last executing test programs: 4.221541457s ago: executing program 0 (id=136): listns(&(0x7f0000000000)={0x20, 0x0, 0x7, 0x8000000, 0x0, 0x3}, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./debug\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='1,0x7f0000800000,0x7', 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000002000050811001c000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xc055) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRES16], &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x4, r0, 'id1\x00'}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000001c0)={0xc}) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r4], 0x58}}, 0x0) ftruncate(r2, 0x7) 4.221275653s ago: executing program 0 (id=137): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r1, 0xc01, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x8050) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000040)={0x0, 0xc1, 0x1, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x8000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x10, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x246}}], 0x1, 0x0, 0x0) 3.123643989s ago: executing program 0 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) r0 = getpid() ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x5) prlimit64(r0, 0x3, 0x0, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000440), 0x318, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) syz_usbip_server_init(0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x6, 0x4, 0x0, &(0x7f00000004c0)) timer_create(0x0, 0x0, &(0x7f0000000500)) pipe(&(0x7f0000000540)) r2 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r2, &(0x7f00000000c0)="06", 0x1) sendfile(r2, r2, &(0x7f0000001000), 0xffff) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) 3.12321006s ago: executing program 2 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt/irq/10/smp_affinity\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='1', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000008bdb00"/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x4849, &(0x7f0000000340)={0x0, 0xaea7, 0x10, 0x3, 0x0, 0x0, r0}, &(0x7f00000003c0), &(0x7f0000000500), &(0x7f0000000540)) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 3.111499822s ago: executing program 2 (id=141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x6, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cdrom(0xffffff9c, &(0x7f0000000340), 0x800, 0x0) ioctl$CDROMREADAUDIO(r2, 0x530e, &(0x7f0000000380)={@lba=0x8, 0x1, 0x47, &(0x7f00000003c0)=""/71}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map=r0, r1, 0x7, 0x0, r1, @void, @value=0x0}, 0x20) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000240)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xd01c4813, &(0x7f0000000300)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x44}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYRES16=r5, @ANYRES8], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r6 = add_key$user(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)="9ff095ffdd21e8a00afe8c55b4a6374e69810a22bda4be491f1e3acad3f89b02ca2a485684440887e7a46ce007da25c65e84c86343040b466f6633c8f62a74fd8ea80db424e2bbe83543ce3c877e8c2b48c58d5b516c664a798ce68bb309621ec60000000000000000", 0x69, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000007c0)={r6, r7, r6}, &(0x7f0000000800)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x20042, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f00000008c0), 0x121040, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000900)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000940)={0xffffffffffffffff, 0x1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./sys\x00', &(0x7f0000000a00)='sysfs\x00', 0x0, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000a40)={'dummy0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000a80)={'bond_slave_0\x00'}) capset(&(0x7f0000000ac0)={0x19980330}, &(0x7f0000000b00)={0x6, 0x10ffff, 0xffffff88, 0x1, 0x6}) syz_open_dev$sg(&(0x7f0000000b40), 0x0, 0x8002) creat(&(0x7f0000000b80)='./sys/class/net/bond0/bonding/mode\x00', 0x44) 2.901529304s ago: executing program 1 (id=143): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000380)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newtclass={0x38, 0x28, 0x8, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xb, 0xfff1}, {0x8, 0xffff}, {0xfff3, 0x1}}, [@tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x6}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r4, 0x1, 0x170bf2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) openat$mixer(0xffffffffffffff9c, 0x0, 0x101180, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000001540)=' ', 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000005c0)={0x0, 0x4731, 0x400, 0x3, 0x279, 0x0, r5}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x3, 0x10000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xb0d, 0x0, 0x0, 0x1000, 0x80000001, 0x0, 0x0, 0x103}}}, &(0x7f0000000300)) listen(r1, 0xfff) accept4(r1, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000340)={0x1, &(0x7f0000000180)=[{0x1, 0x9}]}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2.728420114s ago: executing program 1 (id=145): r0 = socket(0x10, 0x3, 0x0) (async) r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe000202b}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) (async) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r5, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) (async) r6 = dup3(r0, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000300)={0x4000000f}) 2.570819687s ago: executing program 1 (id=148): r0 = semget(0x3, 0x2, 0x280) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000300)=0x4) r5 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/module/kvm_amd/parameters/avic\x00', 0x0, 0x0) read(r6, &(0x7f0000004080)=""/100, 0x64) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=r4], 0x50}}, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r11 = socket$inet6(0xa, 0x1, 0xfffffffc) sendmmsg$inet6(r11, &(0x7f0000000c40)=[{{&(0x7f0000000c80)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000cc0)={0xa, 0x4e23, 0x16f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x536f}, 0x1c, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000290000003600000033000000000000001800000029000004360000003c00000000000000"], 0x30}}], 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000d40)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000f578bdde04c6000086dd6000000000383afffe8000000000000000000000000000bbfe8000000000000000000000000000aa02009078000005006000000000002140fe800000000000000000"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004040)=ANY=[@ANYRES32=r7, @ANYRESDEC=r1, @ANYRES8=r2, @ANYRES32=r12], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'pimreg1\x00'}) 2.522004751s ago: executing program 1 (id=149): socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select ', 0xf) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x101900, 0x10) read$FUSE(r1, &(0x7f0000000e80)={0x2020}, 0x2020) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/bdi/1:0/strict_limit\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)="3199", 0x2) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x180, 0x0) ioctl$SNDCTL_SYNTH_ID(r7, 0xc08c5114, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 1.481906926s ago: executing program 3 (id=151): socket$inet_sctp(0x2, 0x1, 0x84) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$P9_RREADDIR(r1, &(0x7f0000000200)={0x4e, 0x29, 0x2, {0x0, [{{0x80, 0x4, 0x4}, 0x7ff, 0xc, 0xe, './mnt/fillfile'}, {{0x0, 0x2, 0x4000002}, 0x7ff, 0x5, 0x5, './mnt'}]}}, 0x4e) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) mkdir(&(0x7f0000000440)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./config\x00', &(0x7f00000004c0)='configfs\x00', 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, 0x0, 0x88000cc, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000700)=0xe4) mkdir(&(0x7f0000000740)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000780)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r7, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x20000080) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbdf3407000110080000080003000000000000", @ANYRES32=r7, @ANYBLOB="0c00990008000000300000001400040073797a6b616c6c6572300000000000000800050004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x240008d4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001000010025bd7000f9dbdf2500000000", @ANYRESDEC=r5, @ANYBLOB="158804000300000008001b000000000006ae14e0abf09dabd910de82aa14f1ceaff8ba3930e5c788514f9e86e48202ac5e2a4da25298612ceff2de6c25dfc0db50c39d4d0aeba02c0468d5cd9d1092db8559c853f700"], 0x28}, 0x1, 0x0, 0x0, 0x44810}, 0x4000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="340000001000010028bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8a4301000000000014000300776c616e300000000000000000005317"], 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c000180060006008848"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.481673671s ago: executing program 0 (id=152): syz_emit_vhci(&(0x7f0000000800)=ANY=[@ANYBLOB="8c97d34459d1e66e94f73177ff2a0e21ef690fc2da43fda42cd73bbfd2c5f434ffd0c21b60a34d87198c51dc318178bde35e711b2c6e2c7b92d39054b0fd5efb7234818e2ea3642668fb3d5384ed8a1d9d7108873c47ea0c1b9b586b6209c5ed24bb0d583b6b44a2cc4eb5f65132658e6a16661918d529d02022f4a274b9d6366fb53bf8503437a15557dafeb21cb4b9df3a4ed36de05ea5c47c40d4907780827d899d9d4809936dc4a8f37697e901d7229e83d9a039e87c517c"], 0x10) r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000780), &(0x7f0000000080)=0xfcecb52038d38e63, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000028c0)="6800000001090504000000000000000002000000090001007379003000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x4080) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000180), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000008c0)={{0x0, 0x8, 0x7, 0x4, 0x0, 0x8, 0x8, 0xfffffff7, 0x6, 0x8, 0xfffff2ac, 0xfffffffffffffff8, 0xb, 0x4, 0x49f}}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f00000018c0)={r3, 0x5}) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x101042, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000002980)={0x6, 'vcan0\x00', {0x7fffffff}}) pwrite64(r7, &(0x7f0000000500)='2', 0x1, 0x4fed0) lseek(r7, 0x2d33, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000002940)={0x1, 'macvlan0\x00', 0x2}, 0x18) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10}, 0x10020) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f0000000280)=r8, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000000300)=@caif=@dgm={0x25, 0x2b, 0x9}, 0x80, &(0x7f0000000380)=[{&(0x7f00000003c0)="620454ff590200000000602f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000540)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a8049d2a44ce42557b2e72e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c5301001ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f5d6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e54908000000a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c7fbc0efaccca18e94b87dc586ee60baa55469755ab00e92b607f2aeee00ad72fb29c1847f85b2f8ec3a34864b18eaaa131a4940c9af11606e5d9360c3f4a2c8308d50c34b1bbaac018469ac346dc2a539e20350297097e7bf21ea0c2a0aa083b2b3543af05c7fb5391a1c81304b520fafb941b2dc3cfb03c3dd8567a459752a5ca573ee7cf4f518af508d141c98dc9914df1521e9ee49decdf2418e7f74adea9fda805bc75906dafd279aee36397966427cdef205c67fbbb3", 