last executing test programs: 10.331895156s ago: executing program 1 (id=28): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x1e, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001840)=ANY=[], 0x1208}}, 0x8084) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x18, 0x3f9, 0xc01, 0x70bd2b, 0x25dfdbfe, {0x1, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) socket(0x10, 0x3, 0x0) r2 = open(0x0, 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x262e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="f600"], 0x18}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) io_uring_enter(r5, 0x708, 0x41e3, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r9, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000700)={0x77359400}, 0x0) add_key$user(&(0x7f0000000380), 0x0, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) 9.32954699s ago: executing program 1 (id=33): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) ioctl$FIONREAD(r0, 0x541b, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0x3eb, 0x21e2f, 0x7f, 0x1681bcd7, 0x0, 0x0, 0x400, 0x0, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='per\x00'/16], 0x10) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fb, 0x3, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) syz_open_dev$media(0x0, 0x34, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="7a0a00f500000094ef0071104300000100"/26], &(0x7f0000000480)='syzkaller\x00'}, 0x80) close_range(r1, 0xffffffffffffffff, 0x0) 8.271432059s ago: executing program 1 (id=34): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f00000001c0)={0x2, 0x0, @raw_data=[0x0, 0x0, 0x0, 0xffffffff]}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000500)={0xa, @raw_data="3aee44a9c226a51c91d96d057945493d62731d82b7b243ac2b8c09e616fac25ae19d22dde9f23f852c3c3ccc3a9bd805898c9b2332eefd90a8a3ec23a13d253cf99691b813d8bfe75bfd83c66b56546b67a6d49ef1aa41cd5fb1faa24fd3f04c0551ed1ce90da7f3c55d1722a954283520a13b98bbbda5d490614b0b944b44d09086680a995a0ef055c7b45c50f7096e53c69a5af5d8af27a799d80635b87bb98d78c265cc91f11d80f3215cb8e27902ded8695717e1bc25acbcb5f28d2e5cddcd7b000000009cae"}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xff}) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000), 0x10) syz_io_uring_setup(0x238, &(0x7f0000000080)={0x0, 0x198b, 0x10100, 0x3, 0x3aa, 0x0, r6}, &(0x7f0000000180), &(0x7f00000001c0)) read(r6, &(0x7f0000000200)=""/94, 0x5e) r8 = syz_open_dev$vim2m(&(0x7f0000000300), 0xd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r8, 0xc044565d, &(0x7f0000000280)=@mmap={0x6d0, 0x1, 0xfffffffffffffd4a, 0x0, 0x0, {0x77359400}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "01003c66"}}) openat$cuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0x14) pread64(r2, &(0x7f0000000180)=""/79, 0xfffffe69, 0x1) 8.140089432s ago: executing program 2 (id=37): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) ioctl$FIONREAD(r0, 0x541b, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0x3eb, 0x21e2f, 0x7f, 0x1681bcd7, 0x0, 0x0, 0x400, 0x0, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='per\x00'/16], 0x10) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fb, 0x3, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x34, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="7a0a00f500000094ef00711043000001000000000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) close_range(r1, 0xffffffffffffffff, 0x0) 7.221254191s ago: executing program 2 (id=41): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xca) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000002000), 0x7, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000002080)={0x0, 0x4, 0x3, '\x00', &(0x7f0000002040)=0x7}) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0) 6.268763722s ago: executing program 0 (id=43): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x1e, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001840)=ANY=[], 0x1208}}, 0x8084) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x18, 0x3f9, 0xc01, 0x70bd2b, 0x25dfdbfe, {0x1, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r3 = open(0x0, 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x262e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="f600"], 0x18}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) io_uring_enter(r6, 0x708, 0x41e3, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r11, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000700)={0x77359400}, 0x0) 6.208870885s ago: executing program 2 (id=44): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) semget$private(0x0, 0x1, 0x1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@getqdisc={0x28, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x84, 0x3}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x8f7}}, './file0\x00'}) sendmsg$AUDIT_USER(r7, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0xe4, 0x3ed, 0x1, 0x70bd28, 0x25dfdbfb, "097e4f02d5bbe117dd5727f8f3e46a449869465937e7e637ef0f4718f882510a80e7464a73bfc85e9f945f9ec77902ed9582a7297fbef12ba1e5639aa8f6b19f3def7d49665312539a5dbebb0d435af5e33c77490625af9a07d1d152eb9c89856a3ae56bb4d84ff82a970ac4b8cb00c2fa9faeb14aa64febb4d252cb5d061d1bab50a817776491cd8bdf6b06f13d6abadfc27068393d51dbddad3e5fb2497b651fc3c243be87c8a35e975a73baafb72364102d5c6ebd5de451a588a720367ccec5b043c106260b33d9220c092d5e20f1002e", [""]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000014) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 5.320124817s ago: executing program 3 (id=45): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xca) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000002000), 0x7, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000002080)={0x0, 0x4, 0x3, '\x00', &(0x7f0000002040)=0x7}) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0) 5.011279448s ago: executing program 0 (id=46): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="c40000001b0001000000000000000000ac141400000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000bb4c68705e3134734a6a4aa21c00"/130], 0xc4}}, 0x0) close(r1) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x301, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8400) 4.922036059s ago: executing program 0 (id=47): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x20000000}, 0x8}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000fffe00080009000000000008000a000000"], 0x184}}, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x40050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0xb0, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xb0}}, 0x20000040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203b}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) bind$llc(0xffffffffffffffff, 0x0, 0x0) 4.832666942s ago: executing program 0 (id=48): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x1e, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001840)=ANY=[], 0x1208}}, 0x8084) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x18, 0x3f9, 0xc01, 0x70bd2b, 0x25dfdbfe, {0x1, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r3 = open(0x0, 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x262e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="f600"], 0x18}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) io_uring_enter(r6, 