last executing test programs:

6.079992987s ago: executing program 0 (id=210):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xb50, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xb20, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_BASIC_ACT={0xac0, 0x3, [@m_sample={0xfffffffffffffe13, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "09dc9faff8587ce77b2e04278809409eaadb1549ce770e2466288316d42d53fae78e3bd0ab32dfac807ec6fb3c11d0374ad78010a29a03b9e26b0bdcfa11c3c8749e3a37f2c4b3c0a3bfc9f13eb5d2c49c1787626eb9fff35b4cd22ccc866b59d0b7875109149c5c198b6b92a240f93e6995eaeb03585fbfdd8d6cc3df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x400, 0x3, 0x2, 0xaa73}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x5, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x31b, 0x6, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8000, 0x3, 0x5b, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x10c, 0x20, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb5, 0x5, 0xffffffffffffffff, 0x8, 0x8}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x9, 0x8, 0x8, 0x6}, @rand_addr=0x64010106, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1d8, 0x7, 0x3, 0x7, 0x6}, @remote, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x2, 0x5, 0xfffffff8}, @empty, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x1c, 0x6, 0x0, 0x2}, @remote, @dev={0xac, 0x14, 0x14, 0x36}, 0xff}}]}, {0x1c, 0x6, "223ba0d4e181ea1fda7b6ccf039098dd91edfb3f1564f358"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x830, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x804, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0xb50}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000ec0), 0x56)
sendmsg$kcm(r5, &(0x7f0000000f00)={&(0x7f0000000f40)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000001000)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)

6.079416072s ago: executing program 2 (id=211):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000100)={0x1, 0x5}, 0x2)
read(r3, &(0x7f0000000600)=""/93, 0x5d)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r2, 0x0)
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="81bccb", 0x3}], 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40)

5.765088274s ago: executing program 1 (id=212):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="4607182dab0000002400128009000100766c616e000000001400028006000100010000000600050088a8000008000500", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
close(r6)
socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000900), 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
lstat(0x0, 0x0)
write$dsp(r7, &(0x7f0000000940)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0)
write(0xffffffffffffffff, &(0x7f0000000980)='27', 0x2)
socket(0x11, 0x3, 0x0)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0)
mmap(&(0x7f00005ec000/0x3000)=nil, 0x3000, 0x1000009, 0x30, 0xffffffffffffffff, 0xc823b000)
ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f00000009c0)=0xa)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x7185, 0x800, 0x0, 0x399}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x841a, 0x2050, 0x3, 0x17a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7805, 0xa, 0x3, 0x10b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc16d, 0x10, 0x2, 0xab}}, {0x0, 0x0, <r9=>0xffffffffffffffff, {0x0, 0x7655, 0x40, 0x0, 0xee}}], 0x4, &(0x7f0000000dc0)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x4}, 0x0, 0x0, '\x00', {0x4, 0x951, 0x0, 0x0}}, &(0x7f0000000040))
fsopen(&(0x7f0000001e80)='ceph\x00', 0x0)
ioctl$FIOCLEX(r9, 0x5451)

5.327007931s ago: executing program 3 (id=213):
mount$tmpfs(0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@nr_inodes={'nr_inodes', 0x3d, [0x30]}}]})
r0 = socket$inet(0x2, 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000700)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000780), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000007c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000000800))
madvise(&(0x7f000074b000/0x1000)=nil, 0x1000, 0xb)
setpriority(0x2, 0x0, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x6}, 0x1c)
connect$inet6(r4, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
sendmmsg$inet(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)}], 0x1}}], 0x1, 0x4001)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x8, 0x0, 0x7fffffff}]})
close_range(r6, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000280)={@multicast2, @loopback, @empty}, 0xc)

5.323677923s ago: executing program 0 (id=221):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}})
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, &(0x7f0000001280)='syzkaller\x00'}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts={0x2f}]}}}}}, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000740)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x8, 0x1, 0x68, 0x7c, 0x80, 0x2f, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@ssrr={0x89, 0x23, 0x64, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, @local, @multicast1, @multicast2, @local, @multicast1, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

5.032318323s ago: executing program 2 (id=214):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = syz_ublk_setup_io_uring(0x20, 0x0, 0x0, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
r5 = syz_ublk_setup_io_uring(0x1a3b, &(0x7f0000000540)={0x0, 0xbe8, 0x1, 0x3, 0xaf, 0x0, r0}, &(0x7f00000005c0), &(0x7f0000000600), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000400)={0x2e, 0x7c, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@any_dev={0x1, 0xaa0, 0x0, 0x0, 0x1000, 0x401, 0x0, 0x0, 0x4}}}, &(0x7f0000000280))
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff)
write(r6, &(0x7f0000000080)='/dev/mapper/control\x00', 0x14)
lseek(r6, 0x0, 0x0)
read(r6, &(0x7f0000000100), 0x14)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r7, 0xc138fd00, &(0x7f0000000200)="040000003200000000000000380100")
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$IPT_SO_GET_REVISION_MATCH(r8, 0x0, 0x42, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000001c0)={0x29, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e22, 0x3, 'wlc\x00', 0x6e, 0x9, 0x2a}, 0x2c)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
r9 = syz_clone(0x44018080, 0x0, 0xfffffffffffffd7e, 0x0, 0x0, 0x0)
migrate_pages(r9, 0x5, &(0x7f0000000040)=0x5, &(0x7f00000009c0)=0x272)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x27, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000fffffffffffffff3deb51f237c097a76c19a2c314bff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000000a000000000000000800000080400000000000000000280000000000000000010000030000000044000500000000d23c00000000000000ffffffff000000000000000000000000000000000003"], 0xf8}}, 0x4000010)
r10 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

4.373189058s ago: executing program 3 (id=215):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
syz_open_dev$loop(&(0x7f0000000340), 0x10000, 0x6080)
syz_open_dev$loop(&(0x7f0000000480), 0x2, 0x80040)
fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r4, 0x1, 0x0, 0x0, {0x27}}, 0x14}}, 0x20000040)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r8 = socket(0x10, 0x803, 0x8)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000)
getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
getsockname$packet(r11, &(0x7f00000002c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001400128009000100626f6e6400000000040002800800", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0)

4.268819124s ago: executing program 1 (id=216):
syz_io_uring_setup(0x50d1, &(0x7f0000000140)={0x0, 0xfffff7fe, 0x10000, 0x2, 0x333}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240))
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0)
getsockname(0xffffffffffffffff, &(0x7f00000008c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, &(0x7f0000000940)=0x80)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0)
write(r1, &(0x7f00000003c0)='1000\n', 0x5)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x28}}, 0x20000000)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000500)={<r3=>0xffffffffffffffff}, 0x106, 0x1}}, 0x20)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000540)={0x0, 0x21, 0x2}, &(0x7f0000000580))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000005c0)={0x0, 0x0, 0xfd8b, 0x5})
socket$nl_generic(0x10, 0x3, 0x10)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2)
syz_open_procfs(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mq_open(&(0x7f0000000600)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000680)={0x0, 0x1, 0x3})
r4 = landlock_create_ruleset(&(0x7f0000000980)={0xc0d8, 0x1, 0x3, 0x0, 0x0, 0x7}, 0x30, 0x0)
landlock_restrict_self(r4, 0x8)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000780)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r3, 0xffffffff}}, 0x48)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000800)={0x1, 0x10, 0xfa00, {&(0x7f0000000840), r3}}, 0x18)
pipe2$watch_queue(&(0x7f0000000880)={<r5=>0xffffffffffffffff}, 0x80)
close_range(r5, 0xffffffffffffffff, 0x0)
connect$can_j1939(0xffffffffffffffff, &(0x7f00000022c0)={0xa, 0x0, 0xffffc0fe, {0x0, 0xff, 0x4}}, 0x18)

4.187917484s ago: executing program 3 (id=217):
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000)
setns(0xc9, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000340)={0x0, 0xffffffffffffff48, &(0x7f0000000480)={&(0x7f0000000e80)=ANY=[@ANYBLOB="20000000020801afa3cbfd57200da900050000050c00fbffffff0144ff1a2b73b1320320616f7da4e5b40240f52348856eaff15fe2726cda98ad01c89ab1e9900b01d8e94498a3575d0ad9736bbfeebdc346f116ad512a701a09d205cb7bfd31b837d2091c57665a7650d83b1347feb1c4c279f5172fd9240000aa7fe4b3e1b19a86ac153089982e5f01b039d986cbb2775401b5c51b470000", @ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="887a5b8d898cb010488e926272ec196bf2fa1b84ce89054fb0728b85f56c488c2dc63f8a3344ddb96cceb94f17", @ANYRESOCT=r0], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x14, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYRES64=r1], 0x0}, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f00000003c0), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000400)={0x3, 0x100, 0x0, 0x40005, 0x5f, 0x4})
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000007c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000008c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000940)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead34", 0x52}], 0x3}], 0x1, 0x40800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sec\x00', 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000dc0)='./config\x00', &(0x7f0000000e00)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
mount(0x0, &(0x7f00000004c0)='./sec\x00', &(0x7f0000000b40)='sockfs\x00', 0x800010, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./sec/tomoyo/profile\x00', 0x0, 0x0)
preadv(r7, &(0x7f0000000bc0)=[{&(0x7f0000000c00)=""/146, 0x92}, {0x0, 0x300}], 0x2, 0x8000, 0x3)
recvmsg(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)=""/91, 0x5b}, {&(0x7f0000000ac0)=""/83, 0x53}], 0x2, 0x0, 0x43}, 0x0)

4.008036739s ago: executing program 0 (id=218):
openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$kcm(0x2, 0x7, 0x2)
socket(0x10, 0x2, 0x0)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000)
recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=""/216, 0x34}, 0x10001}], 0x2, 0x40010000, 0x0)
clock_adjtime(0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000340)={0x1ff, 0x5, 0x1, {0x1, @pix={0xff, 0xa, 0x31324d4e, 0x0, 0x9, 0xffffff61, 0x9, 0x9, 0x0, 0x7, 0x2, 0x6}}, 0xd5a})
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x4000, 0x4)
sendmmsg$alg(r3, &(0x7f0000001240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@iv={0x10}, @iv={0x10}], 0x20, 0x4880}, {0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000780)="a27e751b506316d107c78c782937d6f33110862675b0cf4dd973f8161521f90c77ae4f26", 0x24}, {&(0x7f00000007c0)="946bcac2250f0a616e8f94e1baf7b9138cced2ccf8f2b4fe1e1a49f73250e614790249b84c8ee0ac47c0522e6c5da4f2f6b159d442a2d87aea70f7bdaf01436c4dce087aaff4696c77b8e973c587ecd7bb5fb2112e02f5df43bfa918e9f3026c9dff6f89975f76fcbecb71b5e8513c81f57cdeb0f24b6f767bc017ceea83", 0x7e}], 0x3, &(0x7f0000000880)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="3398a4", 0x3}], 0x1, &(0x7f0000000940)=[@assoc={0x10, 0x117, 0x4, 0x9}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}], 0x30, 0x804c044}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000a00)="a0ea6ea3427cef817dd7f81fd0efb568b0042fa10ff6e6e4e392e66e8a34d95fe4c9992b92ec54c266480c85ff0a76466f1ce133f0cc4a6590e68fe866b01294bbcd429977fc947d8c9303e5c96ce7a2457b795806086a68f4f32f4b2176d8ba50d133f85ead618af914d9787ba92896babebf4051c3f9e2c84e15ef7a0b9d30129b4d5d9e254dc1", 0x88}, {&(0x7f0000000ac0)="22509617adb91afa439b1f9b00ab2e15ab77ecc52cf6f6a79073d4a1f8166a86c20833c2527209467f628723fdbb88bad4b80d4c8a63d029eefb08cf461f2d433478", 0x42}, {&(0x7f0000000b40)="059af19a024c264d6e2a18d4bdcf804e2a17fee1863f29cda5134d6197b20382f5ff8b4d346a3bcf96877ea76e6ce26157409b0aca740a4806e568b7b16951be81bc3ea73611fe43127c2a8bb9b80c3b040dd6c4ba23f70ec96b57444fe9ccd69c5d43024e04ab16d43d6b7147ccfc448f573f5427a47cf6e7360ae611cf13d8cf03c736daaadc8187a36c559901c37f67d42921a2c8ff5c2d1f417d40b047b97ee0087bc2b896c44822e3876a58e27b32645bc00ad073733b35f160c47a569b7bb06ad4d65bd64dc2b6295132bb035fce916b5a230d3b6b308b122e360d7b8a28a2", 0xe2}, {0x0}, {&(0x7f0000000d40)="e6195fc805a6f8c49b717a2366b3610d2f1b646ffc85b7155922cdecf64ecd4d21849bcbfe4b8a5e4bbe74ea48beb9330f6ef93d5de44210850678c387ee6fdd0ed5efade60c12cf6cb08c683343934f1fc156a85e2c243d1abb962a425de7a1d2a7fc91e8c8928825204bf4615cf7e06d754e7e42cbca7b3c776c20174c5c8f8324b08633a7e517f6fbde324c557b78280872b174f30ee2fd8c06a7be9cd2", 0x9f}, {&(0x7f0000000e00)="9f151fd0f92644ca6a7fa73237bff578a7875549783e18c77f5d88a2323668c9334e5450243cfff2df0d5d1ebcc6052ae3e0edbc082b6e3163418151b361bd166bbde8b59a67f88095cacb949d0d68753be0ccfe6b51f180b0b71c098bd0049d74ea0ae906f016a3606b1cf40aa4872e9b30f00a7ce7e51b363651be2c6f59b3d656d7627d34afcdad559c475461c394ac41d328cdccc4f11e8fd078c9b1d1207801e6cbf31922692048e3ac4a84", 0xae}, {&(0x7f0000000ec0)="f9bee3476b931125ba7ae463e3c95db05048f2a4a5cd858a744e9058a13c7720eb751bac0f701da57b44befb73d2d5da9e7b9fbd6c544f2cb45df193860fd17352c817740c817af933b1cb9f2a83f81e013b0a369869c6ea4c83e01703d5900be2d6beda7efd6cc05677c70146b3771c5b9a1f0b72fd72fd35dbec03f7201b919810cbc3991b36604f72abc45b7eeae32bb72a0ab1d635ea248b0e75bced85d5a4040b776fd2ecda93974fba7f", 0xad}], 0x7, &(0x7f0000001140)=[@op={0x10}, @iv={0xa4, 0x117, 0x2, 0x91, "ce0faff8d5f8795f6467cda21010882ca780911951398e64c9322a6af2f3b766d1abba4dee1c7c5a883aaadba192581e7a1d2a90d97d3ef1a2d97de1010061888c0b016b9a17bc624b7ac63fd7f4d50a02f58a1c639c4e3a3fb3206ad7326b2eb150391e18285943f0ca2f1703d893ff4b593a9d71358f359b6998c020704356647b5239d7dc96072c2c285ce633fe8c3e"}, @op={0x10}], 0xc4, 0x4800}], 0x4, 0x190)