0x1cb}, {&(0x7f0000000740)="0a985d7879f1bb", 0xfcb9}], 0x3}, 0x8045) r9 = socket$pppoe(0x18, 0x1, 0x0) accept4(r9, &(0x7f00000000c0)=@sco={0x1f, @none}, &(0x7f0000000140)=0x80, 0x800) 1.392181868s ago: executing program 3 (id=153): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="6000120010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x60}}, 0x8000) 1.391947218s ago: executing program 3 (id=154): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000480)=0x13, 0x4) bind$inet6(r3, &(0x7f00000004c0)={0xa, 0x6e22, 0x40000000, @empty, 0x6}, 0x1c) listen(r3, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f0000000400)={{0x0, 0x3fffffff}}, 0x0) ioctl$int_out(r1, 0x5460, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc01c586a, &(0x7f0000000100)={r0, &(0x7f0000000000)='^(+#[-]++\\n\\*\x00', 0x0, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x9ea]}, {0x93a, 0x1, 0xffff8000, 0x1}}, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x9}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r4) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, r6, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x44}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) 1.152156584s ago: executing program 3 (id=155): syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$tun(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0xa}}, 0x20) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2433f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0xf400, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdffffffc}}], 0x1, 0x0, 0x0) 1.149678516s ago: executing program 1 (id=156): r0 = openat$dir(0xffffff9c, &(0x7f0000000480)='./sys\x00', 0x100, 0x8e) execveat(r0, &(0x7f00000004c0)='./sys/class/fcloop/ctl/del_remote_port\x00', &(0x7f0000000780)={[&(0x7f0000000500)='/dev/kvm\x00', &(0x7f0000000540)='\'\'*-\x00', &(0x7f0000000580)='sysfs\x00', &(0x7f00000005c0)='/dev/kvm\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='bridge0\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='sysfs\x00', &(0x7f0000000700)='\x00', &(0x7f0000000740)='$\x00']}, &(0x7f0000000940)={[&(0x7f00000007c0)='\x00', &(0x7f0000000800)='sysfs\x00', &(0x7f0000000840)='sysfs\x00', &(0x7f0000000880)=')&\x00', &(0x7f00000008c0)=']\x00', &(0x7f0000000900)='/dev/kvm\x00', &(0x7f0000000a00)='/de\b\x00\x00\x00m\x00\x06\xb8~\xf0l\xca*\xec;\xe1\x16^\x9b\xac\xdf\xa0#\xb2\xc5[\x9e8.\xdf\x9d8Yk\"\xc2 \xac\x83`\xc0|>\x8b@K\xc0\xc90\xee3\xf4?\xfb\x84H\xc5\xee\xa0JX\xf8\xe0\xb1U\xdc\x8e>\xa4\x81n\x9e\xcc%J\xc5;*o\xb9\xe1\xb3\x1bP\xa5\x7f\x88\xb9\xde\x1e\xa6G\xe40~\x84\x9c6%=u', &(0x7f0000000980)='sysfs\x00']}, 0x800) r1 = socket(0x848000000015, 0x805, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="4c0000001200ff09ff", 0x9}, {0x0}], 0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) r5 = syz_open_dev$vcsa(&(0x7f0000000e00), 0x1, 0x1a1300) poll(&(0x7f0000000e40)=[{r5, 0x688}], 0x1, 0x6) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000005500e50128bd70000000000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="014301000000000000000000000000000000000108000000"], 0x38}}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda9") ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000180)={&(0x7f00000001c0)=""/120, 0x78}) capset(&(0x7f0000000b80)={0x19980330}, &(0x7f0000000bc0)={0x2, 0x2, 0x2, 0xfffffffa, 0x5, 0xc72}) mq_open(&(0x7f0000000c00)='::%\x00', 0x40, 0x80, &(0x7f0000000c40)={0x1, 0x4c, 0x76}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/del_remote_port\x00', 0x1, 0x0) get_robust_list(r2, &(0x7f0000000d80)=&(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={&(0x7f0000000c80)}}}, &(0x7f0000000dc0)=0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r6) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r7, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7f}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x62}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x840) write(r6, &(0x7f0000000340)='ww', 0x2) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) 1.051417098s ago: executing program 2 (id=157): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x80200, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000280)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x5, 0x0, &(0x7f0000000340)=0x7ccd4176) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x30) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r1, &(0x7f00000000c0), 0x400000000000166, 0x1a000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}]}) 971.717362ms ago: executing program 2 (id=158): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x8, 0xd) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0x3, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x84) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/net/afs/cells\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='net/rpc\x00') dup(0xffffffffffffffff) symlinkat(&(0x7f0000000640)='.\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000740)='./bus\x00', &(0x7f0000000780), 0xa14000, &(0x7f00000007c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000800)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./trace\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./dummy\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./trace/uprobe_events\x00', 0x2, 0x0) write(r5, &(0x7f0000000980)='p:mygroup/myevent ./dummy:0x2', 0x1d) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000540)=@userptr={0x0, 0x1, 0x4, 0x352c34c113f2f238, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0ed290c8"}, 0x0, 0x2, {0x0}}) socket$netlink(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/user\x00') 969.964011ms ago: executing program 1 (id=159): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYBLOB="2479c7efddb45d52c29ea5014224c56a23950d698d265255db81c94ee39946166a9a158b8a63679d5ad766268e346d9033afa5d3c8db22ad4305cd0ea0aceb0b1a2958ab0bc1353c295f29d211a24c17f018e6e0ad6fa01470e208f2345021f4c8ff75dd72493300d2de583f3402031df5c64c7d702657720f96a9fa78a8472ee7ba7f3a44c8efa802deeba111d6e9cbf3e3b2eac0bfae08287e61"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40015b19, &(0x7f0000000580)={0xffffffff, 0xfffffffc, 0x7, 0xfb, 0x1}) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/195, 0xc3}], 0x1) 890.036755ms ago: executing program 0 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000340)='27', 0x2) (async) unshare(0x40000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x40806685, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 889.792131ms ago: executing program 2 (id=161): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x794, 0x4e23, 0x7, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d6, 0x6c}, @in6=@loopback, {0x4, 0x192, 0x6, 0xffff, 0x3, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfe, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0x9, 0x3, 0x0, 0x2, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x20000080) r2 = inotify_init1(0x800) r3 = syz_open_dev$loop(&(0x7f0000000080), 0xfffffffc, 0x105601) ioctl$BLKSECDISCARD(r3, 0x127d, 0x0) inotify_add_watch(r2, 0x0, 0x37000b82) r4 = openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x4081, 0x0) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) syz_emit_vhci(0x0, 0x17) 441.344181ms ago: executing program 2 (id=162): clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000e4ff1000010800800000800000106f8f1c21", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) getsockname$packet(r5, 0x0, &(0x7f0000000240)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000340)=0x7fff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='net/vlan/config\x00') r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f0000000480)={0x19, 0x10, 0x19, 0x10, 0x3, 0x2, 0x2, 0xac, 0xffffffffffffffff}) readv(r6, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000500), 0x2c0000, 0xc8200) 397.658792ms ago: executing program 32 (id=162): clock_gettime(0x7, &(0x7f00000009c0)) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000005c0)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000e4ff1000010800800000800000106f8f1c21", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) getsockname$packet(r5, 0x0, &(0x7f0000000240)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000340)=0x7fff) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='net/vlan/config\x00') r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f0000000480)={0x19, 0x10, 0x19, 0x10, 0x3, 0x2, 0x2, 0xac, 0xffffffffffffffff}) readv(r6, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000500), 0x2c0000, 0xc8200) 283.717111ms ago: executing program 3 (id=163): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)='P', 0x1}], 0x1}}], 0x1, 0x400c000) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x1b) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], "223427d5c9a46b9f"}}}}}, 0x0) 69.838862ms ago: executing program 0 (id=164): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x123080) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f00000000c0)=0x1) r4 = syz_io_uring_setup(0x34d1, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x2, 0xad}, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000580)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000900)={'syz0\x00', {0x7, 0x4, 0x5, 0xfffa}, 0xa, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x0, 0xfffffffd, 0x8, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x69a4, 0x80000001, 0x4, 0x5, 0x100000, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x404, 0x7, 0x10103, 0x0, 0x5, 0x3c, 0x91, 0x2, 0xfffffffd, 0x3, 0x5, 0x0, 0x8, 0x4, 0x80, 0x0, 0x5, 0x2, 0x8, 0x0, 0xfffffffd, 0x514], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x4, 0x129432e2, 0xcb, 0xf9, 0xd, 0xffff, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10007, 0x5, 0x2f, 0xb99, 0x312, 0x78, 0xea4, 0xa, 0x6, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xff7ffffd, 0x28, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x8, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x4ecf, 0x7f, 0x9, 0x5, 0xd, 0x80004, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x800004, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x4, 0x5, 0xcf, 0x1ef, 0x5, 0x8, 0x85, 0x6, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x7, 0x7c, 0xffffffff, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x120000, 0x3, 0x6, 0x9, 0x4], [0x9, 0xbb30, 0x3, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0xff, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa61f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x2, 0x100c8, 0x3, 0x2, 0xffff, 0x3, 0x9, 0x100, 0x8d3, 0xa, 0x2, 0x4, 0x493, 0x1, 0x10003, 0x5, 0x8, 0x2b91, 0xa1f, 0x108, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x100005, 0xb1c, 0x1, 0x200, 0xffff3445, 0xfff]}, 0x45c) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) ppoll(&(0x7f0000000e00)=[{r8, 0x80}], 0x1, 0x0, 0x0, 0x0) r9 = io_uring_setup(0x1757, &(0x7f0000000e40)={0x0, 0x2c41, 0x0, 0x23, 0xab}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r10) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r9, 0x50009418, &(0x7f00000010c0)={{r4}, 0x0, 0xe, @unused=[0x9, 0x8, 0x1, 