] &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex [ 166.012194][ T7499] [ 166.017215][ T7499] Possible unsafe locking scenario: [ 166.017215][ T7499] [ 166.020273][ T7499] CPU0 CPU1 [ 166.022557][ T7499] ---- ---- [ 166.024774][ T7499] lock(&pipe->mutex); [ 166.026512][ T7499] lock(&sbi->pipe_mutex); [ 166.029410][ T7499] lock(&pipe->mutex); [ 166.032209][ T7499] lock(&of->mutex); [ 166.033882][ T7499] [ 166.033882][ T7499] *** DEADLOCK *** [ 166.033882][ T7499] [ 166.037222][ T7499] 2 locks held by syz.0.393/7499: [ 166.039294][ T7499] #0: ffff8880256f4428 (sb_writers#7){.+.+}-{0:0}, at: __do_splice+0x32a/0x360 [ 166.043143][ T7499] #1: ffff88805f02ac68 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 166.046699][ T7499] [ 166.046699][ T7499] stack backtrace: [ 166.049145][ T7499] CPU: 1 UID: 0 PID: 7499 Comm: syz.0.393 Not tainted 6.16.0-rc6-syzkaller-00237-gc7de79e662b8 #0 PREEMPT(full) [ 166.049168][ T7499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 166.049178][ T7499] Call Trace: [ 166.049186][ T7499] [ 166.049193][ T7499] dump_stack_lvl+0x116/0x1f0 [ 166.049215][ T7499] print_circular_bug+0x275/0x350 [ 166.049237][ T7499] check_noncircular+0x14c/0x170 [ 166.049268][ T7499] __lock_acquire+0x126f/0x1c90 [ 166.049295][ T7499] lock_acquire+0x179/0x350 [ 166.049315][ T7499] ? kernfs_fop_write_iter+0x28f/0x510 [ 166.049337][ T7499] ? __pfx___might_resched+0x10/0x10 [ 166.049356][ T7499] __mutex_lock+0x199/0xb90 [ 166.049372][ T7499] ? kernfs_fop_write_iter+0x28f/0x510 [ 166.049391][ T7499] ? __asan_memcpy+0x3c/0x60 [ 166.049415][ T7499] ? _copy_from_iter+0x15d/0x16f0 [ 166.049434][ T7499] ? kernfs_fop_write_iter+0x28f/0x510 [ 166.049455][ T7499] ? __pfx___mutex_lock+0x10/0x10 [ 166.049471][ T7499] ? __pfx__copy_from_iter+0x10/0x10 [ 166.049490][ T7499] ? rcu_is_watching+0x12/0xc0 [ 166.049508][ T7499] ? trace_kmalloc+0x2b/0xd0 [ 166.049525][ T7499] ? __kmalloc_noprof+0x242/0x510 [ 166.049542][ T7499] ? kernfs_fop_write_iter+0x28f/0x510 [ 166.049569][ T7499] kernfs_fop_write_iter+0x28f/0x510 [ 166.049591][ T7499] iter_file_splice_write+0x91f/0x1150 [ 166.049622][ T7499] ? kasan_quarantine_put+0x10a/0x240 [ 166.049638][ T7499] ? __pfx_iter_file_splice_write+0x10/0x10 [ 166.049671][ T7499] ? __pfx_iter_file_splice_write+0x10/0x10 [ 166.049696][ T7499] do_splice+0x1478/0x1fc0 [ 166.049724][ T7499] ? __lock_acquire+0x622/0x1c90 [ 166.049749][ T7499] ? __pfx_do_splice+0x10/0x10 [ 166.049768][ T7499] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 166.049788][ T7499] ? find_held_lock+0x2b/0x80 [ 166.049803][ T7499] __do_splice+0x32a/0x360 [ 166.049828][ T7499] ? __pfx___do_splice+0x10/0x10 [ 166.049856][ T7499] __ia32_sys_splice+0x189/0x250 [ 166.049882][ T7499] __do_fast_syscall_32+0x7c/0x3a0 [ 166.049900][ T7499] do_fast_syscall_32+0x32/0x80 [ 166.049917][ T7499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 166.049938][ T7499] RIP: 0023:0xf70ce579 [ 166.049953][ T7499] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 166.049970][ T7499] RSP: 002b:00000000f483655c EFLAGS: 00000296 ORIG_RAX: 0000000000000139 [ 166.049988][ T7499] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000000 [ 166.049999][ T7499] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000005 [ 166.050008][ T7499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.050018][ T7499] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 166.050028][ T7499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.050043][ T7499] [ 166.194534][ T7499] mmap: syz.0.393 (7499) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 166.388798][ T1336] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 166.540022][ T1336] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 166.543339][ T1336] usb 7-1: config 0 interface 0 has no altsetting 0 [ 166.547088][ T1336] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 