3.992979277s ago: executing program 1 (id=227):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = socket$inet(0x2, 0x1, 0x100)
listen(r4, 0x7fff)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000b00))
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x8)
close_range(r1, 0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="60000000420001000000000000000000030100000f0000003f00010000112233445566778899aabb86dd2c00001c00002c00011100000101010102538758fe6cbdf0357065ae44132403b1fd606412c3258e2b670000b20004000280040003"], 0x60}}, 0x0)
syz_usb_connect$uac1(0x3, 0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102000000203512148040000102030109026800030106400b0904000000010100000a240101000a00020102f203010000010104010e8109050109ef03010500"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
socket$rds(0x15, 0x5, 0x0)
mlockall(0x2)
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
io_setup(0x8, &(0x7f0000000000))
syz_usb_connect$uac3(0x1, 0x108, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000200000010820582054000010203010902f60003010440fb00000000000000030904000000010130000a2401015d0008000000a8ee0a010400000000010000000300004d03000000010000000c240b030009000000080500092410010700050000142402050602015f0fab000009003eb80500060005240502020c240b0802270f00000002000904010700010230000904010101010230000a2402010004020ba54f09050109200004020d0a2525080000000905000904020000010230000904020101010230001724010404000000000005000000000000000380ecec090a2402020500b8cd050c0a0506000a252501000000400f0057c1ec2ec3f9e66bf9363619a91b492e57c02d277f713b4743eecff1df5761264b805dd240f7ad83f4d1fa8ba2d86b2206d7cf1c5705d06f7b30556fbf07f7d59da1814d7a2858d8304914fd2a04ed809c2922fdbfe73568016ec16a6c112d8f7b9c57bfb60200398af54ce3f2acf689b7f794e1"], &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x2, 0x7, 0x8, 0x50, 0x8}, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="050f050010"], 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4a, &(0x7f0000000400)=@string={0x4a, 0x3, "0d81b3ca30777ae71a3fe0bb876d36a627adf5464c58d84a843d30fd7ad066842931db9f90a7f9260f6a66e7fe46ead2f34102a57b7eae6bc7d8babda4a3d761ab75a5d4b72abc04"}}]})

3.942158812s ago: executing program 2 (id=219):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r0 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, r0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./trace\x00', &(0x7f0000000500)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./trace/current_tracer\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x180)
close(r1)

2.908083936s ago: executing program 0 (id=220):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xb50, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xb20, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_BASIC_ACT={0xac0, 0x3, [@m_sample={0xfffffffffffffe13, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "09dc9faff8587ce77b2e04278809409eaadb1549ce770e2466288316d42d53fae78e3bd0ab32dfac807ec6fb3c11d0374ad78010a29a03b9e26b0bdcfa11c3c8749e3a37f2c4b3c0a3bfc9f13eb5d2c49c1787626eb9fff35b4cd22ccc866b59d0b7875109149c5c198b6b92a240f93e6995eaeb03585fbfdd8d6cc3df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x400, 0x3, 0x2, 0xaa73}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x5, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x31b, 0x6, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8000, 0x3, 0x5b, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x10c, 0x20, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb5, 0x5, 0xffffffffffffffff, 0x8, 0x8}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x9, 0x8, 0x8, 0x6}, @rand_addr=0x64010106, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1d8, 0x7, 0x3, 0x7, 0x6}, @remote, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x2, 0x5, 0xfffffff8}, @empty, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x1c, 0x6, 0x0, 0x2}, @remote, @dev={0xac, 0x14, 0x14, 0x36}, 0xff}}]}, {0x1c, 0x6, "223ba0d4e181ea1fda7b6ccf039098dd91edfb3f1564f358"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x830, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x804, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0xb50}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000ec0), 0x56)
sendmsg$kcm(r5, &(0x7f0000000f00)={&(0x7f0000000f40)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000001000)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)

2.746349167s ago: executing program 0 (id=222):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
socket(0x18, 0x5, 0x1046)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000001a40)=[{{&(0x7f00000006c0)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x5c}}], 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000007e00)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10008000)
syz_open_dev$I2C(0x0, 0x1, 0x880)
shutdown(r0, 0x1)

2.720447765s ago: executing program 2 (id=223):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$sock(r3, &(0x7f0000000840)={&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000680)="5f150f107ac3e05b42b4425cd3c8b40437ea0213fe93ef7b865e907684d2faa297c7ccc1adac82421e8f8951b2277448e812f3f56164a3d6f7b80a24d275f6", 0x3f}, {&(0x7f00000006c0)}], 0x3}, 0x40000)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x110, 0x2c8, 0xfeffffff, 0x2c8, 0x2c8, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x7, 0x1}}, @common=@inet=@multiport={{0x50}, {0x1, 0x7, [0x4e20, 0x4e22, 0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4f24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e23, 0x4e1f], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3, 0x0, 0x0, 0x0, 0x3]}}}, @common=@ttl={{0x28}, {0x3, 0xb}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x66, @gre_key=0x9}}}}, {{@ip={@local, @remote, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x16}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@rand_addr=' \x01\x00', @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c)
quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r5, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9})
r6 = socket(0xa, 0x3, 0x3a)
getsockopt(0xffffffffffffffff, 0x128b, 0x100, &(0x7f00000004c0)=""/34, &(0x7f0000000800)=0x22)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.360098796s ago: executing program 3 (id=224):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xb50, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xb20, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_BASIC_ACT={0xac0, 0x3, [@m_sample={0xfffffffffffffe13, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "09dc9faff8587ce77b2e04278809409eaadb1549ce770e2466288316d42d53fae78e3bd0ab32dfac807ec6fb3c11d0374ad78010a29a03b9e26b0bdcfa11c3c8749e3a37f2c4b3c0a3bfc9f13eb5d2c49c1787626eb9fff35b4cd22ccc866b59d0b7875109149c5c198b6b92a240f93e6995eaeb03585fbfdd8d6cc3df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x400, 0x3, 0x2, 0xaa73}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x5, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x31b, 0x6, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8000, 0x3, 0x5b, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x10c, 0x20, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb5, 0x5, 0xffffffffffffffff, 0x8, 0x8}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x9, 0x8, 0x8, 0x6}, @rand_addr=0x64010106, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1d8, 0x7, 0x3, 0x7, 0x6}, @remote, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x2, 0x5, 0xfffffff8}, @empty, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x1c, 0x6, 0x0, 0x2}, @remote, @dev={0xac, 0x14, 0x14, 0x36}, 0xff}}]}, {0x1c, 0x6, "223ba0d4e181ea1fda7b6ccf039098dd91edfb3f1564f358"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x830, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x804, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0xb50}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000ec0), 0x56)
sendmsg$kcm(r5, &(0x7f0000000f00)={&(0x7f0000000f40)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000001000)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)

2.230409221s ago: executing program 1 (id=225):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="4607182dab0000002400128009000100766c616e000000001400028006000100010000000600050088a8000008000500", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
close(r6)
socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000900), 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
lstat(0x0, 0x0)
write$dsp(r7, &(0x7f0000000940)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0)
write(0xffffffffffffffff, &(0x7f0000000980)='27', 0x2)
socket(0x11, 0x3, 0x0)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, 0x0)
mmap(&(0x7f00005ec000/0x3000)=nil, 0x3000, 0x1000009, 0x30, 0xffffffffffffffff, 0xc823b000)
ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f00000009c0)=0xa)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x7185, 0x800, 0x0, 0x399}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x841a, 0x2050, 0x3, 0x17a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7805, 0xa, 0x3, 0x10b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc16d, 0x10, 0x2, 0xab}}, {0x0, 0x0, <r9=>0xffffffffffffffff, {0x0, 0x7655, 0x40, 0x0, 0xee}}], 0x4, &(0x7f0000000dc0)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x4}, 0x0, 0x0, '\x00', {0x4, 0x951, 0x0, &(0x7f0000000e40)=@buf_512="09d723b6a8b08048a173d56f466dadb12d6a9f22fae6e98a3891fd5fb623bebc661cec485b5c58ef011e3904ddfcf84f3d60b804b42ab472a2ed87cb235fb6db236258737b66977a09f1590b224562f52f696848ef704b85c9d74fa07cca8217d897d557416aecc4a7db25d5bc1b3efdbdea1978d4fdab126c27c97aa1fb4ec68ac41f92d9250d8695a9505cf933b1ff7fb2614bc5f5a069844518f633d325a808bbeb29aaa91d612dac88d7e0b1c8814b9e7a77829ae02c890f910ea7c7b7909cb748a3650c96f82c4f5a5d87d3e347a138f87f19b33853e75dd1885a8f8bd7ff231cae28166cf42e733bffd37740d68c113c9fb5b8ba8313343f287465578af9aeaafb3091e28c2dfd2e14ee29a76ef6fe88fb052cb786484dcbe130b7788e3fed4f71caef25ad678a989f75a064a60a617e0685caee1819d094bd48babb6e5037af2c7b6a6bbc0bbca705434657971d95d5bd0b72489f1292b54fa2928d830894cd10a82e01e0535e25199abddf9d88f4dd5f8dcb4ec4273c84a2d7b0869bb39a98eb0fb8a074059fbcb4a074ba0cb0619f1505c0ad800360cf8663f0dac4b407603538e1d6e28ac1be99a6e263f87283f043493246689df0d5b7f84c807682a0ce6bd0bc4c0333007abf773d01b1749cf65813e53dc06fd648082a1a324778264afb7a3501dc18b3d0d5307697b51f3f167a3388d346df0977fca9102112"}}, 0x0)
fsopen(&(0x7f0000001e80)='ceph\x00', 0x0)
ioctl$FIOCLEX(r9, 0x5451)

1.780248767s ago: executing program 3 (id=226):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setscheduler(r1, 0x0, &(0x7f0000000280)=0x5)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x5, 0x64, 0x9, 0x6}, {0x0, 0xfd, 0x11, 0x7fffffff}]})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {0xe6a}}, './file0\x00'})
r6 = syz_open_procfs(r1, &(0x7f0000000040)='stat\x00')
pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4)

1.245449927s ago: executing program 1 (id=228):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, './file0\x00'}})
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, 0x0, &(0x7f0000001280)='syzkaller\x00'}, 0x94)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts={0x2f}]}}}}}, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000740)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0xf, 0x4, 0x0, 0x8, 0x1, 0x68, 0x7c, 0x80, 0x2f, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@ssrr={0x89, 0x23, 0x64, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}, @local, @multicast1, @multicast2, @local, @multicast1, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x3, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