0x10000], @subvolid=0x2}) setsockopt(r11, 0x84, 0x80, &(0x7f0000000ec0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000f00)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r11, &(0x7f0000000f40)="c3", 0x1, 0x40811, &(0x7f0000000f80)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, &(0x7f0000000fc0)={0x0, @in6={{0xa, 0x4e23, 0xd, @loopback, 0xe91}}}, 0x84) close_range(r9, 0xffffffffffffffff, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000001080)="e2", 0x918) 0s ago: executing program 3 (id=165): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x3, 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r1, 0xc040ff0b, 0x200000000003) r2 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000400), 0x90a02, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000600)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000006c0)=0x14) sendmmsg(r3, &(0x7f0000000700)=[{{&(0x7f0000000740)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000800)='O', 0x36}], 0x1}}], 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./trace/events/irq/irq_handler_entry/filter\x00', 0x2, 0x0) write(r6, &(0x7f0000000880)='name ~ \"*\"', 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x10, 0x1f, &(0x7f0000000940)=ANY=[@ANYBLOB="182b0000", @ANYRES32=0x1, @ANYBLOB="000000003eda0000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000004018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000182b0000", @ANYRES32=0x1, @ANYBLOB="000000000200000088870000b10300008520000004000000180000003a0e00000000000000000000c408100010000000"], &(0x7f0000000a40)='syzkaller\x00', 0x0, 0xa4, &(0x7f0000000a80)=""/164, 0x0, 0x40, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000b80)={0x5, 0xe, 0x4, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000bc0)=[0x1], &(0x7f0000000c00)=[{0x1, 0x3, 0x1, 0x8}, {0x3, 0x3, 0x5, 0x5}, {0x3, 0x3, 0x1}], 0x10, 0xb}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200000002000000000000000000020000000000000000005c079df8e7bc1ce8e8f7581eb5f6fbbb5797e8ca5b12fce90e76ad3774de5d36e4e39b4e741eec9c21d075b1263818d7a9d270094ce0471accd5d1de40d73529b50db0a3430123deb619b602d276f51730e41eb2ebeb41fc98cca6e85461e461ce"], 0x50) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001dc0)='attr/fscreate\x00') write$FUSE_INTERRUPT(r11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x14, 0x1a, &(0x7f0000001fc0)=ANY=[@ANYBLOB="18000000060000000000000008000000181100005e58a0cc855b8ee9f2e78e8b5e634627ae6abdcbf795110a03164b2113fec3142cc3dff1f96e9ac281bd151e8607ffbd23276ec779fe42682d45cc0b3229df4f3acbddee", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001860000005000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x4, 0x62, &(0x7f0000000580)=""/98, 0x1e00, 0x22, '\x00', r5, @lirc_mode2, r6, 0x8, &(0x7f00000008c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0xe, 0x5, 0xffff}, 0x10, 0x0, r7, 0x0, &(0x7f0000001e00)=[r8, r10, r11, 0x1], 0x0, 0x10, 0x8}, 0x94) r12 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') writev(r12, &(0x7f0000000140)=[{&(0x7f0000000180)="95", 0x1}], 0x1) r13 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r14 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r14, 0x6, 0x1f, &(0x7f0000000000)='espintcp', 0x8) bind$inet(r13, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r13, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r15 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000280)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4040004) write(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:17097' (ED25519) to the list of known hosts. [ 32.081856][ T5652] cgroup: Unknown subsys name 'net' [ 32.221311][ T5652] cgroup: Unknown subsys name 'cpuset' [ 32.224877][ T5652] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.154823][ T5652] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.019984][ T5748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.019997][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.022467][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.022574][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.025008][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.025478][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.026046][ T5748] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.026055][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.026261][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.027076][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.027256][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.029124][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.029612][ T5749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.029879][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.030104][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.032878][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.039594][ T5748] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.039908][ T5748] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.044884][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.045247][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.221747][ T5737] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.222457][ T5736] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.223967][ T5734] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.226240][ T5735] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 37.228398][ T5734] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.229145][ T5734] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.350888][ T5734] infiniband rxe0: set active [ 37.353666][ T5734] infiniband rxe0: added rxe_eth0 [ 37.367391][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.372119][ T5734] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 37.372138][ T5734] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 37.372159][ T5734] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 37.388839][ T5734] RDS/IB: rxe0: added [ 37.388951][ T5734] smc: adding ib device rxe0 with port count 1 [ 37.388984][ T5734] smc: ib device rxe0 port 1 has no pnetid [ 37.407439][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.410735][ T5734] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.467961][ T5528] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.486972][ T43] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.539558][ T5734] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.641626][ T5734] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.663273][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.663337][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.663395][ T5737] bridge_slave_0: entered allmulticast mode [ 37.664314][ T5737] bridge_slave_0: entered promiscuous mode [ 37.667234][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.667303][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.667458][ T5737] bridge_slave_1: entered allmulticast mode [ 37.668235][ T5737] bridge_slave_1: entered promiscuous mode [ 37.668925][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.668964][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.669901][ T5736] bridge_slave_0: entered allmulticast mode [ 37.670715][ T5736] bridge_slave_0: entered promiscuous mode [ 37.692878][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.693068][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.693126][ T5736] bridge_slave_1: entered allmulticast mode [ 37.693934][ T5736] bridge_slave_1: entered promiscuous mode [ 37.722134][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.724638][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.732471][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.732569][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.732637][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.732689][ T5735] bridge_slave_0: entered allmulticast mode [ 37.733955][ T5735] bridge_slave_0: entered promiscuous mode [ 37.735171][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.735211][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.735296][ T5735] bridge_slave_1: entered allmulticast mode [ 37.736146][ T5735] bridge_slave_1: entered promiscuous mode [ 37.753474][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.765544][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.783102][ T5737] team0: Port device team_slave_0 added [ 37.784234][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.795349][ T5737] team0: Port device team_slave_1 added [ 37.807023][ T5736] team0: Port device team_slave_0 added [ 37.827965][ T5736] team0: Port device team_slave_1 added [ 37.828460][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.828470][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.828483][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.835145][ T5734] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.842111][ T5735] team0: Port device team_slave_0 added [ 37.842594][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.842603][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.842615][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.843747][ T5735] team0: Port device team_slave_1 added [ 37.844026][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.844033][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.844046][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.851026][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.851036][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.851049][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.876593][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.876603][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.876615][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.891904][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.891914][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.891927][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.900065][ T5737] hsr_slave_0: entered promiscuous mode [ 37.900504][ T5737] hsr_slave_1: entered promiscuous mode [ 37.930361][ T5736] hsr_slave_0: entered promiscuous mode [ 37.930797][ T5736] hsr_slave_1: entered promiscuous mode [ 37.931160][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 37.931209][ T5736] Cannot create hsr debugfs directory [ 37.935695][ T5735] hsr_slave_0: entered promiscuous mode [ 37.936396][ T5735] hsr_slave_1: entered promiscuous mode [ 37.936902][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 37.936916][ T5735] Cannot create hsr debugfs directory [ 38.216836][ T5737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.228511][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.229654][ T5737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.235553][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.244720][ T5737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.247772][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.248196][ T5737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.252328][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.289215][ T5736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.293593][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.294443][ T5736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.296704][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.312753][ T5736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.315157][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.321731][ T5736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.326079][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.332422][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.332473][ T5737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.332985][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.333055][ T5737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.391714][ T5735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.393601][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.394639][ T5735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.399047][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.417600][ T5735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.420039][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.427693][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.427766][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.427857][ T5734] bridge_slave_0: entered allmulticast mode [ 38.428967][ T5734] bridge_slave_0: entered promiscuous mode [ 38.430416][ T5735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.434824][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.436283][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.436328][ T5736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.436433][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.436476][ T5736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.440810][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.440880][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.440965][ T5734] bridge_slave_1: entered allmulticast mode [ 38.442472][ T5734] bridge_slave_1: entered promiscuous mode [ 38.469746][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.477105][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.480614][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.482658][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.485039][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.497007][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.528614][ T5734] team0: Port device team_slave_0 added [ 38.530076][ T5734] team0: Port device team_slave_1 added [ 38.555424][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.555440][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.555460][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.560478][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.560493][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.560513][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.607557][ T5734] hsr_slave_0: entered promiscuous mode [ 38.607996][ T5734] hsr_slave_1: entered promiscuous mode [ 38.608291][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 38.608303][ T5734] Cannot create hsr debugfs directory [ 38.613286][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.641004][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.684594][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.701588][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.714956][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.715004][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.731162][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.731215][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.732030][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.732069][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.745291][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.745373][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.767951][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.812214][ T5734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.815223][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.822076][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.824147][ T5734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.827203][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.828100][ T5734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.832233][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.833382][ T5734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.835158][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.842105][ T100] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.842153][ T100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.868097][ T5736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.872448][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.872538][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.962651][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.971397][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.980778][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.980823][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.986881][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.986924][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.110101][ T66] Bluetooth: hci2: command tx timeout [ 39.110105][ T5743] Bluetooth: hci3: command tx timeout [ 39.110401][ T66] Bluetooth: hci1: command tx timeout [ 39.110532][ T5748] Bluetooth: hci0: command tx timeout [ 39.124043][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.165974][ T5736] veth0_vlan: entered promiscuous mode [ 39.169658][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.173342][ T5736] veth1_vlan: entered promiscuous mode [ 39.198417][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.209883][ T5737] veth0_vlan: entered promiscuous mode [ 39.211915][ T5736] veth0_macvtap: entered promiscuous mode [ 39.216008][ T5737] veth1_vlan: entered promiscuous mode [ 39.218712][ T5736] veth1_macvtap: entered promiscuous mode [ 39.232530][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.242785][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.246383][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.267701][ T5737] veth0_macvtap: entered promiscuous mode [ 39.287680][ T5735] veth0_vlan: entered promiscuous mode [ 39.289945][ T5737] veth1_macvtap: entered promiscuous mode [ 39.301512][ T5735] veth1_vlan: entered promiscuous mode [ 39.332743][ T5734] veth0_vlan: entered promiscuous mode [ 39.334864][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.334875][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.342305][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.350873][ T5734] veth1_vlan: entered promiscuous mode [ 39.360058][ T5735] veth0_macvtap: entered promiscuous mode [ 39.362075][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.365332][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.365343][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.367234][ T5735] veth1_macvtap: entered promiscuous mode [ 39.388575][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.394807][ T5734] veth0_macvtap: entered promiscuous mode [ 39.406659][ T5734] veth1_macvtap: entered promiscuous mode [ 39.413605][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.426202][ T5736] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.437208][ T5736] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.445023][ T5736] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.446015][ T5736] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.456930][ T5736] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.469068][ T100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.469083][ T100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.485955][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.499607][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.519277][ T100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.519294][ T100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.546596][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 39.569884][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.569895][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.591599][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.591612][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.617091][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.617105][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.641348][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.641366][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.649255][ T5797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.649374][ T5797] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.649393][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.649410][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.649427][ T5797] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.649443][ T5797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.649460][ T5797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.649477][ T5797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.649493][ T5797] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.649509][ T5797] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.649526][ T5797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.649542][ T5797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.649559][ T5797] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.650024][ T5797] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.650044][ T5797] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.650060][ T5797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.701828][ T35] hid-generic 0003:0001:0001.0002: hidraw1: USB HID v0.01 Mouse [syz1] on syz0 [ 39.950537][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 39.958953][ T5910] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 39.971571][ T5919] bond0: (slave bond_slave_1): Releasing backup interface [ 39.985187][ T5921] bridge_slave_0: left allmulticast mode [ 39.985203][ T5921] bridge_slave_0: left promiscuous mode [ 39.985927][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.992270][ T5921] bridge_slave_1: left allmulticast mode [ 39.992284][ T5921] bridge_slave_1: left promiscuous mode [ 39.992391][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.999966][ T5921] bond0: (slave bond_slave_0): Releasing backup interface [ 40.002517][ T5921] bond0: (slave bond_slave_1): Releasing backup interface [ 40.009542][ T5921] team0: Port device team_slave_0 removed [ 40.015484][ T5921] team0: Port device team_slave_1 removed [ 40.016040][ T5921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.016055][ T5921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.019945][ T5921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.019956][ T5921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.022485][ T5921] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 40.513063][ T5934] No control pipe specified [ 40.585488][ T5938] netlink: 'syz.2.10': attribute type 4 has an invalid length. [ 40.585502][ T5938] netlink: 17 bytes leftover after parsing attributes in process `syz.2.10'. [ 40.642376][ T5942] rxe_eth0 speed is unknown, defaulting to 1000 [ 40.857404][ T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 40.885304][ T5956] ======================================================= [ 40.885304][ T5956] WARNING: The mand mount option has been deprecated and [ 40.885304][ T5956] and is ignored by this kernel. Remove the mand [ 40.885304][ T5956] option from the mount to silence this warning. [ 40.885304][ T5956] ======================================================= [ 40.934327][ T5956] smpboot: CPU 1 is now offline [ 40.940496][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 40.940508][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 40.984440][ T5956] smpboot: CPU 3 is now offline [ 41.017547][ T35] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 41.020887][ T35] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 41.020907][ T35] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 41.020925][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.024932][ T5938] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 41.030221][ T35] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 41.117452][ T5748] Bluetooth: hci1: command tx timeout [ 41.117474][ T5748] Bluetooth: hci0: command tx timeout [ 41.157416][ T5961] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 41.188812][ T5105] Bluetooth: hci3: command tx timeout [ 41.238400][ T5961] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 41.603164][ T5849] usb 7-1: USB disconnect, device number 2 [ 41.775415][ T5987] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 41.777011][ T5987] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 41.777737][ T5987] ALSA: mixer_oss: invalid index 137438 [ 41.790058][ T5987] gadgetfs: bound to dummy_udc driver [ 41.837006][ T44] audit: type=1326 audit(1792123648.384:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.3.