0x708, 0x41e3, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) io_setup(0x8, &(0x7f0000000680)) 4.698194683s ago: executing program 1 (id=50): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) ioctl$FIONREAD(r0, 0x541b, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0x3eb, 0x21e2f, 0x7f, 0x1681bcd7, 0x0, 0x0, 0x400, 0x0, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='per\x00'/16], 0x10) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fb, 0x3, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x34, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="7a0a00f500000094ef00711043000001000000000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) close_range(r1, 0xffffffffffffffff, 0x0) 3.44052361s ago: executing program 3 (id=51): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x1e, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001840)=ANY=[], 0x1208}}, 0x8084) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x18, 0x3f9, 0xc01, 0x70bd2b, 0x25dfdbfe, {0x1, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r3 = open(0x0, 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x262e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="f600"], 0x18}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) io_uring_enter(r6, 0x708, 0x41e3, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r10, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000700)={0x77359400}, 0x0) 3.43268165s ago: executing program 1 (id=52): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setfsgid(0xee00) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, r5}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x24040810) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 3.045519447s ago: executing program 0 (id=53): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) semget$private(0x0, 0x1, 0x1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@getqdisc={0x28, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x84, 0x3}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x8f7}}, './file0\x00'}) sendmsg$AUDIT_USER(r7, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0xe4, 0x3ed, 0x1, 0x70bd28, 0x25dfdbfb, "097e4f02d5bbe117dd5727f8f3e46a449869465937e7e637ef0f4718f882510a80e7464a73bfc85e9f945f9ec77902ed9582a7297fbef12ba1e5639aa8f6b19f3def7d49665312539a5dbebb0d435af5e33c77490625af9a07d1d152eb9c89856a3ae56bb4d84ff82a970ac4b8cb00c2fa9faeb14aa64febb4d252cb5d061d1bab50a817776491cd8bdf6b06f13d6abadfc27068393d51dbddad3e5fb2497b651fc3c243be87c8a35e975a73baafb72364102d5c6ebd5de451a588a720367ccec5b043c106260b33d9220c092d5e20f1002e", [""]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000014) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 3.014647969s ago: executing program 2 (id=54): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x1e, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001840)=ANY=[], 0x1208}}, 0x8084) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x18, 0x3f9, 0xc01, 0x70bd2b, 0x25dfdbfe, {0x1, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r2 = open(0x0, 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x262e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="f600"], 0x18}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) io_uring_enter(r5, 0x708, 0x41e3, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r9, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000700)={0x77359400}, 0x0) add_key$user(&(0x7f0000000380), 0x0, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) 2.493499787s ago: executing program 1 (id=55): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f00000001c0)={0x2, 0x0, @raw_data=[0x0, 0x0, 0x0, 0xffffffff]}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000500)={0xa, @raw_data="3aee44a9c226a51c91d96d057945493d62731d82b7b243ac2b8c09e616fac25ae19d22dde9f23f852c3c3ccc3a9bd805898c9b2332eefd90a8a3ec23a13d253cf99691b813d8bfe75bfd83c66b56546b67a6d49ef1aa41cd5fb1faa24fd3f04c0551ed1ce90da7f3c55d1722a954283520a13b98bbbda5d490614b0b944b44d09086680a995a0ef055c7b45c50f7096e53c69a5af5d8af27a799d80635b87bb98d78c265cc91f11d80f3215cb8e27902ded8695717e1bc25acbcb5f28d2e5cddcd7b000000009cae"}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xff}) ioctl$BLKPG(r4, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x501c4814, &(0x7f0000000100)={0x2, 0x100, 0x40000, 0x2, 0x1947, 0xf}) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000), 0x10) syz_io_uring_setup(0x238, &(0x7f0000000080)={0x0, 0x198b, 0x10100, 0x3, 0x3aa, 0x0, r6}, &(0x7f0000000180), &(0x7f00000001c0)) read(r6, &(0x7f0000000200)=""/94, 0x5e) r8 = syz_open_dev$vim2m(&(0x7f0000000300), 0xd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r8, 0xc044565d, &(0x7f0000000280)=@mmap={0x6d0, 0x1, 0xfffffffffffffd4a, 0x0, 0x0, {0x77359400}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "01003c66"}}) openat$cuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0x14) pread64(r2, &(0x7f0000000180)=""/79, 0xfffffe69, 0x1) 2.311543237s ago: executing program 3 (id=56): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$swradio(&(0x7f00000001c0), 0x0, 0x2) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="c40000001b0001000000000000000000ac141400000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000bb4c68705e3134734a6a4aa21c00"/130], 0xc4}}, 0x0) close(r1) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x301, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8400) 2.00038882s ago: executing program 3 (id=57): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x20000000}, 0x8}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000fffe00080009000000000008000a000000"], 0x184}}, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x40050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0xb0, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xb0}}, 0x20000040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x203b}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) bind$llc(0xffffffffffffffff, 0x0, 0x0) 1.942689811s ago: executing program 2 (id=58): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xca) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000002000), 0x7, 0x0) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r2, 0x7277, 0x0, 0x0, 0x0, 0x0) 1.940281744s ago: executing program 3 (id=66): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x8845}, 0x4000) r1 = openat$sr(0xffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="100027bd11caf6db"], 0x24}}, 0x4080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r3}}, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5}, 0x94) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0xc2ddb5edb7ba9069, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0000000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffffa2d5000000000000afb3f60156b150f500e03df0d4908acce9ba00000000000000ff7f040000000000080000000008000001"], 0xc4}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x59}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @remote, 0xbf}, {0xa, 0x4e20, 0xfffffffe, @mcast2, 0x10001}, r3, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r3, 0x5}}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x100004, 0x10001d, 0x40000}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x1, 