1.243827251s ago: executing program 0 (id=229):
syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000002c0)={0x579a, {0x1a, 0x1, 0x7d, 0x6, 0x4}})
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x3, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000401107500500000102030109023c0001010080320904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0)
ioctl$XFS_IOC_FSGROWFSRT(0xffffffffffffffff, 0x40105870, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4, 0x208002)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000800000043000e007f00000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0xffffffffffffffff, 0x2000403, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xdc001, 0x88)
ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000900)={0x48, 0x4, &(0x7f0000000500)="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"})
r4 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r5, r6, 0x0, 0x2000007ff)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x8001, 0x30, 0x80000000, 0x53b}, &(0x7f0000000280)=0x18)
shmctl$IPC_INFO(r4, 0x3, &(0x7f0000000400)=""/249)
shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x7000)
futex(0x0, 0x5, 0x2, &(0x7f0000000e00)={0x0, 0x989680}, 0x0, 0x2)

938.194606ms ago: executing program 2 (id=230):
openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$kcm(0x2, 0x7, 0x2)
socket(0x10, 0x2, 0x0)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000)
recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=""/216, 0x34}, 0x10001}], 0x2, 0x40010000, 0x0)
clock_adjtime(0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000340)={0x1ff, 0x5, 0x1, {0x1, @pix={0xff, 0xa, 0x31324d4e, 0x0, 0x9, 0xffffff61, 0x9, 0x9, 0x0, 0x7, 0x2, 0x6}}, 0xd5a})
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x4000, 0x4)
sendmmsg$alg(r3, &(0x7f0000001240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@iv={0x10}, @iv={0x10}], 0x20, 0x4880}, {0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000000780)="a27e751b506316d107c78c782937d6f33110862675b0cf4dd973f8161521f90c77ae4f26", 0x24}, {&(0x7f00000007c0)="946bcac2250f0a616e8f94e1baf7b9138cced2ccf8f2b4fe1e1a49f73250e614790249b84c8ee0ac47c0522e6c5da4f2f6b159d442a2d87aea70f7bdaf01436c4dce087aaff4696c77b8e973c587ecd7bb5fb2112e02f5df43bfa918e9f3026c9dff6f89975f76fcbecb71b5e8513c81f57cdeb0f24b6f767bc017ceea83", 0x7e}], 0x3, &(0x7f0000000880)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="3398a4", 0x3}], 0x1, &(0x7f0000000940)=[@assoc={0x10, 0x117, 0x4, 0x9}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}], 0x30, 0x804c044}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000a00)="a0ea6ea3427cef817dd7f81fd0efb568b0042fa10ff6e6e4e392e66e8a34d95fe4c9992b92ec54c266480c85ff0a76466f1ce133f0cc4a6590e68fe866b01294bbcd429977fc947d8c9303e5c96ce7a2457b795806086a68f4f32f4b2176d8ba50d133f85ead618af914d9787ba92896babebf4051c3f9e2c84e15ef7a0b9d30129b4d5d9e254dc15d6614384e817bf75584", 0x92}, {&(0x7f0000000ac0)="22509617adb91afa439b1f9b00ab2e15ab77ecc52cf6f6a79073d4a1f8166a86c20833c2527209467f628723fdbb88bad4b80d4c8a63d029eefb08cf461f2d433478", 0x42}, {&(0x7f0000000b40)="059af19a024c264d6e2a18d4bdcf804e2a17fee1863f29cda5134d6197b20382f5ff8b4d346a3bcf96877ea76e6ce26157409b0aca740a4806e568b7b16951be81bc3ea73611fe43127c2a8bb9b80c3b040dd6c4ba23f70ec96b57444fe9ccd69c5d43024e04ab16d43d6b7147ccfc448f573f5427a47cf6e7360ae611cf13d8cf03c736daaadc8187a36c559901c37f67d42921a2c8ff5c2d1f417d40b047b97ee0087bc2b896c44822e3876a58e27b32645bc00ad073733b35f160c47a569b7bb06ad4d65bd64dc2b6295132bb035fce916b5a230d3b6b308b122e360d7b8a28a2", 0xe2}, {0x0}, {&(0x7f0000000d40)="e6195fc805a6f8c49b717a2366b3610d2f1b646ffc85b7155922cdecf64ecd4d21849bcbfe4b8a5e4bbe74ea48beb9330f6ef93d5de44210850678c387ee6fdd0ed5efade60c12cf6cb08c683343934f1fc156a85e2c243d1abb962a425de7a1d2a7fc91e8c8928825204bf4615cf7e06d754e7e42cbca7b3c776c20174c5c8f8324b08633a7e517f6fbde324c557b78280872b174f30ee2fd8c06a7be9cd2", 0x9f}, {&(0x7f0000000e00)="9f151fd0f92644ca6a7fa73237bff578a7875549783e18c77f5d88a2323668c9334e5450243cfff2df0d5d1ebcc6052ae3e0edbc082b6e3163418151b361bd166bbde8b59a67f88095cacb949d0d68753be0ccfe6b51f180b0b71c098bd0049d74ea0ae906f016a3606b1cf40aa4872e9b30f00a7ce7e51b363651be2c6f59b3d656d7627d34afcdad559c475461c394ac41d328cdccc4f11e8fd078c9b1d1207801e6cbf31922692048e3ac4a84", 0xae}, {&(0x7f0000000ec0)="f9bee3476b931125ba7ae463e3c95db05048f2a4a5cd858a744e9058a13c7720eb751bac0f701da57b44befb73d2d5da9e7b9fbd6c544f2cb45df193860fd17352c817740c817af933b1cb9f2a83f81e013b0a369869c6ea4c83e01703d5900be2d6beda7efd6cc05677c70146b3771c5b9a1f0b72fd72fd35dbec03f7201b919810cbc3991b36604f72abc45b7eeae32bb72a0ab1d635ea248b0e75bced85d5a4040b776fd2ecda93974fba7f", 0xad}], 0x7, &(0x7f0000001140)=[@op={0x10}, @iv={0xa4, 0x117, 0x2, 0x91, "ce0faff8d5f8795f6467cda21010882ca780911951398e64c9322a6af2f3b766d1abba4dee1c7c5a883aaadba192581e7a1d2a90d97d3ef1a2d97de1010061888c0b016b9a17bc624b7ac63fd7f4d50a02f58a1c639c4e3a3fb3206ad7326b2eb150391e18285943f0ca2f1703d893ff4b593a9d71358f359b6998c020704356647b5239d7dc96072c2c285ce633fe8c3e"}, @op={0x10}], 0xc4, 0x4800}], 0x4, 0x190)

596.141414ms ago: executing program 3 (id=231):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xb50, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xb20, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_BASIC_ACT={0xac0, 0x3, [@m_sample={0xfffffffffffffe13, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "09dc9faff8587ce77b2e04278809409eaadb1549ce770e2466288316d42d53fae78e3bd0ab32dfac807ec6fb3c11d0374ad78010a29a03b9e26b0bdcfa11c3c8749e3a37f2c4b3c0a3bfc9f13eb5d2c49c1787626eb9fff35b4cd22ccc866b59d0b7875109149c5c198b6b92a240f93e6995eaeb03585fbfdd8d6cc3df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x400, 0x3, 0x2, 0xaa73}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x5, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x31b, 0x6, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8000, 0x3, 0x5b, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x10c, 0x20, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb5, 0x5, 0xffffffffffffffff, 0x8, 0x8}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x9, 0x8, 0x8, 0x6}, @rand_addr=0x64010106, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1d8, 0x7, 0x3, 0x7, 0x6}, @remote, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x2, 0x5, 0xfffffff8}, @empty, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x1c, 0x6, 0x0, 0x2}, @remote, @dev={0xac, 0x14, 0x14, 0x36}, 0xff}}]}, {0x1c, 0x6, "223ba0d4e181ea1fda7b6ccf039098dd91edfb3f1564f358"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x830, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x804, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0xb50}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000ec0), 0x56)
sendmsg$kcm(r5, &(0x7f0000000f00)={&(0x7f0000000f40)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000001000)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)

570.651µs ago: executing program 1 (id=232):
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x28000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff7ffc}]})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0)
inotify_init()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000440))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
dup(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
fcntl$setpipe(r4, 0x407, 0x100004)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x2, @mcast2, 0x1}}, {{0xa, 0x4e23, 0x7fff, @rand_addr=' \x01\x00', 0x8}}}, 0x104)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_UIE_ON(r6, 0x7003)