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 41.837169][ T44] audit: type=1326 audit(1792123648.384:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.3.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 41.837853][ T44] audit: type=1326 audit(1792123648.394:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.3.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 41.838116][ T44] audit: type=1326 audit(1792123648.394:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.3.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 41.838137][ T44] audit: type=1326 audit(1792123648.394:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.3.16" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 41.838156][ T44] audit: type=1326 audit(1792123648.394:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.3.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 41.838175][ T44] audit: type=1326 audit(1792123648.394:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.3.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 41.838295][ T44] audit: type=1326 audit(1792123648.394:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.3.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 41.839309][ T44] audit: type=1326 audit(1792123648.394:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.3.16" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 41.839332][ T44] audit: type=1326 audit(1792123648.394:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz.3.16" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73cefec code=0x7ffc0000 [ 42.027563][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 42.027831][ C0] gadgetfs: connected [ 42.028665][ T10] gadgetfs: disconnected [ 42.217497][ T1685] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 42.321403][ T6003] futex_wake_op: syz.1.20 tries to shift op by 144; fix this program [ 42.387866][ T1685] usb 8-1: Using ep0 maxpacket: 16 [ 42.391860][ T1685] usb 8-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 42.398986][ T1685] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 42.399002][ T1685] usb 8-1: config 1 has no interface number 0 [ 42.399019][ T1685] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 42.406942][ T1685] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.406956][ T1685] usb 8-1: Product: syz [ 42.406963][ T1685] usb 8-1: Manufacturer: syz [ 42.406970][ T1685] usb 8-1: SerialNumber: syz [ 42.709767][ T6010] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 42.720253][ T6010] can0: slcan on ttyS3. [ 42.775892][ T6011] capability: warning: `syz.1.22' uses deprecated v2 capabilities in a way that may be insecure [ 42.787036][ T6010] can0 (unregistered): slcan off ttyS3. [ 43.075187][ T6024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25'. [ 43.137599][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 43.187466][ T5105] Bluetooth: hci0: command tx timeout [ 43.187499][ T5105] Bluetooth: hci1: command tx timeout [ 43.218111][ T1685] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 43.269111][ T5105] Bluetooth: hci3: command tx timeout [ 43.272160][ T1685] usb 8-1: USB disconnect, device number 2 [ 43.291631][ T5739] udevd[5739]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 43.550877][ T6036] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 43.563640][ T6030] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 43.567538][ T6036] netlink: 'syz.1.31': attribute type 16 has an invalid length. [ 43.567549][ T6036] netlink: 'syz.1.31': attribute type 17 has an invalid length. [ 43.589296][ T6036] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 43.627024][ T6041] FAULT_INJECTION: forcing a failure. [ 43.627024][ T6041] name failslab, interval 1, probability 0, space 0, times 0 [ 43.627047][ T6041] CPU: 1 UID: 0 PID: 6041 Comm: syz.3.33 Tainted: G L syzkaller #0 PREEMPT(full) [ 43.627063][ T6041] Tainted: [L]=SOFTLOCKUP [ 43.627067][ T6041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 43.627074][ T6041] Call Trace: [ 43.627078][ T6041] [ 43.627082][ T6041] dump_stack_lvl+0x100/0x190 [ 43.627102][ T6041] should_fail_ex.cold+0x5/0xa [ 43.627117][ T6041] should_failslab+0xc2/0x120 [ 43.627136][ T6041] kmem_cache_alloc_noprof+0x92/0x6a0 [ 43.627153][ T6041] ? op_alloc+0x2b/0x4e0 [ 43.627171][ T6041] op_alloc+0x2b/0x4e0 [ 43.627185][ T6041] ? __do_sys_fsconfig+0x4e1/0xcb0 [ 43.627200][ T6041] orangefs_get_tree+0xf9/0x1080 [ 43.627214][ T6041] ? __pfx___mutex_lock+0x10/0x10 [ 43.627226][ T6041] ? __pfx_orangefs_get_tree+0x10/0x10 [ 43.627238][ T6041] ? rcu_is_watching+0x13/0xc0 [ 43.627251][ T6041] ? apparmor_capable+0x1d7/0x4d0 [ 43.627264][ T6041] ? bpf_lsm_capable+0x9/0x10 [ 43.627279][ T6041] vfs_get_tree+0x92/0x320 [ 43.627291][ T6041] vfs_cmd_create+0xd7/0x2a0 [ 43.627321][ T6041] __do_sys_fsconfig+0x55a/0xcb0 [ 43.627341][ T6041] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 43.627355][ T6041] ? fput+0x7c/0x100 [ 43.627379][ T6041] __do_fast_syscall_32+0x13a/0x8b0 [ 43.627394][ T6041] do_fast_syscall_32+0x32/0x70 [ 43.627406][ T6041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 43.627422][ T6041] RIP: 0023:0xf73cefec [ 43.627436][ T6041] Code: Unable to access opcode bytes at 0xf73cefc2. [ 43.627441][ T6041] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 00000000000001af [ 43.627453][ T6041] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000006 [ 43.627473][ T6041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.627480][ T6041] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 43.627486][ T6041] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 43.627493][ T6041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 43.627507][ T6041] [ 43.632531][ T6041] op_alloc: kmem_cache_zalloc failed! [ 43.642639][ T6045] ublk_ctrl_add_dev: dev id not match 4294967295 57 [ 43.699242][ T6046] process 'syz.2.32' launched './file2' with NULL argv: empty string added [ 43.702049][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 43.933250][ T5105] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 43.933272][ T5105] Bluetooth: Wrong link type (-22) [ 44.510768][ T10] bridge0: entered promiscuous mode [ 44.513707][ T6065] netlink: 56 bytes leftover after parsing attributes in process `syz.2.40'. [ 44.569071][ T6067] Zero length message leads to an empty skb [ 45.001247][ T6087] libceph: resolve '1' (ret=-3): failed [ 45.107626][ T5105] Bluetooth: hci2: command tx timeout [ 45.267445][ T5105] Bluetooth: hci0: command tx timeout [ 45.277543][ T5105] Bluetooth: hci1: command tx timeout [ 45.347490][ T5105] Bluetooth: hci3: command tx timeout [ 45.575747][ T6097] netlink: 'syz.1.51': attribute type 8 has an invalid length. [ 45.598320][ T6101] FAULT_INJECTION: forcing a failure. [ 45.598320][ T6101] name failslab, interval 1, probability 0, space 0, times 0 [ 45.598353][ T6101] CPU: 3 UID: 0 PID: 6101 Comm: syz.3.53 Tainted: G L syzkaller #0 PREEMPT(full) [ 45.598378][ T6101] Tainted: [L]=SOFTLOCKUP [ 45.598384][ T6101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 45.598393][ T6101] Call Trace: [ 45.598401][ T6101] [ 45.598408][ T6101] dump_stack_lvl+0x100/0x190 [ 45.598439][ T6101] should_fail_ex.cold+0x5/0xa [ 45.598465][ T6101] should_failslab+0xc2/0x120 [ 45.598494][ T6101] kmem_cache_alloc_noprof+0x92/0x6a0 [ 45.598520][ T6101] ? do_getname+0x35/0x390 [ 45.598542][ T6101] do_getname+0x35/0x390 [ 45.598564][ T6101] __ia32_sys_mkdirat+0x77/0xc0 [ 45.598592][ T6101] __do_fast_syscall_32+0x13a/0x8b0 [ 45.598615][ T6101] do_fast_syscall_32+0x32/0x70 [ 45.598635][ T6101] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 45.598656][ T6101] RIP: 0023:0xf73cefec [ 45.598676][ T6101] Code: Unable to access opcode bytes at 0xf73cefc2. [ 45.598684][ T6101] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 45.598703][ T6101] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800003c0 [ 45.598714][ T6101] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000000 [ 45.598726][ T6101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 45.598735][ T6101] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 45.598747][ T6101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 45.598769][ T6101] [ 45.606255][ T71] Bluetooth: hci4: Frame reassembly failed (-84) [ 45.728649][ T6106] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 45.728672][ T6106] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 45.728755][ T6107] vhci_hcd: xmit failed -107 [ 45.731402][ T6106] vhci_hcd vhci_hcd.0: Device attached [ 45.734283][ T12] vhci_hcd vhci_hcd.0: stop threads [ 45.734293][ T12] vhci_hcd vhci_hcd.0: release socket [ 45.734307][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 45.875480][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 46.401039][ T6128] input: syz0 as /devices/virtual/input/input8 [ 46.786406][ T6138] netlink: 'syz.1.67': attribute type 2 has an invalid length. [ 46.786421][ T6138] netlink: 'syz.1.67': attribute type 1 has an invalid length. [ 46.786428][ T6138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.67'. [ 46.786435][ T6138] netlink: 'syz.1.67': attribute type 2 has an invalid length. [ 46.786442][ T6138] netlink: 'syz.1.67': attribute type 1 has an invalid length. [ 46.786448][ T6138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.67'. [ 46.786454][ T6138] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 46.862728][ T44] kauditd_printk_skb: 124 callbacks suppressed [ 46.862746][ T44] audit: type=1326 audit(1792123653.414:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.68" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000 [ 46.863403][ T44] audit: type=1326 audit(1792123653.414:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.68" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000 [ 46.863992][ T44] audit: type=1326 audit(1792123653.414:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.68" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf747efec code=0x7ffc0000 [ 46.864029][ T44] audit: type=1326 