0x8, "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", 0x0, 0x4, 0x5, 0xf, 0xd, 0x0, 0x6, 0x1}, r3}}, 0x120) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r3, 0x4}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe45}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.086076413s ago: executing program 2 (id=59): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) semget$private(0x0, 0x1, 0x1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@getqdisc={0x28, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x84, 0x3}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x8f7}}, './file0\x00'}) sendmsg$AUDIT_USER(r7, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0xe4, 0x3ed, 0x1, 0x70bd28, 0x25dfdbfb, "097e4f02d5bbe117dd5727f8f3e46a449869465937e7e637ef0f4718f882510a80e7464a73bfc85e9f945f9ec77902ed9582a7297fbef12ba1e5639aa8f6b19f3def7d49665312539a5dbebb0d435af5e33c77490625af9a07d1d152eb9c89856a3ae56bb4d84ff82a970ac4b8cb00c2fa9faeb14aa64febb4d252cb5d061d1bab50a817776491cd8bdf6b06f13d6abadfc27068393d51dbddad3e5fb2497b651fc3c243be87c8a35e975a73baafb72364102d5c6ebd5de451a588a720367ccec5b043c106260b33d9220c092d5e20f1002e", [""]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000014) poll(&(0x7f0000000000)=[{r4, 0x400}, {r5, 0x6034}, {r5}], 0x3, 0x3) 1.085784335s ago: executing program 3 (id=60): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x8845}, 0x4000) r1 = openat$sr(0xffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="100027bd11caf6db"], 0x24}}, 0x4080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r3}}, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r5}, 0x94) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0xc2ddb5edb7ba9069, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0000000000000010feffffffffffffff000000400000000000000000000000001a000000000000000100000000000000feffffffffffffffa2d5000000000000afb3f60156b150f500e03df0d4908acce9ba00000000000000ff7f040000000000080000000008000001"], 0xc4}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x59}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @remote, 0xbf}, {0xa, 0x4e20, 0xfffffffe, @mcast2, 0x10001}, r3, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r3, 0x5}}, 0x10) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x100004, 0x10001d, 0x40000}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r3, 0x4}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe45}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 0 (id=61): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) ioctl$FIONREAD(r0, 0x541b, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0x3eb, 0x21e2f, 0x7f, 0x1681bcd7, 0x0, 0x0, 0x400, 0x0, 0x2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='per\x00'/16], 0x10) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3fb, 0x3, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x34, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="7a0a00f500000094ef0071104300000100"/26], 0x0}, 0x94) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:10404' (ED25519) to the list of known hosts. [ 41.562463][ T5910] cgroup: Unknown subsys name 'net' [ 41.729718][ T5910] cgroup: Unknown subsys name 'cpuset' [ 41.736531][ T5910] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.702198][ T5910] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.210744][ T5983] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.213621][ T5983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.216475][ T5983] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.219022][ T5983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.219661][ T5984] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.221441][ T5983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.225215][ T5984] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.226653][ T5988] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.229909][ T5984] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.233261][ T5988] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.236372][ T5341] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.237114][ T5983] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.237376][ T5341] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.237742][ T5341] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.239330][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.248793][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.250091][ T5988] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.251246][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.253914][ T5988] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.255959][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.479363][ T5978] chnl_net:caif_netlink_parms(): no params data found [ 46.537421][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 46.561417][ T5982] chnl_net:caif_netlink_parms(): no params data found [ 46.702122][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.705704][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.708850][ T5978] bridge_slave_0: entered allmulticast mode [ 46.712677][ T5978] bridge_slave_0: entered promiscuous mode [ 46.737298][ T5989] chnl_net:caif_netlink_parms(): no params data found [ 46.760008][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.762258][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.764413][ T5978] bridge_slave_1: entered allmulticast mode [ 46.767095][ T5978] bridge_slave_1: entered promiscuous mode [ 46.837796][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.840020][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.842161][ T5982] bridge_slave_0: entered allmulticast mode [ 46.844850][ T5982] bridge_slave_0: entered promiscuous mode [ 46.847800][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.850069][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.852240][ T5976] bridge_slave_0: entered allmulticast mode [ 46.854782][ T5976] bridge_slave_0: entered promiscuous mode [ 46.892080][ T5978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.896581][ T5978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.899508][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.902575][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.906779][ T5982] bridge_slave_1: entered allmulticast mode [ 46.910500][ T5982] bridge_slave_1: entered promiscuous mode [ 46.913805][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.916653][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.918941][ T5976] bridge_slave_1: entered allmulticast mode [ 46.921479][ T5976] bridge_slave_1: entered promiscuous mode [ 47.007951][ T5978] team0: Port device team_slave_0 added [ 47.030019][ T5982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.053151][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.085666][ T5978] team0: Port device team_slave_1 added [ 47.088795][ T5982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.093873][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.123632][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.126772][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.129796][ T5989] bridge_slave_0: entered allmulticast mode [ 47.133642][ T5989] bridge_slave_0: entered promiscuous mode [ 47.193351][ T5989] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.196569][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.199517][ T5989] bridge_slave_1: entered allmulticast mode [ 47.203336][ T5989] bridge_slave_1: entered promiscuous mode [ 47.246121][ T5982] team0: Port device team_slave_0 added [ 47.249366][ T5976] team0: Port device team_slave_0 added [ 47.266831][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.268990][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.277036][ T5978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.282055][ T5982] team0: Port device team_slave_1 added [ 47.285561][ T5976] team0: Port device team_slave_1 added [ 47.301509][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.303695][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.311582][ T5978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.348044][ T5989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.390729][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.393472][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.402433][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.407764][ T5989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.433350][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.436508][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.447136][ T5982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.452449][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.455403][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.465856][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.524084][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.527141][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.537475][ T5982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.568655][ T5978] hsr_slave_0: entered promiscuous mode [ 47.570904][ T5978] hsr_slave_1: entered promiscuous mode [ 47.573951][ T5989] team0: Port device team_slave_0 added [ 47.577847][ T5989] team0: Port device team_slave_1 added [ 47.670420][ T5976] hsr_slave_0: entered promiscuous mode [ 47.673324][ T5976] hsr_slave_1: entered promiscuous mode [ 47.676115][ T5976] debugfs: 'hsr0' already exists in 'hsr' [ 47.678283][ T5976] Cannot create hsr debugfs directory [ 47.703210][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.706227][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.716633][ T5989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.725539][ T5989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.728288][ T5989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.735882][ T5989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.785258][ T5982] hsr_slave_0: entered promiscuous mode [ 47.787513][ T5982] hsr_slave_1: entered promiscuous mode [ 47.789692][ T5982] debugfs: 'hsr0' already exists in 'hsr' [ 47.791529][ T5982] Cannot create hsr debugfs directory [ 47.939670][ T5989] hsr_slave_0: entered promiscuous mode [ 47.941919][ T5989] hsr_slave_1: entered promiscuous mode [ 47.943973][ T5989] debugfs: 'hsr0' already exists in 'hsr' [ 47.946991][ T5989] Cannot create hsr debugfs directory [ 48.093258][ T5978] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.110827][ T5978] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.120306][ T5978] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.144528][ T5978] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.193523][ T5976] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.198388][ T5976] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.203308][ T5976] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.208788][ T5976] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.255073][ T5988] Bluetooth: hci1: command tx timeout [ 48.255367][ T5984] Bluetooth: hci0: command tx timeout [ 48.262834][ T5989] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.269166][ T5989] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.293651][ T5989] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.301376][ T5989] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.324813][ T5984] Bluetooth: hci3: command tx timeout [ 48.335168][ T5984] Bluetooth: hci2: command tx timeout [ 48.341648][ T5982] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.346188][ T5982] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.350475][ T5982] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.355646][ T5982] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.376312][ T5978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.406423][ T5978] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.419447][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.422488][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.434150][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.436401][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.449261][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.484225][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.504282][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.506490][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.517025][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.519260][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.525041][ T5989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.531551][ T5982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.558101][ T5989] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.562566][ T5982] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.573538][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.575866][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.587016][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.589296][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.600743][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.603083][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.613374][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.616193][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.653995][ T5978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.666598][ T5982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.691669][ T5978] veth0_vlan: entered promiscuous mode [ 48.700586][ T5978] veth1_vlan: entered promiscuous mode [ 48.726709][ T5978] veth0_macvtap: entered promiscuous mode [ 48.732017][ T5978] veth1_macvtap: entered promiscuous mode [ 48.737100][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.749018][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.767029][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.785727][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.788468][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.796826][ T5989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.803622][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.807548][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.812541][ T5982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.818712][ T5976] veth0_vlan: entered promiscuous mode [ 48.840092][ T5976] veth1_vlan: entered promiscuous mode [ 48.862458][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.866681][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.902556][ T5989] veth0_vlan: entered promiscuous mode [ 48.909254][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.912313][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.913550][ T5982] veth0_vlan: entered promiscuous mode [ 48.921565][ T5989] veth1_vlan: entered promiscuous mode [ 48.930943][ T5976] veth0_macvtap: entered promiscuous mode [ 48.939857][ T5976] veth1_macvtap: entered promiscuous mode [ 48.942682][ T5982] veth1_vlan: entered promiscuous mode [ 48.947468][ T5978] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.965340][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.976382][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.983445][ T5989] veth0_macvtap: entered promiscuous mode [ 48.992704][ T5982] veth0_macvtap: entered promiscuous mode [ 48.997310][ T80] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.006211][ T5989] veth1_macvtap: entered promiscuous mode [ 49.009587][ T80] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.016331][ T5982] veth1_macvtap: entered promiscuous mode [ 49.019507][ T80] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.047849][ T80] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.067289][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.071630][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.077882][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.086324][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.089250][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.101949][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.106723][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.110660][ T5989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.133864][ T80] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.137883][ T80] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.140701][ T80] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.143438][ T80] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.164225][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.167896][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.232691][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.236057][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.251495][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.254553][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.277946][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.280088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.281181][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.343236][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.347497][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.361968][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.367228][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.405177][ T1328] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 49.415098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.542317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.553237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.614953][ T1328] usb 6-1: device descriptor read/64, error -71 [ 49.864813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 49.871476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.895489][ T1328] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 49.966649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.969765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.972786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.057871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.120543][ T1328] usb 6-1: device descriptor read/64, error -71 [ 50.266218][ T1328] usb usb6-port1: attempt power cycle [ 50.325240][ T5984] Bluetooth: hci0: command tx timeout [ 50.327044][ T5984] Bluetooth: hci1: command tx timeout [ 50.414792][ T5988] Bluetooth: hci2: command tx timeout [ 50.417745][ T5984] Bluetooth: hci3: command tx timeout [ 50.725312][ T1328] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 50.796213][ T1328] usb 6-1: device descriptor read/8, error -71 [ 51.024937][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.045290][ T1328] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 51.066195][ T1328] usb 6-1: device descriptor read/8, error -71 [ 51.164796][ T29] usb 5-1: device descriptor read/64, error -71 [ 51.175663][ T1328] usb usb6-port1: unable to enumerate USB device [ 51.424769][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.556523][ T29] usb 5-1: device descriptor read/64, error -71 [ 51.692833][ T29] usb usb5-port1: attempt power cycle [ 51.864829][ T6098] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.018674][ T6098] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 52.022893][ T6098] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 52.034380][ T6098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 52.048679][ T6098] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 52.052216][ T6098] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 52.057746][ T6098] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.060688][ T6098] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.067522][ T6098] usb 7-1: config 0 descriptor?? [ 52.070190][ T6100] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 52.404909][ T5988] Bluetooth: hci1: command tx timeout [ 52.406733][ T5988] Bluetooth: hci0: command tx timeout [ 52.494759][ T5984] Bluetooth: hci3: command tx timeout [ 52.497046][ T5988] Bluetooth: hci2: command tx timeout [ 52.605920][ T6098] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 52.704690][ T29] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 52.739701][ T29] usb 5-1: device descriptor read/8, error -71 [ 52.782247][ T6098] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 52.934742][ T53] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.034712][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 53.064822][ T53] usb 8-1: device descriptor read/64, error -71 [ 53.067262][ T29] usb 5-1: device descriptor read/8, error -71 [ 53.185485][ T29] usb usb5-port1: unable to enumerate USB device [ 53.524907][ T53] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 53.654753][ T53] usb 8-1: device descriptor read/64, error -71 [ 53.766734][ T53] usb usb8-port1: attempt power cycle [ 54.104934][ T53] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 54.169919][ T53] usb 8-1: device descriptor read/8, error -71 [ 54.425404][ T53] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 54.482605][ T53] usb 8-1: device descriptor read/8, error -71 [ 54.486409][ T5988] Bluetooth: hci0: command tx timeout [ 54.488170][ T5988] Bluetooth: hci1: command tx timeout [ 54.504940][ T54] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 54.552229][ T6124] infiniband syz1: set active [ 54.554602][ T6124] infiniband syz1: added syz_tun [ 54.566050][ T5984] Bluetooth: hci2: command tx timeout [ 54.567803][ T5984] Bluetooth: hci3: command tx timeout [ 54.587091][ T6124] RDS/IB: syz1: added [ 54.588720][ T6124] smc: adding ib device syz1 with port count 1 [ 54.590881][ T6124] smc: ib device syz1 port 1 has pnetid [ 54.605258][ T53] usb usb8-port1: unable to enumerate USB device [ 54.785980][ T6126] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.825827][ T6139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'. [ 54.906313][ T6126] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.050754][ T6126] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.123121][ T6126] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.292912][ T46] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.306001][ T46] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.353089][ T1148] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.372300][ T1139] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.584806][ T6067] usb 7-1: USB disconnect, device number 2 [ 56.654501][ T40] audit: type=1326 audit(1757128958.442:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 56.661588][ T40] audit: type=1326 audit(1757128958.442:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 56.668186][ T40] audit: type=1326 audit(1757128958.442:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.15" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 56.675341][ T40] audit: type=1326 audit(1757128958.442:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 56.682043][ T40] audit: type=1326 audit(1757128958.442:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 56.688874][ T40] audit: type=1326 audit(1757128958.442:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.15" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 56.695848][ T40] audit: type=1326 audit(1757128958.452:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 56.702383][ T40] audit: type=1326 audit(1757128958.452:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 56.712876][ T40] audit: type=1326 audit(1757128958.452:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.15" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 56.720224][ T40] audit: type=1326 audit(1757128958.452:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.15" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 57.117780][ T29] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 57.845081][ T29] usb 8-1: device descriptor read/64, error -71 [ 57.995028][ T6190] syz1: rxe_newlink: already configured on syz_tun [ 58.092824][ T29] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 58.175025][ T53] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 58.224720][ T29] usb 8-1: device descriptor read/64, error -71 [ 58.315302][ T53] usb 7-1: device descriptor read/64, error -71 [ 58.346537][ T29] usb usb8-port1: attempt power cycle [ 58.359280][ T6190] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.404387][ T6196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'. [ 58.448275][ T6190] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.564852][ T53] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 58.571287][ T6190] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.638596][ T6190] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.714741][ T53] usb 7-1: device descriptor read/64, error -71 [ 58.824932][ T53] usb usb7-port1: attempt power cycle [ 59.174752][ T53] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 59.195976][ T53] usb 7-1: device descriptor read/8, error -71 [ 59.435878][ T53] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 59.455342][ T53] usb 7-1: device descriptor read/8, error -71 [ 59.565905][ T53] usb usb7-port1: unable to enumerate USB device [ 59.816748][ T1198] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.823307][ T80] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.830671][ T80] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.837936][ T80] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.938228][ T6220] lo speed is unknown, defaulting to 1000 [ 59.940720][ T6220] lo speed is unknown, defaulting to 1000 [ 59.942869][ T6220] lo speed is unknown, defaulting to 1000 [ 60.035337][ T6220] infiniband syz0: set active [ 60.036857][ T6220] infiniband syz0: added lo [ 60.047040][ T6222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.054056][ T34] lo speed is unknown, defaulting to 1000 [ 60.134563][ T6220] RDS/IB: syz0: added [ 60.136033][ T6220] smc: adding ib device syz0 with port count 1 [ 60.137929][ T6220] smc: ib device syz0 port 1 has pnetid [ 60.140221][ T6220] lo speed is unknown, defaulting to 1000 [ 60.142567][ T34] lo speed is unknown, defaulting to 1000 [ 60.290589][ T6220] lo speed is unknown, defaulting to 1000 [ 60.477722][ T6220] lo speed is unknown, defaulting to 1000 [ 60.634415][ T6220] lo speed is unknown, defaulting to 1000 [ 63.137549][ T6267] rdma_rxe: rxe_newlink: failed to add lo [ 63.197952][ T6267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.497367][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 63.648338][ T9] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 63.651793][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.656797][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 63.660441][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 63.664202][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.668628][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.671399][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.678101][ T9] usb 6-1: config 0 descriptor?? [ 63.681544][ T6259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 64.301710][ T9] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 64.314068][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 65.804724][ T10] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 65.904734][ T6013] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 66.036004][ T6013] usb 7-1: device descriptor read/64, error -71 [ 66.127556][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 66.209113][ T6336] rdma_rxe: rxe_newlink: failed to add lo [ 66.231260][ T6336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.293688][ T6013] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 66.425272][ T6013] usb 7-1: device descriptor read/64, error -71 [ 66.534973][ T6013] usb usb7-port1: attempt power cycle [ 67.541806][ T6029] usb 6-1: USB disconnect, device number 6 [ 67.636130][ T6013] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 67.695171][ T6013] usb 7-1: device descriptor read/8, error -71 [ 67.974789][ T6013] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 68.064518][ T6013] usb 7-1: device descriptor read/8, error -71 [ 68.175932][ T6013] usb usb7-port1: unable to enumerate USB device [ 68.824755][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 68.917012][ T1473] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 69.073676][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'. [ 69.118505][ T6376] rdma_rxe: rxe_newlink: failed to add lo [ 69.124353][ T6376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.204783][ T29] usb 5-1: device descriptor read/64, error -71 [ 69.223495][ T1473] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 69.225688][ T6381] rdma_rxe: rxe_newlink: failed to add syz_tun [ 69.227042][ T1473] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.234760][ T1473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.239714][ T1473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 69.244557][ T1473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.250426][ T1473] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.254785][ T1473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.261499][ T1473] usb 6-1: config 0 descriptor?? [ 69.271153][ T6370] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 69.444989][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 