0s ago: executing program 2 (id=233):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x82c03, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r3=>0x0})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xb50, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xb20, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_BASIC_ACT={0xac0, 0x3, [@m_sample={0xfffffffffffffe13, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "09dc9faff8587ce77b2e04278809409eaadb1549ce770e2466288316d42d53fae78e3bd0ab32dfac807ec6fb3c11d0374ad78010a29a03b9e26b0bdcfa11c3c8749e3a37f2c4b3c0a3bfc9f13eb5d2c49c1787626eb9fff35b4cd22ccc866b59d0b7875109149c5c198b6b92a240f93e6995eaeb03585fbfdd8d6cc3df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x400, 0x3, 0x2, 0xaa73}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x5, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x31b, 0x6, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8000, 0x3, 0x5b, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x10c, 0x20, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb5, 0x5, 0xffffffffffffffff, 0x8, 0x8}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x9, 0x8, 0x8, 0x6}, @rand_addr=0x64010106, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1d8, 0x7, 0x3, 0x7, 0x6}, @remote, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x2, 0x5, 0xfffffff8}, @empty, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x1c, 0x6, 0x0, 0x2}, @remote, @dev={0xac, 0x14, 0x14, 0x36}, 0xff}}]}, {0x1c, 0x6, "223ba0d4e181ea1fda7b6ccf039098dd91edfb3f1564f358"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x830, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x804, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0xb50}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000ec0), 0x56)
sendmsg$kcm(r6, &(0x7f0000000f00)={&(0x7f0000000f40)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000001000)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:36356' (ED25519) to the list of known hosts.
[   32.540237][ T5698] cgroup: Unknown subsys name 'net'
[   32.714862][ T5698] cgroup: Unknown subsys name 'cpuset'
[   32.718729][ T5698] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   33.635002][ T5698] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   37.396169][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   37.397266][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   37.403394][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   37.403719][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   37.405340][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   37.406246][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   37.407638][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   37.408382][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   37.409222][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   37.409755][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   37.411029][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   37.411821][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   37.412966][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   37.413744][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   37.414425][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   37.418174][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   37.426863][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   37.427723][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   37.434539][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   37.437750][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   37.601073][ T5788] rxe_eth0 speed is unknown, defaulting to 1000
[   37.604592][ T5788] rxe_eth0 speed is unknown, defaulting to 1000
[   37.610335][ T5791] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   37.610338][ T5788] rxe_eth0 speed is unknown, defaulting to 1000
[   37.612494][ T5781] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   37.614903][ T5780] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   37.710383][ T5788] infiniband rxe0: set active
[   37.710764][ T5788] infiniband rxe0: added rxe_eth0
[   37.720148][ T5788] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   37.720168][ T5788] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   37.720188][ T5788] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   37.723669][ T2215] rxe_eth0 speed is unknown, defaulting to 1000
[   37.746516][ T5788] RDS/IB: rxe0: added
[   37.746637][ T5788] smc: adding ib device rxe0 with port count 1
[   37.746670][ T5788] smc:    ib device rxe0 port 1 has no pnetid
[   37.747263][  T861] rxe_eth0 speed is unknown, defaulting to 1000
[   37.752908][ T5788] rxe_eth0 speed is unknown, defaulting to 1000
[   37.889926][ T5788] rxe_eth0 speed is unknown, defaulting to 1000
[   38.002389][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.002437][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.002497][ T5791] bridge_slave_0: entered allmulticast mode
[   38.003224][ T5791] bridge_slave_0: entered promiscuous mode
[   38.005688][ T5788] rxe_eth0 speed is unknown, defaulting to 1000
[   38.008255][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.008296][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.008355][ T5791] bridge_slave_1: entered allmulticast mode
[   38.009057][ T5791] bridge_slave_1: entered promiscuous mode
[   38.053713][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.059433][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.059519][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.059575][ T5780] bridge_slave_0: entered allmulticast mode
[   38.060329][ T5780] bridge_slave_0: entered promiscuous mode
[   38.073484][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.073637][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.073725][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.073811][ T5780] bridge_slave_1: entered allmulticast mode
[   38.075343][ T5780] bridge_slave_1: entered promiscuous mode
[   38.101340][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.101422][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.101533][ T5781] bridge_slave_0: entered allmulticast mode
[   38.102611][ T5781] bridge_slave_0: entered promiscuous mode
[   38.113950][ T5791] team0: Port device team_slave_0 added
[   38.116095][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.117657][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.117739][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.117778][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.117855][ T5781] bridge_slave_1: entered allmulticast mode
[   38.118745][ T5781] bridge_slave_1: entered promiscuous mode
[   38.127920][ T5791] team0: Port device team_slave_1 added
[   38.151815][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.158947][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.158956][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.158969][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.170406][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.176699][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.176708][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.176721][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.181903][ T5788] rxe_eth0 speed is unknown, defaulting to 1000
[   38.185633][ T5780] team0: Port device team_slave_0 added
[   38.199845][ T5780] team0: Port device team_slave_1 added
[   38.223829][ T5781] team0: Port device team_slave_0 added
[   38.226472][ T5781] team0: Port device team_slave_1 added
[   38.241414][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.241424][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.241436][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.245594][ T5791] hsr_slave_0: entered promiscuous mode
[   38.246125][ T5791] hsr_slave_1: entered promiscuous mode
[   38.261100][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.261109][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.261122][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.274030][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.274040][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.274052][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.275153][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.275160][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.275172][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   38.318016][ T5780] hsr_slave_0: entered promiscuous mode
[   38.318490][ T5780] hsr_slave_1: entered promiscuous mode
[   38.318872][ T5780] debugfs: 'hsr0' already exists in 'hsr'
[   38.318915][ T5780] Cannot create hsr debugfs directory
[   38.394249][ T5781] hsr_slave_0: entered promiscuous mode
[   38.394686][ T5781] hsr_slave_1: entered promiscuous mode
[   38.394984][ T5781] debugfs: 'hsr0' already exists in 'hsr'
[   38.394996][ T5781] Cannot create hsr debugfs directory
[   38.603666][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   38.610788][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.613276][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   38.620554][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.623308][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   38.628583][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.635707][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   38.639391][ T5791] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.677107][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   38.681795][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.686130][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   38.692670][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.693309][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   38.697107][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.703070][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   38.706945][ T5780] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.731801][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.731886][ T5791] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.732239][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.732286][ T5791] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.804542][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.804589][ T5780] bridge0: port 2(bridge_slave_1) entered forwarding state
[   38.804708][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.804752][ T5780] bridge0: port 1(bridge_slave_0) entered forwarding state
[   38.821616][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.821724][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.822141][ T5788] bridge_slave_0: entered allmulticast mode
[   38.823913][ T5788] bridge_slave_0: entered promiscuous mode
[   38.825939][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[   38.826009][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.826131][ T5788] bridge_slave_1: entered allmulticast mode
[   38.826978][ T5788] bridge_slave_1: entered promiscuous mode
[   38.841789][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   38.846375][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   38.846834][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   38.849311][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   38.850968][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   38.853532][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   38.856181][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   38.859775][ T5781] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   38.867791][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   38.869604][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   38.887103][   T78] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.887665][   T78] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.888769][   T78] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.889013][   T78] bridge0: port 2(bridge_slave_1) entered disabled state
[   38.925454][ T5788] team0: Port device team_slave_0 added
[   38.927763][ T5788] team0: Port device team_slave_1 added
[   38.962668][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0
[   38.967741][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[   38.967752][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.967764][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   38.974246][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[   38.974255][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   38.974268][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.011587][ T5791] 8021q: adding VLAN 0 to HW filter on device team0
[   39.027610][ T5788] hsr_slave_0: entered promiscuous mode
[   39.028059][ T5788] hsr_slave_1: entered promiscuous mode
[   39.028362][ T5788] debugfs: 'hsr0' already exists in 'hsr'
[   39.028373][ T5788] Cannot create hsr debugfs directory
[   39.047384][  T711] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.047433][  T711] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.048333][  T711] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.048374][  T711] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.054467][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.155032][ T5780] 8021q: adding VLAN 0 to HW filter on device team0
[   39.167265][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.173316][  T711] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.173397][  T711] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.233660][  T711] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.233730][  T711] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.246230][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   39.256377][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.256859][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   39.259286][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.264337][ T5781] 8021q: adding VLAN 0 to HW filter on device team0
[   39.271501][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   39.275548][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.275981][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   39.280797][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   39.297341][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.297388][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.299963][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.300007][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.400491][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[   39.414428][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[   39.418974][  T488] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.419031][  T488] bridge0: port 1(bridge_slave_0) entered forwarding state
[   39.423760][  T111] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.423804][  T111] bridge0: port 2(bridge_slave_1) entered forwarding state
[   39.434533][ T5796] Bluetooth: hci3: command tx timeout
[   39.434539][ T5145] Bluetooth: hci2: command tx timeout
[   39.512653][ T5796] Bluetooth: hci0: command tx timeout
[   39.522088][ T5796] Bluetooth: hci1: command tx timeout
[   39.599613][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.621934][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.648815][ T5791] veth0_vlan: entered promiscuous mode
[   39.673655][ T5791] veth1_vlan: entered promiscuous mode
[   39.679927][ T5780] veth0_vlan: entered promiscuous mode
[   39.688686][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.693684][ T5780] veth1_vlan: entered promiscuous mode
[   39.723177][ T5791] veth0_macvtap: entered promiscuous mode
[   39.729073][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[   39.741283][ T5791] veth1_macvtap: entered promiscuous mode
[   39.754688][ T5781] veth0_vlan: entered promiscuous mode
[   39.755578][ T5780] veth0_macvtap: entered promiscuous mode
[   39.762379][ T5780] veth1_macvtap: entered promiscuous mode
[   39.766311][ T5781] veth1_vlan: entered promiscuous mode
[   39.770132][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.783745][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.786100][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.789123][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.818064][ T5788] veth0_vlan: entered promiscuous mode