audit(1792123653.414:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.68" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000 [ 46.864183][ T44] audit: type=1326 audit(1792123653.414:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.68" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000 [ 46.864541][ T44] audit: type=1326 audit(1792123653.414:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.68" exe="/syz-executor" sig=0 arch=40000003 syscall=328 compat=1 ip=0xf747efec code=0x7ffc0000 [ 46.864884][ T44] audit: type=1326 audit(1792123653.414:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.68" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000 [ 46.865089][ T44] audit: type=1326 audit(1792123653.414:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.68" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000 [ 46.867263][ T44] audit: type=1326 audit(1792123653.414:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.68" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf747efec code=0x7ffc0000 [ 46.867301][ T44] audit: type=1326 audit(1792123653.414:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6139 comm="syz.1.68" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747efec code=0x7ffc0000 [ 47.187490][ T5748] Bluetooth: hci2: command tx timeout [ 47.667691][ T5748] Bluetooth: hci4: command 0x1003 tx timeout [ 47.668413][ T5105] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 47.785535][ T6148] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 48.109932][ T6165] sctp: [Deprecated]: syz.2.76 (pid 6165) Use of int in max_burst socket option. [ 48.109932][ T6165] Use struct sctp_assoc_value instead [ 48.111406][ T6165] jffs2: notice: (6165) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 48.187614][ T5830] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 48.192370][ T6170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 48.338132][ T5830] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 48.339254][ T5830] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 48.339296][ T5830] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 48.339318][ T5830] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.339337][ T5830] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 48.339358][ T5830] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 48.340295][ T5830] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 48.340329][ T5830] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 48.340350][ T5830] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.340369][ T5830] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 48.340390][ T5830] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 48.341482][ T5830] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 48.341516][ T5830] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 48.341537][ T5830] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.341557][ T5830] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 48.341576][ T5830] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 48.344306][ T5830] usb 6-1: string descriptor 0 read error: -22 [ 48.344408][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.433263][ T5830] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 48.748426][ T5849] usb 6-1: USB disconnect, device number 2 [ 48.886106][ T6188] Bluetooth: MGMT ver 1.23 [ 48.990959][ T6193] jffs2: notice: (6193) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 49.011578][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 49.260820][ T6211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.91'. [ 49.267524][ T5105] Bluetooth: hci2: command tx timeout [ 49.661635][ T71] IPVS: starting estimator thread 0... [ 49.757475][ T6229] IPVS: using max 44 ests per chain, 105600 per kthread [ 49.951086][ T6236] netlink: 20 bytes leftover after parsing attributes in process `syz.3.98'. [ 50.190332][ T6221] orangefs_mount: mount request failed with -4 [ 50.389889][ T1685] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 50.512481][ T6265] profile_transition: unconfined exec no attachment [ 50.532406][ T6266] profile_transition: unconfined exec no attachment [ 50.550070][ T1685] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 50.553567][ T1685] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.553588][ T1685] usb 7-1: Product: syz [ 50.553602][ T1685] usb 7-1: Manufacturer: syz [ 50.553613][ T1685] usb 7-1: SerialNumber: syz [ 50.710853][ T6269] TC_ACT_REPEAT abuse ? [ 50.836931][ T6273] profile_transition: unconfined exec no attachment [ 50.857464][ T6274] profile_transition: unconfined exec no attachment [ 50.967941][ T1685] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 50.967972][ T1685] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 50.968635][ T1685] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 50.968659][ T1685] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 50.974056][ T1685] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 50.975971][ T1685] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 50.987583][ T1685] usb 7-1: USB disconnect, device number 3 [ 51.249257][ T6276] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:0 [ 51.249624][ T6276] tipc: Can't bind to reserved service type 0 [ 51.385735][ T6285] profile_transition: unconfined exec no attachment [ 51.408371][ T6281] dlm: non-version read from control device 0 [ 51.479394][ T6282] tmpfs: Unknown parameter '0x0000000000000004' [ 51.868570][ T6293] 9p: Bad value for 'version' [ 51.868774][ T6293] 9p: Bad value for 'version' [ 51.868943][ T6293] 9p: Bad value for 'version' [ 51.869554][ T6293] 9p: Bad value for 'version' [ 51.869726][ T6293] 9p: Bad value for 'version' [ 51.869885][ T6293] 9p: Bad value for 'version' [ 51.870042][ T6293] 9p: Bad value for 'version' [ 51.870207][ T6293] 9p: Bad value for 'version' [ 51.870369][ T6293] 9p: Bad value for 'version' [ 51.870670][ T6293] 9p: Bad value for 'version' [ 51.870833][ T6293] 9p: Bad value for 'version' [ 51.870993][ T6293] 9p: Bad value for 'version' [ 51.871159][ T6293] 9p: Bad value for 'version' [ 51.871319][ T6293] 9p: Bad value for 'version' [ 51.871476][ T6293] 9p: Bad value for 'version' [ 51.871755][ T6293] 9p: Bad value for 'version' [ 51.871926][ T6293] 9p: Bad value for 'version' [ 51.872084][ T6293] 9p: Bad value for 'version' [ 51.872247][ T6293] 9p: Bad value for 'version' [ 51.872407][ T6293] 9p: Bad value for 'version' [ 51.872563][ T6293] 9p: Bad value for 'version' [ 51.872721][ T6293] 9p: Bad value for 'version' [ 51.872984][ T6293] 9p: Bad value for 'version' [ 51.873167][ T6293] 9p: Bad value for 'version' [ 51.873403][ T6293] 9p: Bad value for 'version' [ 51.873566][ T6293] 9p: Bad value for 'version' [ 51.873723][ T6293] 9p: Bad value for 'version' [ 51.873981][ T6293] 9p: Bad value for 'version' [ 51.874149][ T6293] 9p: Bad value for 'version' [ 51.874309][ T6293] 9p: Bad value for 'version' [ 51.874466][ T6293] 9p: Bad value for 'version' [ 51.874627][ T6293] 9p: Bad value for 'version' [ 51.874784][ T6293] 9p: Bad value for 'version' [ 52.082007][ T6302] comedi comedi2: pcl818: I/O base address not correctly aligned [ 52.374754][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 52.697425][ T5849] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 52.847851][ T5849] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 52.848771][ T5849] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.848791][ T5849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.850548][ T5849] usb 8-1: config 0 descriptor?? [ 52.853986][ T5849] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 53.246804][ T6322] profile_transition: unconfined exec no attachment [ 53.499555][ T6327] profile_transition: unconfined exec no attachment [ 53.550293][ T6328] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 53.550323][ T6328] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 53.550506][ T6328] vhci_hcd vhci_hcd.0: Device attached [ 53.985055][ T6337] profile_transition: unconfined exec no attachment [ 54.010748][ T6335] profile_transition: unconfined exec no attachment [ 54.014422][ T6339] profile_transition: unconfined exec no attachment [ 54.280837][ T6329] vhci_hcd: connection closed [ 54.281887][ T12] vhci_hcd vhci_hcd.1: stop threads [ 54.282349][ T12] vhci_hcd vhci_hcd.1: release socket [ 54.282367][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 55.020679][ T6366] syz.2.125 uses obsolete (PF_INET,SOCK_PACKET) [ 55.137416][ T5830] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 55.287421][ T5830] usb 6-1: device descriptor read/64, error -71 [ 55.308860][ T6372] netlink: 'syz.0.126': attribute type 3 has an invalid length. [ 55.426521][ T6377] netlink: 'syz.2.128': attribute type 3 has an invalid length. [ 55.475957][ T6380] capability: warning: `syz.2.130' uses 32-bit capabilities (legacy support in use) [ 55.481318][ T6386] netlink: 36 bytes leftover after parsing attributes in process `syz.2.130'. [ 55.501572][ T5840] usb 8-1: USB disconnect, device number 3 [ 55.537417][ T5830] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 55.687662][ T5830] usb 6-1: device descriptor read/64, error -71 [ 55.713457][ T6396] profile_transition: 6 callbacks suppressed [ 55.713474][ T6396] profile_transition: unconfined exec no attachment [ 55.801437][ T5830] usb usb6-port1: attempt power cycle [ 56.147579][ T5830] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 56.178625][ T5830] usb 6-1: device descriptor read/8, error -71 [ 56.438962][ T5830] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 56.458294][ T5830] usb 6-1: device descriptor read/8, error -71 [ 56.567709][ T5830] usb usb6-port1: unable to enumerate USB device [ 56.708493][ T855] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 56.867397][ T855] usb 7-1: Using ep0 maxpacket: 16 [ 56.867831][ T855] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 56.868631][ T855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.868646][ T855] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.868663][ T855] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 56.868681][ T855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.870541][ T855] usb 7-1: config 0 descriptor?? [ 57.546875][ T855] usbhid 7-1:0.0: can't add hid device: -71 [ 57.546931][ T855] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 57.927675][ T855] usb 7-1: USB disconnect, device number 4 [ 58.134711][ T6418] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 58.134736][ T6418] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.136146][ T6418] vhci_hcd vhci_hcd.0: Device attached [ 58.155929][ T6418] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7) [ 58.155945][ T6418] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.155968][ T6418] vhci_hcd vhci_hcd.0: Device attached [ 58.156935][ T6418] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 58.156948][ T6418] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.156973][ T6418] vhci_hcd vhci_hcd.0: Device attached [ 58.159413][ T6418] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11) [ 58.159428][ T6418] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.159452][ T6418] vhci_hcd vhci_hcd.0: Device attached [ 58.164014][ T6418] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13) [ 58.164027][ T6418] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.164710][ T6418] vhci_hcd vhci_hcd.0: Device attached [ 58.168009][ T6418] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(15) [ 58.168022][ T6418] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.168044][ T6418] vhci_hcd vhci_hcd.0: Device attached [ 58.172952][ T6418] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(17) [ 58.172964][ T6418] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.172986][ T6418] vhci_hcd vhci_hcd.0: Device attached [ 58.178423][ T6418] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(19) [ 58.178437][ T6418] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 58.178478][ T6418] vhci_hcd vhci_hcd.0: Device attached [ 58.185576][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 58.242785][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 58.245879][ T6443] profile_transition: unconfined exec no attachment [ 58.276492][ T6447] profile_transition: unconfined exec no attachment [ 58.330294][ T6446] cdrom: dropping to single frame dma [ 58.387443][ T9] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 58.522021][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.145'. [ 58.545739][ T6457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.557690][ T1685] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 58.637717][ T6466] netlink: 48 bytes leftover after parsing attributes in process `syz.1.148'. [ 58.728687][ T1685] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.729682][ T1685] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.729706][ T1685] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.729723][ T1685] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.729754][ T1685] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.734208][ T1685] usb 7-1: config 0 descriptor?? [ 59.173098][ T6474] netlink: 'syz.3.150': attribute type 2 has an invalid length. [ 59.217376][ T6433] vhci_hcd: connection closed [ 59.217879][ T6429] vhci_hcd: connection closed [ 59.218426][ T6431] vhci_hcd: connection closed [ 59.218872][ T12] vhci_hcd vhci_hcd.0: stop threads [ 59.218894][ T12] vhci_hcd vhci_hcd.0: release socket [ 59.218902][ T6423] vhci_hcd: connection closed [ 59.218977][ T6427] vhci_hcd: connection closed [ 59.219051][ T6425] vhci_hcd: connection closed [ 59.219168][ T6421] vhci_hcd: connection closed [ 59.219292][ T6419] vhci_hcd: connection reset by peer [ 59.222475][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 59.222694][ T12] vhci_hcd vhci_hcd.0: stop threads [ 59.222703][ T12] vhci_hcd vhci_hcd.0: release socket [ 59.222782][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 59.222954][ T12] vhci_hcd vhci_hcd.0: stop threads [ 59.222965][ T12] vhci_hcd vhci_hcd.0: release socket [ 59.222997][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 59.223158][ T12] vhci_hcd vhci_hcd.0: stop threads [ 59.223165][ T12] vhci_hcd vhci_hcd.0: release socket [ 59.223193][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 59.223359][ T12] vhci_hcd vhci_hcd.0: stop threads [ 59.223368][ T12] vhci_hcd vhci_hcd.0: release socket [ 59.223386][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 59.223524][ T12] vhci_hcd vhci_hcd.0: stop threads [ 59.223535][ T12] vhci_hcd vhci_hcd.0: release socket [ 59.223563][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 59.223725][ T12] vhci_hcd vhci_hcd.0: stop threads [ 59.223735][ T12] vhci_hcd vhci_hcd.0: release socket [ 59.223764][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 59.223908][ T12] vhci_hcd vhci_hcd.0: stop threads [ 59.223919][ T12] vhci_hcd vhci_hcd.0: release socket [ 59.223946][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 59.334008][ T1685] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 59.355741][ T1685] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 59.370043][ T6475] profile_transition: unconfined exec no attachment [ 59.606547][ T5840] usb 7-1: USB disconnect, device number 5 [ 59.729889][ T6478] profile_transition: unconfined exec no attachment [ 59.752604][ T6481] profile_transition: unconfined exec no attachment [ 59.780569][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 60.131009][ T6495] profile_transition: unconfined exec no attachment [ 60.146454][ T6496] profile_transition: unconfined exec no attachment [ 60.185256][ T6499] cgroup: Unknown subsys name 'cpuset' [ 60.193472][ T6500] profile_transition: unconfined exec no attachment [ 60.314680][ T5734] overlayfs: failed lookup in lower (newroot/35, name='bus', err=-40): overlapping layers [ 60.315738][ T5734] overlayfs: failed lookup in lower (newroot/35, name='bus', err=-40): overlapping layers [ 60.319056][ T6507] FAULT_INJECTION: forcing a failure. [ 60.319056][ T6507] name failslab, interval 1, probability 0, space 0, times 0 [ 60.319073][ T6507] CPU: 0 UID: 0 PID: 6507 Comm: syz.0.160 Tainted: G L syzkaller #0 PREEMPT(full) [ 60.319088][ T6507] Tainted: [L]=SOFTLOCKUP [ 60.319092][ T6507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.319103][ T6507] Call Trace: [ 60.319107][ T6507] [ 60.319111][ T6507] dump_stack_lvl+0x100/0x190 [ 60.319130][ T6507] should_fail_ex.cold+0x5/0xa [ 60.319145][ T6507] should_failslab+0xc2/0x120 [ 60.319163][ T6507] kmem_cache_alloc_noprof+0x92/0x6a0 [ 60.319178][ T6507] ? __pfx_map_id_range_down+0x10/0x10 [ 60.319195][ T6507] ? security_inode_alloc+0x3b/0x2c0 [ 60.319210][ T6507] security_inode_alloc+0x3b/0x2c0 [ 60.319223][ T6507] inode_init_always_gfp+0xc6f/0xfb0 [ 60.319241][ T6507] alloc_inode+0x8e/0x250 [ 60.319253][ T6507] new_inode+0x22/0x1c0 [ 60.319279][ T6507] debugfs_create_symlink+0xd6/0x220 [ 60.319293][ T6507] ref_tracker_dir_symlink+0x257/0x3b0 [ 60.319308][ T6507] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 60.319336][ T6507] ? rcu_is_watching+0x13/0xc0 [ 60.319349][ T6507] ? ida_alloc_range+0x70d/0x830 [ 60.319360][ T6507] ? kfree+0x1e5/0x6d0 [ 60.319371][ T6507] ? xas_nomem+0x189/0x2c0 [ 60.319385][ T6507] ? __pfx_net_ns_net_init+0x10/0x10 [ 60.319400][ T6507] net_ns_net_init+0xd2/0x120 [ 60.319414][ T6507] ops_init+0x1e2/0x5f0 [ 60.319429][ T6507] setup_net+0x118/0x3a0 [ 60.319443][ T6507] ? __pfx_setup_net+0x10/0x10 [ 60.319461][ T6507] copy_net_ns+0x345/0x7a0 [ 60.319478][ T6507] create_new_namespaces+0x3ea/0xac0 [ 60.319498][ T6507] unshare_nsproxy_namespaces+0xf2/0x220 [ 60.319517][ T6507] ksys_unshare+0x4a2/0xb30 [ 60.319529][ T6507] ? __pfx_ksys_unshare+0x10/0x10 [ 60.319546][ T6507] __ia32_sys_unshare+0x30/0x40 [ 60.319558][ T6507] __do_fast_syscall_32+0x13a/0x8b0 [ 60.319571][ T6507] do_fast_syscall_32+0x32/0x70 [ 60.319583][ T6507] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.319597][ T6507] RIP: 0023:0xf73defec [ 60.319609][ T6507] Code: Unable to access opcode bytes at 0xf73defc2. [ 60.319614][ T6507] RSP: 002b:00000000f53d550c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 60.319625][ T6507] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 60.319631][ T6507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.319637][ T6507] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.319643][ T6507] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 60.319649][ T6507] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.319664][ T6507] [ 60.320048][ T6507] debugfs: out of free dentries, can not create symlink 'netns-34-4026532234-notrefcnt' [ 60.347224][ T6507] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.487565][ T5840] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 60.637410][ T5840] usb 6-1: Using ep0 maxpacket: 8 [ 60.637860][ T5840] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 60.638669][ T5840] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 60.638698][ T5840] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 60.638711][ T5840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 60.638723][ T5840] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31012, setting to 1024 [ 60.638735][ T5840] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 60.638746][ T5840] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.638764][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.694089][ T5797] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.764823][ T5797] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.822323][ T5797] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.834402][ T6512] profile_transition: unconfined exec no attachment [ 60.847401][ T5840] usb 6-1: usb_control_msg returned -32 [ 60.847426][ T5840] usbtmc 6-1:16.0: can't read capabilities [ 60.917939][ T5797] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.963505][ T5748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.965108][ T5748] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.965742][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.969999][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.973226][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.992757][ T6517] profile_transition: unconfined exec no attachment [ 61.021641][ T6518] profile_transition: unconfined exec no attachment [ 61.051710][ T6520] profile_transition: unconfined exec no attachment [ 61.067100][ T5797] bridge_slave_1: left allmulticast mode [ 61.067135][ T5797] bridge_slave_1: left promiscuous mode [ 61.068070][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.076580][ T5797] bridge_slave_0: left allmulticast mode [ 61.076594][ T5797] bridge_slave_0: left promiscuous mode [ 61.076686][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.086261][ T6521] profile_transition: unconfined exec no attachment [ 61.203773][ T6525] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -71 [ 61.204869][ T6525] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 61.206659][ T5822] usb 6-1: USB disconnect, device number 7 [ 61.227229][ T6527] ================================================================== [ 61.227242][ T6527] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 61.227272][ T6527] Write of size 8 at addr ffffc90004d09000 by task syz.3.165/6527 [ ** replaying previous printk message ** [ 61.227285][ T6527] [ 61.227295][ T6527] CPU: 2 UID: 0 PID: 6527 Comm: syz.3.165 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.227337][ T6527] Tainted: [L]=SOFTLOCKUP [ 61.227343][ T6527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.227353][ T6527] Call Trace: [ 61.227359][ T6527] [ 61.227366][ T6527] dump_stack_lvl+0x100/0x190 [ 61.227389][ T6527] print_report+0x13d/0x4b0 [ 61.227413][ T6527] ? _raw_spin_lock_irqsave+0x52/0x60 [ 61.227455][ T6527] ? sys_fillrect+0x174a/0x1910 [ 61.227473][ T6527] kasan_report+0xdf/0x1c0 [ 61.227498][ T6527] ? sys_fillrect+0x174a/0x1910 [ 61.227517][ T6527] sys_fillrect+0x174a/0x1910 [ 61.227538][ T6527] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 61.227570][ T6527] bit_clear+0x17d/0x220 [ 61.227594][ T6527] ? __pfx_bit_clear+0x10/0x10 [ 61.227617][ T6527] ? fb_get_color_depth+0x120/0x250 [ 61.227638][ T6527] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.227665][ T6527] __fbcon_clear+0x633/0x760 [ 61.227687][ T6527] ? __pfx_bit_clear+0x10/0x10 [ 61.227711][ T6527] fbcon_scroll+0x48b/0x650 [ 61.227733][ T6527] con_scroll+0x464/0x690 [ 61.227752][ T6527] csi_ECMA.constprop.0+0x1238/0x3b60 [ 61.227771][ T6527] ? find_held_lock+0x2b/0x80 [ 61.227790][ T6527] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 61.227812][ T6527] do_con_write+0x3663/0x4ae0 [ 61.227837][ T6527] ? __pfx_do_con_write+0x10/0x10 [ 61.227857][ T6527] ? add_softcursor+0x190/0x290 [ 61.227881][ T6527] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.227907][ T6527] con_write+0x23/0xb0 [ 61.227925][ T6527] n_tty_write+0x431/0x1160 [ 61.227950][ T6527] ? __pfx_n_tty_write+0x10/0x10 [ 61.227971][ T6527] ? __kasan_kmalloc+0xaa/0xb0 [ 61.227993][ T6527] ? __pfx_woken_wake_function+0x10/0x10 [ 61.228009][ T6527] ? rcu_is_watching+0x13/0xc0 [ 61.228026][ T6527] ? file_tty_write.isra.0+0x694/0x890 [ 61.228044][ T6527] ? kfree+0x1e5/0x6d0 [ 61.228062][ T6527] ? __pfx_n_tty_write+0x10/0x10 [ 61.228083][ T6527] file_tty_write.isra.0+0x4d2/0x890 [ 61.228103][ T6527] vfs_write+0x6af/0x1050 [ 61.228123][ T6527] ? __pfx_tty_write+0x10/0x10 [ 61.228141][ T6527] ? __pfx_vfs_write+0x10/0x10 [ 61.228160][ T6527] ? find_held_lock+0x2b/0x80 [ 61.228187][ T6527] ksys_write+0x12a/0x250 [ 61.228207][ T6527] ? __pfx_ksys_write+0x10/0x10 [ 61.228237][ T6527] __do_fast_syscall_32+0x13a/0x8b0 [ 61.228254][ T6527] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.228280][ T6527] do_fast_syscall_32+0x32/0x70 [ 61.228297][ T6527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.228318][ T6527] RIP: 0023:0xf73cefec [ 61.228337][ T6527] Code: Unable to access opcode bytes at 0xf73cefc2. [ 61.228345][ T6527] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 61.228363][ T6527] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080002100 [ 61.228375][ T6527] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.228386][ T6527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.228397][ T6527] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 61.228408][ T6527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.228425][ T6527] [ 61.228431][ T6527] [ 61.228436][ T6527] The buggy address belongs to a vmalloc virtual mapping [ 61.228447][ T6527] Memory state around the buggy address: [ 61.228457][ T6527] ffffc90004d08f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 61.228469][ T6527] ffffc90004d08f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 61.228480][ T6527] >ffffc90004d09000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 61.228489][ T6527] ^ [ 61.228497][ T6527] ffffc90004d09080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 61.228508][ T6527] ffffc90004d09100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 61.228517][ T6527] ================================================================== [ 61.238102][ T6527] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 61.379351][ T6527] CPU: 2 UID: 0 PID: 6527 Comm: syz.3.165 Tainted: G L syzkaller #0 PREEMPT(full) [ 61.382924][ T6527] Tainted: [L]=SOFTLOCKUP [ 61.384307][ T6527] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 61.387613][ T6527] Call Trace: [ 61.388912][ T6527] [ 61.389881][ T6527] dump_stack_lvl+0x100/0x190 [ 61.391385][ T6527] vpanic+0x553/0x970 [ 61.392722][ T6527] ? __pfx_vpanic+0x10/0x10 [ 61.394193][ T6527] ? sys_fillrect+0x174a/0x1910 [ 61.395759][ T6527] panic+0xd1/0xe0 [ 61.396944][ T6527] ? __pfx_panic+0x10/0x10 [ 61.398434][ T6527] ? sys_fillrect+0x174a/0x1910 [ 61.399971][ T6527] ? preempt_schedule_common+0x3c/0xb0 [ 61.401844][ T6527] check_panic_on_warn.cold+0x19/0x34 [ 61.403420][ T6527] end_report.part.0+0x3a/0x90 [ 61.404972][ T6527] kasan_report.cold+0xe/0x18 [ 61.406488][ T6527] ? sys_fillrect+0x174a/0x1910 [ 61.408058][ T6527] sys_fillrect+0x174a/0x1910 [ 61.409596][ T6527] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 61.411480][ T6527] bit_clear+0x17d/0x220 [ 61.412878][ T6527] ? __pfx_bit_clear+0x10/0x10 [ 61.414401][ T6527] ? fb_get_color_depth+0x120/0x250 [ 61.416119][ T6527] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.418031][ T6527] __fbcon_clear+0x633/0x760 [ 61.419525][ T6527] ? __pfx_bit_clear+0x10/0x10 [ 61.421033][ T6527] fbcon_scroll+0x48b/0x650 [ 61.422643][ T6527] con_scroll+0x464/0x690 [ 61.424061][ T6527] csi_ECMA.constprop.0+0x1238/0x3b60 [ 61.425798][ T6527] ? find_held_lock+0x2b/0x80 [ 61.427273][ T6527] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 61.429663][ T6527] do_con_write+0x3663/0x4ae0 [ 61.431700][ T6527] ? __pfx_do_con_write+0x10/0x10 [ 61.433491][ T6527] ? add_softcursor+0x190/0x290 [ 61.435032][ T6527] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.436904][ T6527] con_write+0x23/0xb0 [ 61.438240][ T6527] n_tty_write+0x431/0x1160 [ 61.439712][ T6527] ? __pfx_n_tty_write+0x10/0x10 [ 61.441348][ T6527] ? __kasan_kmalloc+0xaa/0xb0 [ 61.442879][ T6527] ? __pfx_woken_wake_function+0x10/0x10 [ 61.444880][ T6527] ? rcu_is_watching+0x13/0xc0 [ 61.446438][ T6527] ? file_tty_write.isra.0+0x694/0x890 [ 61.448217][ T6527] ? kfree+0x1e5/0x6d0 [ 61.449546][ T6527] ? __pfx_n_tty_write+0x10/0x10 [ 61.451135][ T6527] file_tty_write.isra.0+0x4d2/0x890 [ 61.452811][ T6527] vfs_write+0x6af/0x1050 [ 61.454263][ T6527] ? __pfx_tty_write+0x10/0x10 [ 61.455788][ T6527] ? __pfx_vfs_write+0x10/0x10 [ 61.457313][ T6527] ? find_held_lock+0x2b/0x80 [ 61.459322][ T6527] ksys_write+0x12a/0x250 [ 61.460813][ T6527] ? __pfx_ksys_write+0x10/0x10 [ 61.462420][ T6527] __do_fast_syscall_32+0x13a/0x8b0 [ 61.464103][ T6527] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.465780][ T6527] do_fast_syscall_32+0x32/0x70 [ 61.467306][ T6527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.469488][ T6527] RIP: 0023:0xf73cefec [ 61.470795][ T6527] Code: Unable to access opcode bytes at 0xf73cefc2. [ 61.472885][ T6527] RSP: 002b:00000000f53e650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 61.475550][ T6527] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080002100 [ 61.478055][ T6527] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.480515][ T6527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.483027][ T6527] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 61.485545][ T6527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.488049][ T6527] [ 61.489645][ T6527] Kernel Offset: disabled [ 61.491007][ T6527] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:07:47 Registers: info registers vcpu 0 CPU#0 RAX=0000000000108909 RBX=ffffffff8fa91580 RCX=ffffffff8bd27275 RDX=0000000000000001 RSI=ffffffff8e3e0fb1 RDI=ffffffff8c625a80 RBP=fffffbfff1f522b0 RSP=ffffffff8fa07cf0 R8 =0000000000000001 R9 =ffffed10056067bd R10=ffff88802b033deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f40fa2 R15=dffffc0000000000 RIP=ffffffff8bd257af RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809574a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c320509 CR3=0000000026429000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc400 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000020400004 Opmask04=00000000ff7fffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561d54500110 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561d544dd690 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75b23f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75b2352c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d362f36627375 2f312e6463685f79 6d6d75642f6d726f 6674616c702f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561d544f2fd8 0000561d544f2fd8 0000000000000041 0000000000302e36 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561d544fcd20 00007f75b23f1bf0 00000000000000e1 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3532302c42353230 2c413532302c4134 32302c343432302c 363132302c453032 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302c433032302c42 3032302c41303230 2c393032302c3830 32302c363032302c ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85b10950 RDI=ffffffff9cc6cba0 RBP=ffffffff9cc6cb60 RSP=ffffc9000042f958 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff398d9c9 R15=dffffc0000000000 RIP=ffffffff85b10977 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809584a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f720f4df CR3=0000000067f05000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000004211 Opmask02=0000000001010037 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000561d544f1680 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f75b23f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff00ffffffff ffffffffffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a0613181a1a0612 181a1a061d181a1a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 061c181a1a061f18 1a1a061e181a1a06 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d362f36627375 2f312e6463685f79 6d6d75642f6d726f 6674616c702f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e55520041090c16 515f095752545441 0c4b424558455e5b 0c5e435e5e490049 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2e65726f632e74 656e2e6c74637379 73203034313d6873 657268745f676f64 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012c302c0000 00002c1d36303020 00002c1d2c30302c 302c2c302c302c2c ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000103 RBX=ffff888025655750 RCX=0000000000000200 RDX=e7378f4f25106a76 RSI=000000004ef7f3e6 RDI=0000000086b0e642 RBP=0000000000000007 RSP=ffffc90000548848 R8 =000000005cc95cd2 R9 =0000000000000007 R10=0000000000000004 R11=0000000000000001 R12=ffff888025654b00 R13=0000000000000004 R14=0000000000000003 R15=e7378f4f25106a76 RIP=ffffffff81e6dbe1 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f91bf664300 ffffffff 00c00000 GS =0000 ffff88809594a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055f1f14ed000 CR3=000000004f7f7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ad 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 727563657301ffff ffffffffffffe908 0280032a00000aa3 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800048002010000 00080606017cae6e 72656b3c20746365 6c65731808048003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000408000380 0201c70800080047 84007963696c6f70 5f6e69616d6f642f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f796f6d6f742f63 65735f7379732f2e 01ffffffffffffff ffc1080380030fff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0200080002 80020fffffffff02 0fffffffff020a01 45b2007366797469 ZMM24=92cdf00892cdf008 92cdf00892cdf008 92cdf00892cdf008 92cdf00892cdf008 92cdf00892cdf008 92cdf00892cdf008 92cdf00892cdf008 92cdf00892cdf008 ZMM25=1150792611507926 1150792611507926 1150792611507926 1150792611507926 1150792611507926 1150792611507926 1150792611507926 1150792611507926 ZMM26=0d8ced160d8ced16 0d8ced160d8ced16 0d8ced160d8ced16 0d8ced160d8ced16 0d8ced160d8ced16 0d8ced160d8ced16 0d8ced160d8ced16 0d8ced160d8ced16 ZMM27=d945cbd3d945cbd3 d945cbd3d945cbd3 d945cbd3d945cbd3 d945cbd3d945cbd3 d945cbd3d945cbd3 d945cbd3d945cbd3 d945cbd3d945cbd3 d945cbd3d945cbd3 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0d0300000d030000 0d0300000d030000 0d0300000d030000 0d0300000d030000 0d0300000d030000 0d0300000d030000 0d0300000d030000 0d0300000d030000 info registers vcpu 3 CPU#3 RAX=ffffffff92e9334e RBX=0000000000000002 RCX=dffffc0000000000 RDX=0000000000000006 RSI=0000000000000000 RDI=ffffffff925f2740 RBP=ffffffff925f274c RSP=ffffc900005f8960 R8 =ffffffff92e93366 R9 =0000000000000007 R10=0000000000000200 R11=000000000000c9f9 R12=ffffffff925f2748 R13=ffffffff81c9f9e9 R14=ffffffff925f2740 R15=0000000000000002 RIP=ffffffff81b95a5b RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888095a4a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f2a190 CR3=0000000067c52000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000