166.550523][ T1336] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 166.553500][ T1336] usb 7-1: Product: syz [ 166.555029][ T1336] usb 7-1: Manufacturer: syz [ 166.556805][ T1336] usb 7-1: SerialNumber: syz [ 166.559823][ T1336] usb 7-1: config 0 descriptor?? [ 166.564540][ T1336] usb 7-1: selecting invalid altsetting 0 [ 167.480006][ T29] usb 5-1: USB disconnect, device number 5 [ 168.870205][ T135] usb 7-1: USB disconnect, device number 9 VM DIAGNOSIS: 12:15:33 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000002 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000080000002 RSI=ffffffff8c155be0 RDI=0000000000000001 RBP=ffff88803fffa580 RSP=ffffc900033c74f0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000007c47 R12=0000000000000001 R13=0000000000000008 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81888318 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809752e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080202018 CR3=0000000067995000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8556b7e5 RDI=ffffffff9b09e500 RBP=ffffffff9b09e4c0 RSP=ffffc90003b27228 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e36312e36 R12=0000000000000000 R13=0000000000000036 R14=ffffffff9b09e4c0 R15=ffffffff8556b780 RIP=ffffffff8556b80f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809762e000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f4836da4 CR3=0000000049278000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000046800000000 0000000900000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000017630c RBX=0000000000000002 RCX=ffffffff8b828c69 RDX=ffffed1005686646 RSI=ffffffff8c155be0 RDI=ffffffff819197b1 RBP=ffffed1003bdb910 RSP=ffffc9000047fdf8 R8 =0000000000000000 R9 =ffffed1005686645 R10=ffff88802b43322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801dedc880 R14=ffffffff90a95850 R15=0000000000000000 RIP=ffffffff8b8277cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809772e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3c556d CR3=00000000506bd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7474ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b53b640 RCX=ffffffff81af6053 RDX=ffff88801dea4880 RSI=ffffffff81af602d RDI=0000000000000005 RBP=ffffc9000044fd08 RSP=ffffc9000044fbc0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb9f6e R12=1ffff92000089f80 R13=0000000000000002 R14=0000000000000001 R15=ffffed10056a76c9 RIP=ffffffff81af602f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809782e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c33e9b3 CR3=0000000027ddb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000008000007f Opmask01=000000000001ffff Opmask02=000000000101ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005603582f50b0 0000000000000009 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 25203a726f727265 2064616572207265 79616c207475706e 6900000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00051f574a575740 0541444057055740 5c4449055150554b 4c00000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0007002400000001 0005000800000000 0004000800000001 0003000800000021 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005603582f9778 0000000000000000 0000000200000005 00005603582f9388 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005603582f86d5 0000000000000001 0000000200000005 00005603582f9778 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000200000005 00005603582f9388 0000000000000001 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005603582f86ac 0000000000000001 0000000000000005 00005603582f86c1 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbf2d2e28332220 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3724bf2f2b2427bf 2d2e2832312435bf 3728252433342c2f 33bf2d2e28332220 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000