[   39.840184][ T5788] veth1_vlan: entered promiscuous mode
[   39.855246][ T5781] veth0_macvtap: entered promiscuous mode
[   39.879626][ T5781] veth1_macvtap: entered promiscuous mode
[   39.892709][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.892883][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.892901][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.892918][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.892935][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.892952][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.892970][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.892986][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.893043][  T111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.893059][  T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.929467][  T111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.929485][  T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.939978][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.951810][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.951829][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.961325][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.967313][ T5788] veth0_macvtap: entered promiscuous mode
[   39.979236][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.979252][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.985145][ T5788] veth1_macvtap: entered promiscuous mode
[   39.993684][ T5888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.993916][ T5888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.995994][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.001040][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.013017][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.054177][  T111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.054192][  T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.087629][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.087642][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.093141][ T5791] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   40.103064][ T5791] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.111095][ T5780] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.113438][ T5780] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.137046][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.137064][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.146240][ T5780] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   40.148688][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.148703][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.152354][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.164062][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.183907][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.184182][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.184212][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.306395][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   41.290064][ T5655] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   41.305342][ T5963] Bluetooth: MGMT ver 1.23
[   41.306572][ T5963] program syz.0.5 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   41.520055][ T5967] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   41.523147][ T5783] Bluetooth: hci2: command tx timeout
[   41.523143][ T5145] Bluetooth: hci3: command tx timeout
[   41.571066][ T5967] kvm: pic: level sensitive irq not supported
[   41.571446][ T5967] kvm: pic: non byte read
[   41.573184][ T5967] kvm: pic: level sensitive irq not supported
[   41.573440][ T5967] kvm: pic: non byte read
[   41.574550][ T5967] kvm: pic: level sensitive irq not supported
[   41.574821][ T5967] kvm: pic: non byte read
[   41.576071][ T5967] kvm: pic: level sensitive irq not supported
[   41.576336][ T5967] kvm: pic: non byte read
[   41.577140][ T5967] kvm: pic: level sensitive irq not supported
[   41.577381][ T5967] kvm: pic: non byte read
[   41.578554][ T5967] kvm: pic: level sensitive irq not supported
[   41.578810][ T5967] kvm: pic: non byte read
[   41.579973][ T5967] kvm: pic: level sensitive irq not supported
[   41.580225][ T5967] kvm: pic: non byte read
[   41.581451][ T5967] kvm: pic: level sensitive irq not supported
[   41.583836][ T5967] kvm: pic: non byte read
[   41.585305][ T5967] kvm: pic: level sensitive irq not supported
[   41.585567][ T5967] kvm: pic: non byte read
[   41.593442][ T5145] Bluetooth: hci1: command tx timeout
[   41.593625][ T5783] Bluetooth: hci0: command tx timeout
[   41.855452][ T5655] usb 8-1: Using ep0 maxpacket: 8
[   41.865708][ T5655] usb 8-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   42.182102][ T5655] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[   42.182129][ T5655] usb 8-1: config 0 has no interface number 0
[   42.182160][ T5655] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   42.182178][ T5655] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   42.182193][ T5655] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   42.196773][ T5655] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   42.196803][ T5655] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   42.206212][ T5655] usb 8-1: config 0 descriptor??
[   42.235816][ T5655] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   42.494309][ T5973] rxe_eth0 speed is unknown, defaulting to 1000
[   42.548556][    C1] ldusb 8-1:0.55: usb_submit_urb failed (-19)
[   42.548577][  T861] usb 8-1: USB disconnect, device number 2
[   42.563187][  T861] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[   42.572441][ T5948] ldusb: No device or device unplugged -19
[   42.878979][ T5980] netlink: 'syz.1.9': attribute type 13 has an invalid length.
[   43.362614][ T5796] Bluetooth: hci0: Opcode 0x0c3a failed: -110
[   43.383006][ T5963] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   43.412057][ T5869] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   43.575261][ T5869] usb 8-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00
[   43.578044][ T5869] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   43.578057][ T5869] usb 8-1: Product: syz
[   43.578064][ T5869] usb 8-1: Manufacturer: syz
[   43.578071][ T5869] usb 8-1: SerialNumber: syz
[   43.592054][ T5796] Bluetooth: hci2: command tx timeout
[   43.594122][ T5796] Bluetooth: hci3: command tx timeout
[   43.672840][ T5145] Bluetooth: hci1: command tx timeout
[   44.003360][ T5869] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[   44.003391][ T5869] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[   44.006275][ T5869] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[   44.006301][ T5869] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[   44.006779][ T5869] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[   44.049117][ T5869] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32
[   44.282113][ T3401] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   44.452048][ T3401] usb 7-1: Using ep0 maxpacket: 8
[   44.453225][ T3401] usb 7-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   44.455689][ T3401] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   44.455898][ T3401] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.500003][ T3401] usb 7-1: config 0 descriptor??
[   44.778414][ T3401] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   45.578815][    T9] usb 7-1: USB disconnect, device number 2
[   45.682099][ T5145] Bluetooth: hci3: command tx timeout
[   45.682132][ T5145] Bluetooth: hci2: command tx timeout
[   45.762920][ T5796] Bluetooth: hci1: command tx timeout
[   45.824550][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'.
[   46.247784][ T6016] binfmt_misc: register: failed to install interpreter ./file0
[   46.751438][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'.
[   46.768017][ T6022] Zero length message leads to an empty skb
[   46.806126][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'.
[   46.897332][ T5937] usb 8-1: USB disconnect, device number 3
[   47.681753][ T5937] rxe_eth0 speed is unknown, defaulting to 1000
[   48.376856][ T6055] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   48.481154][ T6055] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   48.869410][ T6063] syz.1.27 uses obsolete (PF_INET,SOCK_PACKET)
[   48.874936][ T6063] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   48.875337][ T6063] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   48.875747][ T6063] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   48.876201][ T6063] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   48.878115][ T6063] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   48.878533][ T6063] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   48.879055][ T6063] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   48.879629][ T6063] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   49.271555][ T6066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   49.316315][ T6066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   49.322489][ T6066] bond0 (unregistering): Released all slaves
[   49.378165][ T6062] netlink: 64 bytes leftover after parsing attributes in process `syz.0.28'.
[   49.410235][   T41] wacom 0003:056A:003F.0002: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0
[   49.527965][ T6074] fido_id[6074]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   49.671052][ T6084] netlink: 28 bytes leftover after parsing attributes in process `syz.1.32'.
[   49.863244][ T6088] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer.
[   51.229892][ T6097] tc action pedit offset must be on 32 bit boundaries
[   51.229909][ T6097] tc action pedit offset must be on 32 bit boundaries
[   51.229918][ T6097] tc action pedit offset must be on 32 bit boundaries
[   51.229925][ T6097] tc action pedit offset must be on 32 bit boundaries
[   51.229932][ T6097] tc action pedit offset must be on 32 bit boundaries
[   51.229939][ T6097] tc action pedit offset must be on 32 bit boundaries
[   51.229946][ T6097] tc action pedit offset must be on 32 bit boundaries
[   51.229953][ T6097] tc action pedit offset must be on 32 bit boundaries
[   51.229960][ T6097] tc action pedit offset must be on 32 bit boundaries
[   51.230014][ T6097] tc action pedit offset must be on 32 bit boundaries
[   51.230050][ T6097] TC_ACT_REPEAT abuse ?
[   51.618744][ T6102] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   51.618781][ T6102] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   51.618817][ T6102] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   52.677144][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'.
[   52.837688][ T1366] cfg80211: failed to load regulatory.db
[   53.315295][ T6136] syz.3.45: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1
[   53.315507][ T6136] CPU: 0 UID: 0 PID: 6136 Comm: syz.3.45 Not tainted syzkaller #0 PREEMPT(full) 
[   53.315532][ T6136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   53.315539][ T6136] Call Trace:
[   53.315543][ T6136]  <TASK>
[   53.315548][ T6136]  dump_stack_lvl+0x100/0x190
[   53.315568][ T6136]  warn_alloc.cold+0x9e/0xb2
[   53.315580][ T6136]  ? __pfx_warn_alloc+0x10/0x10
[   53.315599][ T6136]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   53.315613][ T6136]  ? __pfx_get_page_from_freelist+0x10/0x10
[   53.315632][ T6136]  __alloc_frozen_pages_noprof+0xaf3/0x3280
[   53.315654][ T6136]  ? do_raw_spin_lock+0x128/0x260
[   53.315667][ T6136]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   53.315684][ T6136]  ? mark_held_locks+0x40/0x70
[   53.315695][ T6136]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   53.315706][ T6136]  ? lockdep_hardirqs_on+0x7d/0x110
[   53.315717][ T6136]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   53.315732][ T6136]  ? __kasan_kmalloc+0xaa/0xb0
[   53.315742][ T6136]  ? __kmalloc_noprof+0x32f/0x840
[   53.315756][ T6136]  ? comedi_isadma_alloc+0xc6/0x620
[   53.315768][ T6136]  ? pcl816_attach+0x909/0xb30
[   53.315790][ T6136]  alloc_pages_node_noprof+0x93/0x200
[   53.315805][ T6136]  ? __pfx_alloc_pages_node_noprof+0x10/0x10
[   53.315823][ T6136]  alloc_pages_exact_nid_noprof+0x32/0xe0
[   53.315839][ T6136]  __dma_direct_alloc_pages.isra.0+0x34e/0x510
[   53.315855][ T6136]  ? dma_alloc_from_dev_coherent+0x2e0/0x570
[   53.315868][ T6136]  dma_direct_alloc+0x3d1/0x8a0
[   53.315885][ T6136]  dma_alloc_attrs+0x1b9/0x3e0
[   53.315900][ T6136]  ? __pfx_dma_alloc_attrs+0x10/0x10
[   53.315914][ T6136]  ? __kmalloc_noprof+0x350/0x840
[   53.315929][ T6136]  ? dma_direct_supported+0xca/0x220
[   53.315961][ T6136]  comedi_isadma_alloc+0x331/0x620
[   53.315975][ T6136]  ? __pfx_comedi_isadma_alloc+0x10/0x10
[   53.315988][ T6136]  ? request_threaded_irq+0x27b/0x3e0
[   53.316001][ T6136]  pcl816_attach+0x909/0xb30
[   53.316019][ T6136]  comedi_device_attach+0x40e/0x6b0
[   53.316038][ T6136]  do_devconfig_ioctl+0x1b3/0x6d0
[   53.316049][ T6136]  ? comedi_unlocked_ioctl+0x180/0x3310
[   53.316063][ T6136]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[   53.316081][ T6136]  ? tomoyo_path_number_perm+0x46d/0x580
[   53.316096][ T6136]  ? kasan_save_stack+0x3f/0x50
[   53.316105][ T6136]  ? kasan_save_stack+0x30/0x50
[   53.316114][ T6136]  ? kasan_save_track+0x14/0x30
[   53.316123][ T6136]  ? kasan_save_free_info+0x3b/0x70
[   53.316138][ T6136]  comedi_unlocked_ioctl+0x860/0x3310
[   53.316156][ T6136]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[   53.316180][ T6136]  ? kasan_quarantine_put+0x104/0x240
[   53.316195][ T6136]  ? lockdep_hardirqs_on+0x7d/0x110
[   53.316207][ T6136]  ? find_held_lock+0x2b/0x80
[   53.316221][ T6136]  ? tomoyo_path_number_perm+0x28f/0x580
[   53.316234][ T6136]  ? tomoyo_path_number_perm+0x28f/0x580
[   53.316251][ T6136]  ? tomoyo_path_number_perm+0x188/0x580
[   53.316268][ T6136]  comedi_compat_ioctl+0x438/0xe20
[   53.316282][ T6136]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[   53.316296][ T6136]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   53.316323][ T6136]  ? do_vfs_ioctl+0x226/0x13e0
[   53.316339][ T6136]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   53.316358][ T6136]  ? __fget_files+0x34/0x3d0
[   53.316369][ T6136]  ? find_held_lock+0x2b/0x80
[   53.316387][ T6136]  ? __fget_files+0x215/0x3d0
[   53.316397][ T6136]  ? hook_file_ioctl_common+0x140/0x440
[   53.316414][ T6136]  ? __fget_files+0x21f/0x3d0
[   53.316427][ T6136]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[   53.316441][ T6136]  __ia32_compat_sys_ioctl+0x2cf/0x360
[   53.316458][ T6136]  __do_fast_syscall_32+0x14b/0x8c0
[   53.316470][ T6136]  ? lockdep_hardirqs_on+0x7d/0x110
[   53.316483][ T6136]  do_fast_syscall_32+0x32/0x70
[   53.316496][ T6136]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   53.316509][ T6136] RIP: 0023:0xf7f94fbc
[   53.316518][ T6136] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   53.316528][ T6136] RSP: 002b:00000000f542550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[   53.316538][ T6136] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400
[   53.316544][ T6136] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000
[   53.316550][ T6136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   53.316556][ T6136] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   53.316562][ T6136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   53.316575][ T6136]  </TASK>
[   53.316667][ T6136] Mem-Info:
[   53.316673][ T6136] active_anon:5510 inactive_anon:113 isolated_anon:0
[   53.316673][ T6136]  active_file:692 inactive_file:56480 isolated_file:0
[   53.316673][ T6136]  unevictable:1000 dirty:570 writeback:0
[   53.316673][ T6136]  slab_reclaimable:7676 slab_unreclaimable:53491
[   53.316673][ T6136]  mapped:23937 shmem:1468 pagetables:1071
[   53.316673][ T6136]  sec_pagetables:299 bounce:0
[   53.316673][ T6136]  kernel_misc_reclaimable:0
[   53.316673][ T6136]  free:39518 free_pcp:0 free_cma:0
[   53.316723][ T6136] Node 0 active_anon:12kB inactive_anon:44kB active_file:208kB inactive_file:716kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:12kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8128kB pagetables:1220kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   53.316806][ T6136] Node 0 DMA free:2724kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   53.316860][ T6136] lowmem_reserve[]: 0 256 256 256 256