69.451032][ T6381] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.484955][ T6383] netlink: 16 bytes leftover after parsing attributes in process `syz.3.66'. [ 69.524183][ T6381] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.574721][ T29] usb 5-1: device descriptor read/64, error -71 [ 69.576235][ T6381] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.660382][ T6381] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.684982][ T29] usb usb5-port1: attempt power cycle [ 69.697379][ T1473] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 69.706107][ T1473] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 69.746933][ T1198] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.754588][ T1198] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.766521][ T1198] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.776619][ T1198] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.024830][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 70.062027][ T29] usb 5-1: device descriptor read/8, error -71 [ 70.069113][ T6387] rdma_rxe: rxe_newlink: failed to add syz_tun [ 70.943817][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.952178][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.966025][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 71.047589][ T6387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.60'. [ 72.222116][ T1420] ================================================================== [ 72.224484][ T1420] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630 [ 72.225283][ T9] usb 6-1: USB disconnect, device number 7 [ 72.226655][ T1420] Read of size 1 at addr ffff88805fade490 by task aoe_tx0/1420 [ 72.232483][ T1420] [ 72.233217][ T1420] CPU: 1 UID: 0 PID: 1420 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 72.233230][ T1420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.233237][ T1420] Call Trace: [ 72.233241][ T1420] [ 72.233245][ T1420] dump_stack_lvl+0x116/0x1f0 [ 72.233262][ T1420] print_report+0xcd/0x630 [ 72.233276][ T1420] ? __virt_addr_valid+0x81/0x610 [ 72.233288][ T1420] ? __phys_addr+0xe8/0x180 [ 72.233300][ T1420] ? handle_tx+0x5dc/0x630 [ 72.233311][ T1420] kasan_report+0xe0/0x110 [ 72.233323][ T1420] ? handle_tx+0x5dc/0x630 [ 72.233336][ T1420] handle_tx+0x5dc/0x630 [ 72.233348][ T1420] dev_hard_start_xmit+0x94/0x740 [ 72.233362][ T1420] __dev_queue_xmit+0xa46/0x4490 [ 72.233375][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.233389][ T1420] ? finish_task_switch.isra.0+0x221/0xc10 [ 72.233400][ T1420] ? rcu_is_watching+0x12/0xc0 [ 72.233411][ T1420] ? __pfx___dev_queue_xmit+0x10/0x10 [ 72.233423][ T1420] ? __schedule+0x11a3/0x5de0 [ 72.233436][ T1420] ? __lock_acquire+0xb97/0x1ce0 [ 72.233451][ T1420] ? do_raw_spin_lock+0x12c/0x2b0 [ 72.233466][ T1420] ? find_held_lock+0x2b/0x80 [ 72.233476][ T1420] ? skb_dequeue+0x126/0x180 [ 72.233486][ T1420] ? find_held_lock+0x2b/0x80 [ 72.233496][ T1420] ? rcu_is_watching+0x12/0xc0 [ 72.233507][ T1420] tx+0xcc/0x190 [ 72.233520][ T1420] ? __pfx_tx+0x10/0x10 [ 72.233533][ T1420] kthread+0x1e1/0x3e0 [ 72.233546][ T1420] ? find_held_lock+0x2b/0x80 [ 72.233555][ T1420] ? __pfx_kthread+0x10/0x10 [ 72.233567][ T1420] ? __pfx_default_wake_function+0x10/0x10 [ 72.233577][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.233591][ T1420] ? __kthread_parkme+0x19e/0x250 [ 72.233603][ T1420] ? __pfx_kthread+0x10/0x10 [ 72.233615][ T1420] kthread+0x3c5/0x780 [ 72.233629][ T1420] ? __pfx_kthread+0x10/0x10 [ 72.233643][ T1420] ? rcu_is_watching+0x12/0xc0 [ 72.233652][ T1420] ? __pfx_kthread+0x10/0x10 [ 72.233666][ T1420] ret_from_fork+0x5d7/0x6f0 [ 72.233681][ T1420] ? __pfx_kthread+0x10/0x10 [ 72.233695][ T1420] ret_from_fork_asm+0x1a/0x30 [ 72.233710][ T1420] [ 72.233714][ T1420] [ 72.296237][ T1420] Allocated by task 6385: [ 72.297548][ T1420] kasan_save_stack+0x33/0x60 [ 72.298969][ T1420] kasan_save_track+0x14/0x30 [ 72.300408][ T1420] __kasan_kmalloc+0xaa/0xb0 [ 72.301826][ T1420] alloc_tty_struct+0x96/0x8c0 [ 72.303267][ T1420] tty_init_dev.part.0+0x1e/0x500 [ 72.304793][ T1420] tty_open+0xa50/0xf90 [ 72.306093][ T1420] chrdev_open+0x231/0x6a0 [ 72.307460][ T1420] do_dentry_open+0x97f/0x1530 [ 72.308929][ T1420] vfs_open+0x82/0x3f0 [ 72.310194][ T1420] path_openat+0x1de4/0x2cb0 [ 72.311617][ T1420] do_filp_open+0x20b/0x470 [ 72.313044][ T1420] do_sys_openat2+0x11b/0x1d0 [ 72.314515][ T1420] __ia32_compat_sys_openat+0x16d/0x210 [ 72.316197][ T1420] __do_fast_syscall_32+0x7c/0x3a0 [ 72.317734][ T1420] do_fast_syscall_32+0x32/0x80 [ 72.319228][ T1420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.321128][ T1420] [ 72.321889][ T1420] Freed by task 9: [ 72.323065][ T1420] kasan_save_stack+0x33/0x60 [ 72.324484][ T1420] kasan_save_track+0x14/0x30 [ 72.325920][ T1420] kasan_save_free_info+0x3b/0x60 [ 72.327466][ T1420] __kasan_slab_free+0x60/0x70 [ 72.328916][ T1420] kfree+0x2b4/0x4d0 [ 72.330109][ T1420] process_one_work+0x9cf/0x1b70 [ 72.331624][ T1420] worker_thread+0x6c8/0xf10 [ 72.333022][ T1420] kthread+0x3c5/0x780 [ 72.334269][ T1420] ret_from_fork+0x5d7/0x6f0 [ 72.335656][ T1420] ret_from_fork_asm+0x1a/0x30 [ 72.337090][ T1420] [ 72.337825][ T1420] Last potentially related work creation: [ 72.339513][ T1420] kasan_save_stack+0x33/0x60 [ 72.340943][ T1420] kasan_record_aux_stack+0xa7/0xc0 [ 72.342527][ T1420] insert_work+0x36/0x230 [ 72.343853][ T1420] __queue_work+0x97e/0x1160 [ 72.345243][ T1420] queue_work_on+0x1a4/0x1f0 [ 72.346662][ T1420] release_tty+0x4de/0x5d0 [ 72.348074][ T1420] tty_release_struct+0xb7/0xe0 [ 72.349552][ T1420] tty_release+0xe2d/0x1430 [ 72.350806][ T1420] __fput+0x3ff/0xb70 [ 72.351948][ T1420] task_work_run+0x14d/0x240 [ 72.353368][ T1420] do_exit+0x86f/0x2bf0 [ 72.354682][ T1420] do_group_exit+0xd3/0x2a0 [ 72.356132][ T1420] get_signal+0x2673/0x26d0 [ 72.357545][ T1420] arch_do_signal_or_restart+0x8f/0x790 [ 72.359233][ T1420] exit_to_user_mode_loop+0x84/0x110 [ 72.360805][ T1420] __do_fast_syscall_32+0x2ac/0x3a0 [ 72.362378][ T1420] do_fast_syscall_32+0x32/0x80 [ 72.363875][ T1420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 72.365809][ T1420] [ 72.366554][ T1420] The buggy address belongs to the object at ffff88805fade000 [ 72.366554][ T1420] which belongs to the cache kmalloc-cg-2k of size 2048 [ 72.370786][ T1420] The buggy address is located 1168 bytes inside of [ 72.370786][ T1420] freed 2048-byte region [ffff88805fade000, ffff88805fade800) [ 72.374920][ T1420] [ 72.375678][ T1420] The buggy address belongs to the physical page: [ 72.377583][ T1420] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805fadd000 pfn:0x5fad8 [ 72.380524][ T1420] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 72.383032][ T1420] memcg:ffff88806a1ab281 [ 72.384331][ T1420] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 72.386599][ T1420] page_type: f5(slab) [ 72.387833][ T1420] raw: 04fff00000000040 ffff88801b84c140 ffffea0001384600 0000000000000002 [ 72.390480][ T1420] raw: ffff88805fadd000 0000000000080007 00000000f5000000 ffff88806a1ab281 [ 72.393083][ T1420] head: 04fff00000000040 ffff88801b84c140 ffffea0001384600 0000000000000002 [ 72.395691][ T1420] head: ffff88805fadd000 0000000000080007 00000000f5000000 ffff88806a1ab281 [ 72.398361][ T1420] head: 04fff00000000003 ffffea00017eb601 00000000ffffffff 00000000ffffffff [ 72.400939][ T1420] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 72.403522][ T1420] page dumped because: kasan: bad access detected [ 72.405423][ T1420] page_owner tracks the page as allocated [ 72.407151][ T1420] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5978, tgid 5978 (syz-executor), ts 48849342541, free_ts 43847240188 [ 72.413404][ T1420] post_alloc_hook+0x1c0/0x230 [ 72.414839][ T1420] get_page_from_freelist+0x132b/0x38e0 [ 72.416492][ T1420] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 72.418282][ T1420] alloc_pages_mpol+0x1fb/0x550 [ 72.419771][ T1420] new_slab+0x247/0x330 [ 72.421071][ T1420] ___slab_alloc+0xcf2/0x1750 [ 72.422496][ T1420] __slab_alloc.constprop.0+0x56/0xb0 [ 72.424124][ T1420] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 72.426050][ T1420] kmemdup_noprof+0x29/0x60 [ 72.427444][ T1420] neigh_sysctl_register+0xb2/0x670 [ 72.429009][ T1420] addrconf_sysctl_register+0xb9/0x1f0 [ 72.430692][ T1420] ipv6_add_dev+0xb31/0x15f0 [ 72.432177][ T1420] addrconf_notify+0x53e/0x19e0 [ 72.433668][ T1420] notifier_call_chain+0xb9/0x410 [ 72.435196][ T1420] call_netdevice_notifiers_info+0xbe/0x140 [ 72.436975][ T1420] register_netdevice+0x182e/0x2270 [ 72.438588][ T1420] page last free pid 0 tgid 0 stack trace: [ 72.440412][ T1420] __free_frozen_pages+0x7d5/0x10f0 [ 72.442081][ T1420] __folio_put+0x329/0x450 [ 72.443487][ T1420] skb_release_data+0x81a/0x9e0 [ 72.444985][ T1420] napi_consume_skb+0x15a/0x220 [ 72.446472][ T1420] net_rx_action+0x47f/0xfe0 [ 72.447882][ T1420] handle_softirqs+0x216/0x8e0 [ 72.449348][ T1420] __irq_exit_rcu+0x109/0x170 [ 72.450792][ T1420] irq_exit_rcu+0x9/0x30 [ 72.452122][ T1420] common_interrupt+0xbf/0xe0 [ 72.453578][ T1420] asm_common_interrupt+0x26/0x40 [ 72.455086][ T1420] [ 72.455830][ T1420] Memory state around the buggy address: [ 72.457519][ T1420] ffff88805fade380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.459963][ T1420] ffff88805fade400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.462390][ T1420] >ffff88805fade480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.464828][ T1420] ^ [ 72.466272][ T1420] ffff88805fade500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.468645][ T1420] ffff88805fade580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.471023][ T1420] ================================================================== [ 72.473530][ T1420] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 72.475765][ T1420] CPU: 1 UID: 0 PID: 1420 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 72.478400][ T1420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.481580][ T1420] Call Trace: [ 72.482632][ T1420] [ 72.483569][ T1420] dump_stack_lvl+0x3d/0x1f0 [ 72.484988][ T1420] vpanic+0x6e8/0x7a0 [ 72.486196][ T1420] ? __pfx_vpanic+0x10/0x10 [ 72.487539][ T1420] ? handle_tx+0x5dc/0x630 [ 72.488867][ T1420] panic+0xca/0xd0 [ 72.490006][ T1420] ? __pfx_panic+0x10/0x10 [ 72.491370][ T1420] ? check_panic_on_warn+0x1f/0xb0 [ 72.493003][ T1420] check_panic_on_warn+0xab/0xb0 [ 72.494504][ T1420] end_report+0x107/0x170 [ 72.495829][ T1420] kasan_report+0xee/0x110 [ 72.497151][ T1420] ? handle_tx+0x5dc/0x630 [ 72.498516][ T1420] handle_tx+0x5dc/0x630 [ 72.499793][ T1420] dev_hard_start_xmit+0x94/0x740 [ 72.501325][ T1420] __dev_queue_xmit+0xa46/0x4490 [ 72.502819][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.504386][ T1420] ? finish_task_switch.isra.0+0x221/0xc10 [ 72.506125][ T1420] ? rcu_is_watching+0x12/0xc0 [ 72.507593][ T1420] ? __pfx___dev_queue_xmit+0x10/0x10 [ 72.509289][ T1420] ? __schedule+0x11a3/0x5de0 [ 72.510729][ T1420] ? __lock_acquire+0xb97/0x1ce0 [ 72.512267][ T1420] ? do_raw_spin_lock+0x12c/0x2b0 [ 72.513806][ T1420] ? find_held_lock+0x2b/0x80 [ 72.515210][ T1420] ? skb_dequeue+0x126/0x180 [ 72.516640][ T1420] ? find_held_lock+0x2b/0x80 [ 72.518120][ T1420] ? rcu_is_watching+0x12/0xc0 [ 72.519629][ T1420] tx+0xcc/0x190 [ 72.520729][ T1420] ? __pfx_tx+0x10/0x10 [ 72.522006][ T1420] kthread+0x1e1/0x3e0 [ 72.523258][ T1420] ? find_held_lock+0x2b/0x80 [ 72.524644][ T1420] ? __pfx_kthread+0x10/0x10 [ 72.526074][ T1420] ? __pfx_default_wake_function+0x10/0x10 [ 72.527887][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 72.529510][ T1420] ? __kthread_parkme+0x19e/0x250 [ 72.531074][ T1420] ? __pfx_kthread+0x10/0x10 [ 72.532563][ T1420] kthread+0x3c5/0x780 [ 72.533849][ T1420] ? __pfx_kthread+0x10/0x10 [ 72.535306][ T1420] ? rcu_is_watching+0x12/0xc0 [ 72.536810][ T1420] ? __pfx_kthread+0x10/0x10 [ 72.538259][ T1420] ret_from_fork+0x5d7/0x6f0 [ 72.539760][ T1420] ? __pfx_kthread+0x10/0x10 [ 72.541213][ T1420] ret_from_fork_asm+0x1a/0x30 [ 72.542742][ T1420] [ 72.544400][ T1420] Kernel Offset: disabled [ 72.545754][ T1420] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:22:54 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85618635 RDI=ffffffff9b0ff700 RBP=ffffffff9b0ff6c0 RSP=ffffc900001b7360 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000002d R14=ffffffff9b0ff6c0 R15=ffffffff856185d0 RIP=ffffffff8561865f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562b5b1958e8 CR3=00000000674f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=000000000000003c RCX=ffffffff819a68c2 RDX=ffff888027f4a440 RSI=ffffffff819a68b0 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90007baf770 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=53414b203a475542 R12=1ffff92000f75ef0 R13=0000000000000000 R14=ffff88801daec880 R15=ffffc90007baf838 RIP=ffffffff819a68b2 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f5434510 CR3=0000000066db8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000010745b RBX=0000000000000002 RCX=ffffffff8b912bf9 RDX=0000000000000000 RSI=ffffffff8de4e281 RDI=ffffffff8c162f00 RBP=ffffed1003bdf910 RSP=ffffc9000047fdf8 R8 =0000000000000001 R9 =ffffed1005686655 R10=ffff88802b4332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801defc880 R14=ffffffff90ab9790 R15=0000000000000000 RIP=ffffffff8b91175f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000008000f000 CR3=00000000674f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000012961f RBX=0000000000000003 RCX=ffffffff8b912bf9 RDX=0000000000000000 RSI=ffffffff8de4e281 RDI=ffffffff8c162f00 RBP=ffffed1003867000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801c338000 R14=ffffffff90ab9790 R15=0000000000000000 RIP=ffffffff8b91175f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977bd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc2a305f48 CR3=000000006de50000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefefff0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000020400004 Opmask04=00000000ffffefff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562b5b36dbb0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f473f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f473f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f47352c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562b5b1a9040 0000562b5b1a8fc0 0000562b5b19ccd0 0000562b5b19cc50 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4f473f20c0 00007f4f473f20c0 0000000000000ad1 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000