[   53.316966][ T6136] Node 0 DMA: 184*4kB (U) 27*8kB (U) 19*16kB (U) 12*32kB (U) 5*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2728kB
[   53.317397][ T6136] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   53.317454][ T6136] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   53.317592][ T6136] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   53.317693][ T6136] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   53.317810][ T6136] 58729 total pagecache pages
[   53.317815][ T6136] 96 pages in swap cache
[   53.317877][ T6136] Free swap  = 121508kB
[   53.317883][ T6136] Total swap = 124996kB
[   53.317945][ T6136] 524155 pages RAM
[   53.317950][ T6136] 0 pages HighMem/MovableOnly
[   53.318014][ T6136] 217593 pages reserved
[   53.318019][ T6136] 0 pages cma reserved
[   53.999197][ T6148] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   54.166351][ T6155] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   54.166366][ T6155] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   54.297468][ T6159] netlink: 'syz.0.50': attribute type 1 has an invalid length.
[   54.824026][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'.
[   54.841150][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'.
[   55.302084][    T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[   55.452768][    T9] usb 8-1: Using ep0 maxpacket: 8
[   55.453564][    T9] usb 8-1: New USB device found: idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[   55.454227][    T9] usb 8-1: config 0 has no interfaces?
[   55.454253][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.456554][    T9] usb 8-1: config 0 descriptor??
[   55.717881][    T9] usb 8-1: USB disconnect, device number 4
[   57.111436][   T42] audit: type=1326 audit(1793189378.391:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6197 comm="syz.2.63" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x0
[   58.335847][ T6215] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   58.448868][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'.
[   58.451117][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'.
[   58.451372][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'.
[   58.451907][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'.
[   58.452233][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'.
[   58.712998][ T6243] Console: switching to colour dummy device 80x25
[   59.139857][   T42] audit: type=1326 audit(1793189380.421:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.0.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   59.150952][   T42] audit: type=1326 audit(1793189380.431:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.0.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   59.151238][   T42] audit: type=1326 audit(1793189380.431:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.0.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   59.171013][   T42] audit: type=1326 audit(1793189380.421:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.0.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   59.171165][   T42] audit: type=1326 audit(1793189380.451:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.0.71" exe="/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   59.171296][   T42] audit: type=1326 audit(1793189380.451:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.0.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   59.171437][   T42] audit: type=1326 audit(1793189380.451:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.0.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   59.171568][   T42] audit: type=1326 audit(1793189380.451:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.0.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   59.171604][   T42] audit: type=1326 audit(1793189380.451:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.0.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   59.261639][ T6246] infiniband syz2: set active
[   59.261699][ T6246] infiniband syz2: added bridge_slave_1
[   59.271616][ T6246] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   59.271647][ T6246] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   59.271680][ T6246] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   59.296521][ T6246] RDS/IB: syz2: added
[   59.296564][ T6246] smc: adding ib device syz2 with port count 1
[   59.296579][ T6246] smc:    ib device syz2 port 1 has no pnetid
[   59.882253][ T6257] syzkaller0: entered promiscuous mode
[   59.882268][ T6257] syzkaller0: entered allmulticast mode
[   61.105889][ T3401] Process accounting resumed
[   61.367216][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'.
[   61.368808][ T6285] netlink: 104 bytes leftover after parsing attributes in process `syz.0.81'.
[   61.368823][ T6285] netlink: 104 bytes leftover after parsing attributes in process `syz.0.81'.
[   61.737099][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'.
[   62.004608][ T6302] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12
[   62.785862][ T6313] netlink: 830 bytes leftover after parsing attributes in process `syz.2.94'.
[   62.786127][    T9] bond_slave_0: entered promiscuous mode
[   62.786153][    T9] bond_slave_1: entered promiscuous mode
[   64.022124][ T5872] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   64.192172][ T5872] usb 7-1: Using ep0 maxpacket: 8
[   64.196455][ T5872] usb 7-1: New USB device found: idVendor=2c42, idProduct=16f8, bcdDevice=f3.33
[   64.201602][ T5872] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   64.201881][ T5872] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   64.205913][ T5872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.206077][ T5872] usb 7-1: Product: syz
[   64.206255][ T5872] usb 7-1: Manufacturer: syz
[   64.206348][ T5872] usb 7-1: SerialNumber: syz
[   64.213358][ T5872] usb 7-1: config 0 descriptor??
[   64.437624][ T5872] usb 7-1: USB disconnect, device number 3
[   64.462081][ T6328] service_operation: orangefs_mount -- wait timed out; aborting attempt.
[   64.462102][ T6328] orangefs_mount: mount request failed with -110
[   64.466718][ T6328] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[   64.511055][ T6327] i801_smbus 0000:00:1f.3: SMBus using PCI interrupt
[   64.514721][ T6327] FAULT_INJECTION: forcing a failure.
[   64.514721][ T6327] name failslab, interval 1, probability 0, space 0, times 1
[   64.514739][ T6327] CPU: 2 UID: 0 PID: 6327 Comm: syz.1.97 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[   64.514762][ T6327] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[   64.514767][ T6327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   64.514773][ T6327] Call Trace:
[   64.514777][ T6327]  <TASK>
[   64.514782][ T6327]  dump_stack_lvl+0x100/0x190
[   64.514803][ T6327]  should_fail_ex.cold+0x5/0xa
[   64.514818][ T6327]  should_failslab+0xc2/0x120
[   64.514831][ T6327]  kmem_cache_alloc_noprof+0x92/0x6a0
[   64.514848][ T6327]  ? __kernfs_new_node+0xd2/0xa10
[   64.514866][ T6327]  __kernfs_new_node+0xd2/0xa10
[   64.514880][ T6327]  ? __lock_acquire+0x5c0/0x1f40
[   64.514894][ T6327]  ? __pfx___kernfs_new_node+0x10/0x10
[   64.514910][ T6327]  ? lock_acquire+0x1d1/0x380
[   64.514919][ T6327]  ? kernfs_root+0x23/0x2a0
[   64.514932][ T6327]  ? find_held_lock+0x2b/0x80
[   64.514946][ T6327]  ? kernfs_root+0xee/0x2a0
[   64.514958][ T6327]  ? kernfs_root+0xee/0x2a0
[   64.514974][ T6327]  kernfs_new_node+0x194/0x200
[   64.514990][ T6327]  ? __pfx_kernfs_new_node+0x10/0x10
[   64.515004][ T6327]  ? find_held_lock+0x2b/0x80
[   64.515017][ T6327]  ? kernfs_root+0xee/0x2a0
[   64.515033][ T6327]  __kernfs_create_file+0x53/0x350
[   64.515045][ T6327]  sysfs_add_file_mode_ns+0x207/0x3c0
[   64.515062][ T6327]  sysfs_merge_group+0x194/0x340
[   64.515076][ T6327]  ? __pfx_sysfs_merge_group+0x10/0x10
[   64.515090][ T6327]  ? bus_add_device+0x2e2/0x6c0
[   64.515104][ T6327]  ? __pfx_bus_add_device+0x10/0x10
[   64.515116][ T6327]  ? __pfx_dev_add_physical_location+0x10/0x10
[   64.515130][ T6327]  dpm_sysfs_add+0x237/0x280
[   64.515141][ T6327]  device_add+0x9f4/0x1970
[   64.515152][ T6327]  ? __pfx_device_add+0x10/0x10
[   64.515164][ T6327]  ? kobject_get+0xbb/0x150
[   64.515181][ T6327]  cdev_device_add+0x12b/0x270
[   64.515194][ T6327]  i2cdev_attach_adapter+0x36b/0x4c0
[   64.515220][ T6327]  i2cdev_notifier_call+0x65/0x80
[   64.515232][ T6327]  notifier_call_chain+0x99/0x3f0
[   64.515249][ T6327]  blocking_notifier_call_chain+0x69/0xa0
[   64.515268][ T6327]  bus_notify+0x56/0x80
[   64.515280][ T6327]  device_add+0x1169/0x1970
[   64.515295][ T6327]  ? __pfx_device_add+0x10/0x10
[   64.515307][ T6327]  ? __pfx_idr_replace+0x10/0x10
[   64.515325][ T6327]  ? dput.part.0+0x4a/0x240
[   64.515366][ T6327]  ? dput+0x24/0x30
[   64.515390][ T6327]  i2c_register_adapter+0x862/0x13f0
[   64.515402][ T6327]  ? of_alias_get_id+0xb1/0x110
[   64.515418][ T6327]  i801_probe.cold+0x30c/0x8bf
[   64.515433][ T6327]  ? __pfx_i801_probe+0x10/0x10
[   64.515449][ T6327]  ? mark_held_locks+0x40/0x70
[   64.515459][ T6327]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   64.515470][ T6327]  ? lockdep_hardirqs_on+0x7d/0x110
[   64.515481][ T6327]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   64.515492][ T6327]  ? __pfx_i801_probe+0x10/0x10
[   64.515504][ T6327]  local_pci_probe+0xdd/0x1b0
[   64.515519][ T6327]  pci_call_probe+0x176/0x800
[   64.515534][ T6327]  ? pci_match_device+0x147/0x7d0
[   64.515549][ T6327]  ? __pfx_pci_call_probe+0x10/0x10
[   64.515568][ T6327]  ? __pfx_pci_match_device+0x10/0x10
[   64.515582][ T6327]  ? pci_find_host_bridge+0x3c/0x80
[   64.515605][ T6327]  pci_device_probe+0x25b/0x400
[   64.515621][ T6327]  ? __pfx_pci_device_probe+0x10/0x10
[   64.515641][ T6327]  ? sysfs_create_link+0x68/0xc0
[   64.515654][ T6327]  ? __pfx_pci_device_probe+0x10/0x10
[   64.515670][ T6327]  really_probe+0x241/0xa60
[   64.515686][ T6327]  __driver_probe_device+0x210/0x460
[   64.515703][ T6327]  device_driver_attach+0xaa/0x230
[   64.515720][ T6327]  bind_store+0x123/0x1d0
[   64.515731][ T6327]  ? __pfx_bind_store+0x10/0x10
[   64.515743][ T6327]  drv_attr_store+0x74/0xb0
[   64.515758][ T6327]  ? __pfx_drv_attr_store+0x10/0x10
[   64.515768][ T6327]  sysfs_kf_write+0xf2/0x150
[   64.515781][ T6327]  kernfs_fop_write_iter+0x3e0/0x5f0
[   64.515790][ T6327]  ? __pfx_sysfs_kf_write+0x10/0x10
[   64.515804][ T6327]  vfs_write+0x6af/0x1050
[   64.515815][ T6327]  ? __pfx_kernfs_fop_write_iter+0x10/0x10
[   64.515827][ T6327]  ? __pfx_vfs_write+0x10/0x10
[   64.515836][ T6327]  ? find_held_lock+0x2b/0x80
[   64.515860][ T6327]  ksys_write+0x12a/0x250
[   64.515870][ T6327]  ? __pfx_ksys_write+0x10/0x10
[   64.515887][ T6327]  __do_fast_syscall_32+0x14b/0x8c0
[   64.515904][ T6327]  ? lockdep_hardirqs_on+0x7d/0x110
[   64.515923][ T6327]  do_fast_syscall_32+0x32/0x70
[   64.515944][ T6327]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   64.515964][ T6327] RIP: 0023:0xf7fd6fbc
[   64.515980][ T6327] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   64.515997][ T6327] RSP: 002b:00000000f548650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[   64.516014][ T6327] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800005c0
[   64.516024][ T6327] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000000
[   64.516034][ T6327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   64.516043][ T6327] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   64.516052][ T6327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   64.516076][ T6327]  </TASK>
[   64.536320][ T6327] i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD
[   64.693016][    T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   64.852157][    T9] usb 8-1: Using ep0 maxpacket: 16
[   64.852903][    T9] usb 8-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[   64.855713][    T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   64.855729][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[   64.857262][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.857274][    T9] usb 8-1: Product: syz
[   64.857281][    T9] usb 8-1: Manufacturer: syz
[   64.857288][    T9] usb 8-1: SerialNumber: syz
[   64.859194][    T9] usb 8-1: config 0 descriptor??
[   65.076286][    C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71)
[   65.081338][    T9] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input8
[   65.091904][    T9] imon:send_packet: packet tx failed (-71)
[   65.102489][    T9] imon 8-1:0.0: panel buttons/knobs setup failed
[   65.162025][    T9] rc_core: IR keymap rc-imon-pad not found
[   65.162041][    T9] Registered IR keymap rc-empty
[   65.162302][    T9] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[   65.162317][    T9] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[   65.163522][    T9] imon:send_packet: packet tx failed (-71)
[   65.182128][    T9] imon 8-1:0.0: remote input dev register failed
[   65.182505][    T9] imon 8-1:0.0: imon_init_intf0: rc device setup failed
[   65.204158][    T9] imon 8-1:0.0: unable to initialize intf0, err 0
[   65.207489][    T9] usb 8-1: USB disconnect, device number 5
[   65.605239][    T9] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[   65.735537][ T6364] syzkaller0: entered promiscuous mode
[   65.735557][ T6364] syzkaller0: entered allmulticast mode
[   65.800660][    T9] usb 8-1: New USB device found: idVendor=15c2, idProduct=0045, bcdDevice=1f.20
[   65.802160][    T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   65.802184][    T9] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64
[   65.802203][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[   65.809626][ T6366] can0: slcan on ttyS3.
[   65.828769][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.828791][    T9] usb 8-1: Product: syz
[   65.828802][    T9] usb 8-1: Manufacturer: syz
[   65.828811][    T9] usb 8-1: SerialNumber: syz
[   65.831470][    T9] usb 8-1: config 0 descriptor??
[   65.832381][ T6325] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   65.952829][ T6365] can0 (unregistered): slcan off ttyS3.
[   65.955729][ T6370] input: syz1 as /devices/virtual/input/input10
[   66.046560][    C0] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71)
[   66.049102][    T9] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input11
[   66.412069][    T9] rc_core: IR keymap rc-imon-pad not found
[   66.412084][    T9] Registered IR keymap rc-empty
[   66.412137][    T9] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[   66.412148][    T9] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[   66.664269][    T9] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0
[   67.904121][ T6392] netlink: 830 bytes leftover after parsing attributes in process `syz.3.109'.
[   67.984499][    T9] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input12
[   68.003811][    T9] imon 8-1:0.0: iMON device (15c2:0045) on usb<8:6> initialized
[   68.008086][    T9] usb 8-1: USB disconnect, device number 6
[   68.372140][   T64] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   68.412062][    T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[   68.522036][   T64] usb 5-1: Using ep0 maxpacket: 32
[   68.523717][   T64] usb 5-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40
[   68.524688][   T64] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[   68.524706][   T64] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   68.524721][   T64] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[   68.524752][   T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   68.524768][   T64] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   68.524785][   T64] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   68.524814][   T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.527094][   T64] usb 5-1: config 0 descriptor??
[   68.572048][    T9] usb 8-1: Using ep0 maxpacket: 8
[   68.572591][    T9] usb 8-1: New USB device found: idVendor=2c42, idProduct=16f8, bcdDevice=f3.33
[   68.573506][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   68.573522][    T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   68.575209][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.575226][    T9] usb 8-1: Product: syz
[   68.575236][    T9] usb 8-1: Manufacturer: syz
[   68.575247][    T9] usb 8-1: SerialNumber: syz
[   68.577177][    T9] usb 8-1: config 0 descriptor??
[   68.671662][ T6398] netlink: 'syz.2.111': attribute type 1 has an invalid length.
[   68.684915][ T6401] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   68.684976][ T6401] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   68.700955][ T6398] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.759569][   T64] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   68.764976][   T64] usb 5-1: USB disconnect, device number 2
[   68.778876][   T64] usblp0: removed
[   68.787106][    T9] usb 8-1: USB disconnect, device number 7
[   68.992110][ T5936] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   69.162041][ T5936] usb 6-1: Using ep0 maxpacket: 8
[   69.162711][ T5936] usb 6-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   69.163597][ T5936] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[   69.163615][ T5936] usb 6-1: config 0 has no interface number 0
[   69.163642][ T5936] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   69.163658][ T5936] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   69.163676][ T5936] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   69.163695][ T5936] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   69.163724][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.165325][ T5936] usb 6-1: config 0 descriptor??
[   69.170391][ T5936] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   69.193521][ T3401] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   69.362076][ T3401] usb 5-1: Using ep0 maxpacket: 32
[   69.363007][ T3401] usb 5-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40
[   69.363949][ T3401] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[   69.363968][ T3401] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   69.363983][ T3401] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[   69.364016][ T3401] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   69.364034][ T3401] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   69.364052][ T3401] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   69.364080][ T3401] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.366445][ T3401] usb 5-1: config 0 descriptor??
[   69.396649][ T6403] rxe_eth0 speed is unknown, defaulting to 1000
[   69.577274][ T3401] usblp 5-1:0.0: usblp1: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   69.842532][ T5937] usb 5-1: USB disconnect, device number 3
[   69.863494][ T5937] usblp1: removed
[   70.241514][ T6422] syzkaller0: entered promiscuous mode
[   70.241530][ T6422] syzkaller0: entered allmulticast mode
[   70.461870][ T6430] syzkaller0: entered promiscuous mode
[   70.461883][ T6430] syzkaller0: entered allmulticast mode
[   70.476256][   T41] usb 6-1: USB disconnect, device number 2
[   70.481582][   T41] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[   70.549017][ T6428] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   70.559505][ T6428] kvm: pic: level sensitive irq not supported
[   70.563994][ T6428] kvm: pic: non byte read
[   70.566183][ T6428] kvm: pic: level sensitive irq not supported
[   70.567200][ T6428] kvm: pic: non byte read
[   70.568140][ T6428] kvm: pic: level sensitive irq not supported
[   70.568512][ T6428] kvm: pic: non byte read
[   70.572742][ T6428] kvm: pic: level sensitive irq not supported
[   70.575342][ T6428] kvm: pic: non byte read
[   70.578533][ T6428] kvm: pic: level sensitive irq not supported
[   70.578907][ T6428] kvm: pic: non byte read
[   70.583424][ T6428] kvm: pic: level sensitive irq not supported
[   70.583925][ T6428] kvm: pic: non byte read
[   70.585010][ T6428] kvm: pic: level sensitive irq not supported
[   70.585480][ T6428] kvm: pic: non byte read
[   70.593180][ T6428] kvm: pic: level sensitive irq not supported
[   70.593934][ T6428] kvm: pic: non byte read
[   70.607960][ T6434] netlink: 'syz.2.120': attribute type 1 has an invalid length.
[   70.609419][ T6428] kvm: pic: level sensitive irq not supported
[   70.609891][ T6428] kvm: pic: non byte read
[   70.622087][ T6434] 8021q: adding VLAN 0 to HW filter on device bond2
[   70.656632][   T42] kauditd_printk_skb: 54 callbacks suppressed
[   70.656644][   T42] audit: type=1326 audit(1793189391.941:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6436 comm="syz.0.119" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17fbc code=0x0
[   70.954763][ T1444] ieee802154 phy0 wpan0: encryption failed: -22
[   70.954800][ T1444] ieee802154 phy1 wpan1: encryption failed: -22
[   72.083709][ T6459] netlink: 'syz.0.125': attribute type 1 has an invalid length.
[   72.105441][ T6459] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.979793][ T6475] syzkaller0: entered promiscuous mode
[   72.979807][ T6475] syzkaller0: entered allmulticast mode
[   73.067263][ T6478] netlink: 64 bytes leftover after parsing attributes in process `syz.3.130'.
[   73.083113][   T64] wacom 0003:056A:003F.0003: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0
[   73.111662][ T6483] netlink: 'syz.2.131': attribute type 1 has an invalid length.
[   73.124132][ T6483] 8021q: adding VLAN 0 to HW filter on device bond3
[   73.251806][ T6491] netlink: 'syz.1.132': attribute type 1 has an invalid length.
[   73.296340][ T6491] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.676158][   T42] audit: type=1326 audit(1793189395.961:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6506 comm="syz.1.135" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd6fbc code=0x0
[   75.818925][ T6527] syzkaller0: entered promiscuous mode
[   75.818945][ T6527] syzkaller0: entered allmulticast mode
[   76.029413][ T6541] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[   76.078842][ T6545] netlink: 'syz.0.142': attribute type 1 has an invalid length.
[   76.116608][ T6531] kvm: pic: level sensitive irq not supported
[   76.117282][ T6531] kvm: pic: non byte read
[   76.131809][ T6545] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.155767][ T6531] kvm: pic: level sensitive irq not supported
[   76.163285][ T6531] kvm: pic: non byte read
[   76.172595][ T6531] kvm: pic: level sensitive irq not supported
[   76.173479][ T6531] kvm: pic: non byte read
[   76.204756][ T6531] kvm: pic: level sensitive irq not supported
[   76.210293][ T6531] kvm: pic: non byte read
[   76.225025][ T6531] kvm: pic: level sensitive irq not supported
[   76.225481][ T6531] kvm: pic: non byte read
[   76.256756][ T6531] kvm: pic: level sensitive irq not supported
[   76.259832][ T6531] kvm: pic: non byte read
[   76.263120][ T6531] kvm: pic: level sensitive irq not supported
[   76.265365][ T6531] kvm: pic: non byte read
[   76.271067][ T6531] kvm: pic: level sensitive irq not supported
[   76.271329][ T6531] kvm: pic: non byte read
[   76.281347][ T6531] kvm: pic: level sensitive irq not supported
[   76.284628][ T6531] kvm: pic: non byte read
[   76.959808][ T6558] netlink: 'syz.2.144': attribute type 1 has an invalid length.
[   76.985109][ T6558] 8021q: adding VLAN 0 to HW filter on device bond4
[   77.603566][ T6567] binfmt_misc: register: failed to install interpreter ./file0
[   77.941879][ T6579] netlink: 'syz.1.156': attribute type 1 has an invalid length.
[   77.961473][   T42] audit: type=1326 audit(1793189399.241:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.3.148" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f94fbc code=0x0
[   77.968469][ T5872] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   78.032208][ T6579] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.077606][ T6580] syzkaller0: entered promiscuous mode
[   78.077619][ T6580] syzkaller0: entered allmulticast mode
[   78.122331][ T5872] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.03
[   78.122827][ T5872] usb 5-1: Dual-Role OTG device on HNP port
[   78.125386][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.132896][ T5872] gspca_main: spca501-2.14.0 probing 0000:0000
[   78.135965][ T5872] gspca_spca501: reg write: error -32
[   78.135972][ T5872] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05
[   78.136006][ T5872] spca501 5-1:1.0: probe with driver spca501 failed with error -22
[   79.672462][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'.
[   79.822101][   T64] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   79.992092][   T64] usb 7-1: Using ep0 maxpacket: 32
[   79.997429][   T64] usb 7-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40
[   79.998648][   T64] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[   79.998662][   T64] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   79.998671][   T64] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[   79.998692][   T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   79.998702][   T64] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   79.998713][   T64] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   79.998731][   T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.999850][   T64] usb 7-1: config 0 descriptor??
[   80.215246][   T64] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   80.218363][   T64] usb 7-1: USB disconnect, device number 4
[   80.222661][   T64] usblp0: removed
[   80.534412][ T6611] netlink: 'syz.3.157': attribute type 1 has an invalid length.
[   80.547938][ T6611] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.618393][ T6614] syz.1.158 (6614) used greatest stack depth: 19208 bytes left
[   80.642076][   T64] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[   80.813589][   T64] usb 7-1: Using ep0 maxpacket: 32
[   80.816020][   T64] usb 7-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40
[   80.817576][   T64] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[   80.817595][   T64] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   80.817611][   T64] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[   80.817680][   T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   80.817698][   T64] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   80.817716][   T64] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   80.817747][   T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.977883][   T64] usb 7-1: config 0 descriptor??
[   81.730060][ T6629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.730341][ T6629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.819771][ T6633] =======================================================
[   81.819771][ T6633] WARNING: The mand mount option has been deprecated and
[   81.819771][ T6633]          and is ignored by this kernel. Remove the mand
[   81.819771][ T6633]          option from the mount to silence this warning.
[   81.819771][ T6633] =======================================================
[   81.824478][ T6633] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   82.026538][ T6633] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[   82.033573][ T6633] overlayfs: failed to look up (tracing) for ino (-66)
[   82.123509][   T64] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   82.125326][   T64] usb 7-1: USB disconnect, device number 5
[   82.127340][   T64] usblp0: removed
[   82.386837][ T6629] jffs2: notice: (6629) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   83.286953][ T6652] netlink: 'syz.3.165': attribute type 1 has an invalid length.
[   83.299050][ T6652] 8021q: adding VLAN 0 to HW filter on device bond1
[   83.352923][ T6651] syz.2.163: page allocation failure: order:1, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1
[   83.353119][ T6651] CPU: 1 UID: 0 PID: 6651 Comm: syz.2.163 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[   83.353158][ T6651] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[   83.353165][ T6651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   83.353175][ T6651] Call Trace:
[   83.353182][ T6651]  <TASK>
[   83.353189][ T6651]  dump_stack_lvl+0x100/0x190
[   83.353223][ T6651]  warn_alloc.cold+0x9e/0xb2
[   83.353244][ T6651]  ? __pfx_warn_alloc+0x10/0x10
[   83.353274][ T6651]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   83.353297][ T6651]  ? __pfx_get_page_from_freelist+0x10/0x10
[   83.353327][ T6651]  __alloc_frozen_pages_noprof+0xaf3/0x3280
[   83.353365][ T6651]  ? do_raw_spin_lock+0x128/0x260
[   83.353387][ T6651]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   83.353415][ T6651]  ? mark_held_locks+0x40/0x70
[   83.353431][ T6651]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   83.353449][ T6651]  ? lockdep_hardirqs_on+0x7d/0x110
[   83.353468][ T6651]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[   83.353493][ T6651]  ? __kasan_kmalloc+0xaa/0xb0
[   83.353510][ T6651]  ? __kmalloc_noprof+0x32f/0x840
[   83.353531][ T6651]  ? comedi_isadma_alloc+0xc6/0x620
[   83.353566][ T6651]  ? pcl812_attach+0x18f5/0x2300
[   83.353602][ T6651]  alloc_pages_node_noprof+0x93/0x200
[   83.353645][ T6651]  ? __pfx_alloc_pages_node_noprof+0x10/0x10
[   83.353675][ T6651]  alloc_pages_exact_nid_noprof+0x32/0xe0
[   83.353700][ T6651]  __dma_direct_alloc_pages.isra.0+0x34e/0x510
[   83.353726][ T6651]  ? dma_alloc_from_dev_coherent+0x2e0/0x570
[   83.353748][ T6651]  dma_direct_alloc+0x3d1/0x8a0
[   83.353776][ T6651]  dma_alloc_attrs+0x1b9/0x3e0
[   83.353800][ T6651]  ? __pfx_dma_alloc_attrs+0x10/0x10
[   83.353823][ T6651]  ? __kmalloc_noprof+0x350/0x840
[   83.353846][ T6651]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[   83.353861][ T6651]  ? dma_direct_supported+0xca/0x220
[   83.353892][ T6651]  comedi_isadma_alloc+0x331/0x620
[   83.353915][ T6651]  ? __pfx_comedi_isadma_alloc+0x10/0x10
[   83.353937][ T6651]  ? request_threaded_irq+0x27b/0x3e0
[   83.353959][ T6651]  pcl812_attach+0x18f5/0x2300
[   83.353989][ T6651]  comedi_device_attach+0x40e/0x6b0
[   83.354022][ T6651]  do_devconfig_ioctl+0x1b3/0x6d0
[   83.354040][ T6651]  ? comedi_unlocked_ioctl+0x180/0x3310
[   83.354062][ T6651]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[   83.354093][ T6651]  ? tomoyo_path_number_perm+0x46d/0x580
[   83.354117][ T6651]  ? kasan_save_stack+0x3f/0x50
[   83.354133][ T6651]  ? kasan_save_stack+0x30/0x50
[   83.354147][ T6651]  ? kasan_save_track+0x14/0x30
[   83.354161][ T6651]  ? kasan_save_free_info+0x3b/0x70
[   83.354187][ T6651]  comedi_unlocked_ioctl+0x860/0x3310
[   83.354217][ T6651]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[   83.354264][ T6651]  ? kasan_quarantine_put+0x104/0x240
[   83.354288][ T6651]  ? lockdep_hardirqs_on+0x7d/0x110
[   83.354308][ T6651]  ? find_held_lock+0x2b/0x80
[   83.354330][ T6651]  ? tomoyo_path_number_perm+0x28f/0x580
[   83.354351][ T6651]  ? tomoyo_path_number_perm+0x28f/0x580
[   83.354378][ T6651]  ? tomoyo_path_number_perm+0x188/0x580
[   83.354407][ T6651]  comedi_compat_ioctl+0x438/0xe20
[   83.354431][ T6651]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[   83.354453][ T6651]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   83.354474][ T6651]  ? do_vfs_ioctl+0x226/0x13e0
[   83.354500][ T6651]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   83.354529][ T6651]  ? __fget_files+0x34/0x3d0
[   83.354548][ T6651]  ? find_held_lock+0x2b/0x80
[   83.354569][ T6651]  ? __fget_files+0x215/0x3d0
[   83.354586][ T6651]  ? hook_file_ioctl_common+0x140/0x440
[   83.354615][ T6651]  ? __fget_files+0x21f/0x3d0
[   83.354637][ T6651]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[   83.354660][ T6651]  __ia32_compat_sys_ioctl+0x2cf/0x360
[   83.354689][ T6651]  __do_fast_syscall_32+0x14b/0x8c0
[   83.354714][ T6651]  do_fast_syscall_32+0x32/0x70
[   83.354734][ T6651]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   83.354756][ T6651] RIP: 0023:0xf73eefbc
[   83.354770][ T6651] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   83.354787][ T6651] RSP: 002b:00000000f4f6e50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[   83.354802][ T6651] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000040946400
[   83.354814][ T6651] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000
[   83.354824][ T6651] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   83.354833][ T6651] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   83.354845][ T6651] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   83.354867][ T6651]  </TASK>
[   83.355166][ T6651] Mem-Info:
[   83.355205][ T6651] active_anon:12444 inactive_anon:83 isolated_anon:0
[   83.355205][ T6651]  active_file:1360 inactive_file:50917 isolated_file:0
[   83.355205][ T6651]  unevictable:0 dirty:491 writeback:0
[   83.355205][ T6651]  slab_reclaimable:7837 slab_unreclaimable:57478
[   83.355205][ T6651]  mapped:32740 shmem:6787 pagetables:1167
[   83.355205][ T6651]  sec_pagetables:298 bounce:0
[   83.355205][ T6651]  kernel_misc_reclaimable:0
[   83.355205][ T6651]  free:27649 free_pcp:14 free_cma:0
[   83.355354][ T6651] Node 0 active_anon:4kB inactive_anon:252kB active_file:208kB inactive_file:728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:8kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8224kB pagetables:1220kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   83.355438][ T6651] Node 0 DMA free:2752kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB
[   83.355619][ T6651] lowmem_reserve[]: 0 256 256 256 256
[   83.355976][ T6651] Node 0 DMA: 184*4kB (U) 28*8kB (U) 20*16kB (U) 12*32kB (U) 5*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2752kB
[   83.356727][ T6651] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   83.356819][ T6651] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   83.356872][ T6651] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   83.356912][ T6651] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   83.357003][ T6651] 59212 total pagecache pages
[   83.357008][ T6651] 126 pages in swap cache
[   83.357043][ T6651] Free swap  = 121564kB
[   83.357048][ T6651] Total swap = 124996kB
[   83.357083][ T6651] 524155 pages RAM
[   83.357088][ T6651] 0 pages HighMem/MovableOnly
[   83.357173][ T6651] 217593 pages reserved
[   83.357178][ T6651] 0 pages cma reserved
[   83.401308][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.412639][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.430786][ T6660] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[   83.430892][ T6660] qnx6: wrong signature (magic) in superblock #1.
[   83.430897][ T6660] qnx6: unable to read the first superblock
[   84.699244][ T6698] netlink: 'syz.0.169': attribute type 1 has an invalid length.
[   84.757567][ T6698] 8021q: adding VLAN 0 to HW filter on device bond3
[   86.022386][   T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[   86.192048][   T34] usb 8-1: Using ep0 maxpacket: 16
[   86.192720][   T34] usb 8-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42
[   86.193630][   T34] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.193647][   T34] usb 8-1: config 0 has no interfaces?
[   86.194751][   T34] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   86.194768][   T34] usb 8-1: Manufacturer: syz
[   86.198016][   T34] usb 8-1: config 0 descriptor??
[   86.392148][ T5937] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[   86.542772][ T5937] usb 7-1: Using ep0 maxpacket: 8
[   86.543205][ T5937] usb 7-1: New USB device found: idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[   86.546545][ T5937] usb 7-1: config 0 has no interfaces?
[   86.548746][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.548758][ T5937] usb 7-1: Product: syz
[   86.548766][ T5937] usb 7-1: Manufacturer: syz
[   86.548772][ T5937] usb 7-1: SerialNumber: syz
[   86.550268][ T5937] usb 7-1: config 0 descriptor??
[   86.720644][ T5936] usb 8-1: USB disconnect, device number 8
[   86.939601][ T6742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.939806][ T6742] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.995389][ T5937] usb 7-1: USB disconnect, device number 6
[   87.527434][ T6758] process 'syz.1.181' launched './file0' with NULL argv: empty string added
[   88.097542][ T6767] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[   88.576478][ T6771] block device autoloading is deprecated and will be removed.
[   88.734728][ T6775] syzkaller0: entered promiscuous mode
[   88.734748][ T6775] syzkaller0: entered allmulticast mode
[   88.939325][ T6778] syzkaller0: entered promiscuous mode
[   88.939346][ T6778] syzkaller0: entered allmulticast mode
[   88.965893][ T6781] nvmet: adding nsid 1 to subsystem testsubsys
[   88.969004][ T6781] nvmet: failed to open block device /dev/nullb1: (-2)
[   89.443756][ T6788] netlink: 'syz.0.188': attribute type 1 has an invalid length.
[   89.524700][ T6788] 8021q: adding VLAN 0 to HW filter on device bond4
[   89.675985][ T6792] sctp_transport_update_pmtu: 50 callbacks suppressed
[   89.676001][ T6792] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   89.676449][ T6792] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   89.676683][ T6792] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   89.676937][ T6792] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   89.679250][ T6792] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   89.679714][ T6792] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   89.680256][ T6792] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   89.680717][ T6792] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   89.681154][ T6792] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   89.716137][ T6792] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[   89.853392][   T41] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   90.023989][   T41] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[   90.026521][   T41] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[   90.026565][   T41] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[   90.043570][   T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.043623][   T41] usb 6-1: Product: syz
[   90.043667][   T41] usb 6-1: Manufacturer: ᰉ
[   90.044122][   T41] usb 6-1: SerialNumber: syz
[   90.342665][  T488] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:03c17aab-f30d-4b82-b340-e31b6080bb36.
[   90.373342][ T6781] nvme nvme0: creating 4 I/O queues.
[   90.397272][ T6781] nvme nvme0: new ctrl: "testsubsys"
[   90.662282][ T6799] netlink: 'syz.2.199': attribute type 1 has an invalid length.
[   90.678659][ T6799] 8021q: adding VLAN 0 to HW filter on device bond5
[   91.023638][   T41] cdc_ncm 6-1:1.0: bind() failure
[   91.025780][   T41] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[   91.025800][   T41] cdc_ncm 6-1:1.1: bind() failure
[   91.029340][   T41] usb 6-1: USB disconnect, device number 3
[   91.067656][ T5936] usb 5-1: USB disconnect, device number 4
[   91.212041][ T5937] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[   91.372094][ T5937] usb 8-1: Using ep0 maxpacket: 32
[   91.373048][ T5937] usb 8-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40
[   91.373881][ T5937] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[   91.373898][ T5937] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   91.373915][ T5937] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[   91.373951][ T5937] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   91.373967][ T5937] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   91.373985][ T5937] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   91.374015][ T5937] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.375679][ T5937] usb 8-1: config 0 descriptor??
[   91.598900][ T5937] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   91.605268][ T5937] usb 8-1: USB disconnect, device number 9
[   91.614275][ T5937] usblp0: removed
[   92.042141][ T5937] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[   92.222074][ T5937] usb 8-1: Using ep0 maxpacket: 32
[   92.223690][ T5937] usb 8-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40
[   92.224859][ T5937] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[   92.224880][ T5937] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   92.224894][ T5937] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[   92.224928][ T5937] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   92.224945][ T5937] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   92.224963][ T5937] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   92.224992][ T5937] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.227774][ T5937] usb 8-1: config 0 descriptor??
[   92.443753][ T5937] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   92.509679][ T6827] syzkaller0: entered promiscuous mode
[   92.509692][ T6827] syzkaller0: entered allmulticast mode
[   92.567529][ T6829] syzkaller0: entered promiscuous mode
[   92.567543][ T6829] syzkaller0: entered allmulticast mode
[   92.607569][ T6831] syzkaller0: entered promiscuous mode
[   92.607582][ T6831] syzkaller0: entered allmulticast mode
[   92.647666][ T5937] usb 8-1: USB disconnect, device number 10
[   92.651137][ T5937] usblp0: removed
[   92.656588][ T6833] netlink: 'syz.1.201': attribute type 1 has an invalid length.
[   92.672115][ T6833] 8021q: adding VLAN 0 to HW filter on device bond3
[   92.733887][ T6836] netlink: 'syz.0.202': attribute type 1 has an invalid length.
[   92.749148][ T6836] 8021q: adding VLAN 0 to HW filter on device bond5
[   93.190373][ T6846] netlink: 'syz.3.203': attribute type 1 has an invalid length.
[   93.210071][ T6846] 8021q: adding VLAN 0 to HW filter on device bond2
[   93.395088][ T6852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.204'.
[   93.670358][ T6859] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[   93.670374][ T6859] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   93.672261][ T6859] vhci_hcd vhci_hcd.0: Device attached
[   93.679177][ T6859] loop8: detected capacity change from 0 to 16384
[   93.863241][ T3401] vhci_hcd vhci_hcd.1: vhci_device speed not set
[   93.922293][ T3401] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[   94.032783][ T6865] loop8: detected capacity change from 16384 to 16383
[   94.233224][ T6870] Driver unsupported XDP return value 0 on prog  (id 18) dev N/A, expect packet loss!
[   94.404091][ T6860] vhci_hcd: connection reset by peer
[   94.410245][ T5829] vhci_hcd vhci_hcd.1: stop threads
[   94.413350][ T5829] vhci_hcd vhci_hcd.1: release socket
[   94.414397][ T5829] vhci_hcd vhci_hcd.1: disconnect device
[   94.520320][ T6872] syzkaller0: entered promiscuous mode
[   94.520341][ T6872] syzkaller0: entered allmulticast mode
[   94.649941][ T6879] syzkaller0: entered promiscuous mode
[   94.649960][ T6879] syzkaller0: entered allmulticast mode
[   94.767431][ T6874] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0)
[   94.968989][ T6883] netlink: 'syz.1.212': attribute type 1 has an invalid length.
[   94.994771][ T6883] 8021q: adding VLAN 0 to HW filter on device bond4
[   95.794174][ T6894] syz.0.221: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1
[   95.794303][ T6894] CPU: 1 UID: 0 PID: 6894 Comm: syz.0.221 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[   95.794332][ T6894] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[   95.794337][ T6894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   95.794343][ T6894] Call Trace:
[   95.794347][ T6894]  <TASK>
[   95.794352][ T6894]  dump_stack_lvl+0x100/0x190
[   95.794372][ T6894]  warn_alloc.cold+0x9e/0xb2
[   95.794385][ T6894]  ? __pfx_warn_alloc+0x10/0x10
[   95.794404][ T6894]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   95.794418][ T6894]  ? __pfx_get_page_from_freelist+0x10/0x10
[   95.794436][ T6894]  __alloc_frozen_pages_noprof+0xaf3/0x3280
[   95.794459][ T6894]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[   95.794478][ T6894]  ? stack_trace_save+0x8e/0xc0
[   95.794491][ T6894]  ? do_raw_write_lock+0x11e/0x260
[   95.794508][ T6894]  ? __kasan_kmalloc+0xaa/0xb0
[   95.794518][ T6894]  ? __kmalloc_noprof+0x32f/0x840
[   95.794532][ T6894]  ? comedi_isadma_alloc+0xc6/0x620
[   95.794544][ T6894]  ? pcl816_attach+0x909/0xb30
[   95.794566][ T6894]  alloc_pages_node_noprof+0x93/0x200
[   95.794580][ T6894]  ? __pfx_alloc_pages_node_noprof+0x10/0x10
[   95.794598][ T6894]  alloc_pages_exact_nid_noprof+0x32/0xe0
[   95.794613][ T6894]  __dma_direct_alloc_pages.isra.0+0x34e/0x510
[   95.794629][ T6894]  ? dma_alloc_from_dev_coherent+0x2e0/0x570
[   95.794642][ T6894]  dma_direct_alloc+0x3d1/0x8a0
[   95.794660][ T6894]  dma_alloc_attrs+0x1b9/0x3e0
[   95.794675][ T6894]  ? __pfx_dma_alloc_attrs+0x10/0x10
[   95.794688][ T6894]  ? __kmalloc_noprof+0x350/0x840
[   95.794704][ T6894]  ? dma_direct_supported+0xca/0x220
[   95.794722][ T6894]  comedi_isadma_alloc+0x331/0x620
[   95.794736][ T6894]  ? __pfx_comedi_isadma_alloc+0x10/0x10
[   95.794749][ T6894]  ? request_threaded_irq+0x27b/0x3e0
[   95.794768][ T6894]  pcl816_attach+0x909/0xb30
[   95.794786][ T6894]  comedi_device_attach+0x40e/0x6b0
[   95.794806][ T6894]  do_devconfig_ioctl+0x1b3/0x6d0
[   95.794817][ T6894]  ? comedi_unlocked_ioctl+0x180/0x3310
[   95.794831][ T6894]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[   95.794851][ T6894]  ? tomoyo_path_number_perm+0x46d/0x580
[   95.794866][ T6894]  ? kasan_save_stack+0x3f/0x50
[   95.794875][ T6894]  ? kasan_save_stack+0x30/0x50
[   95.794884][ T6894]  ? kasan_save_track+0x14/0x30
[   95.794892][ T6894]  ? kasan_save_free_info+0x3b/0x70
[   95.794908][ T6894]  comedi_unlocked_ioctl+0x860/0x3310
[   95.794926][ T6894]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[   95.794965][ T6894]  ? kasan_quarantine_put+0x104/0x240
[   95.794983][ T6894]  ? lockdep_hardirqs_on+0x7d/0x110
[   95.794996][ T6894]  ? find_held_lock+0x2b/0x80
[   95.795010][ T6894]  ? tomoyo_path_number_perm+0x28f/0x580
[   95.795024][ T6894]  ? tomoyo_path_number_perm+0x28f/0x580
[   95.795040][ T6894]  ? tomoyo_path_number_perm+0x188/0x580
[   95.795057][ T6894]  comedi_compat_ioctl+0x438/0xe20
[   95.795072][ T6894]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[   95.795086][ T6894]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   95.795099][ T6894]  ? do_vfs_ioctl+0x226/0x13e0
[   95.795115][ T6894]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   95.795133][ T6894]  ? __fget_files+0x34/0x3d0
[   95.795144][ T6894]  ? find_held_lock+0x2b/0x80
[   95.795157][ T6894]  ? __fget_files+0x215/0x3d0
[   95.795167][ T6894]  ? hook_file_ioctl_common+0x140/0x440
[   95.795185][ T6894]  ? __fget_files+0x21f/0x3d0
[   95.795198][ T6894]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[   95.795211][ T6894]  __ia32_compat_sys_ioctl+0x2cf/0x360
[   95.795229][ T6894]  __do_fast_syscall_32+0x14b/0x8c0
[   95.795241][ T6894]  ? lockdep_hardirqs_on+0x7d/0x110
[   95.795254][ T6894]  do_fast_syscall_32+0x32/0x70
[   95.795266][ T6894]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   95.795280][ T6894] RIP: 0023:0xf7f17fbc
[   95.795289][ T6894] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8
[   95.795299][ T6894] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036
[   95.795309][ T6894] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000040946400
[   95.795316][ T6894] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000
[   95.795322][ T6894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   95.795328][ T6894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.795333][ T6894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   95.795347][ T6894]  </TASK>
[   95.795437][ T6894] Mem-Info:
[   95.795444][ T6894] active_anon:8428 inactive_anon:68 isolated_anon:0
[   95.795444][ T6894]  active_file:1360 inactive_file:37236 isolated_file:0
[   95.795444][ T6894]  unevictable:0 dirty:834 writeback:0
[   95.795444][ T6894]  slab_reclaimable:7999 slab_unreclaimable:58080
[   95.795444][ T6894]  mapped:26925 shmem:2518 pagetables:1191
[   95.795444][ T6894]  sec_pagetables:300 bounce:0
[   95.795444][ T6894]  kernel_misc_reclaimable:0
[   95.795444][ T6894]  free:23839 free_pcp:0 free_cma:0
[   95.795528][ T6894] Node 0 active_anon:0kB inactive_anon:256kB active_file:208kB inactive_file:600kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:8kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8384kB pagetables:1220kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   95.795597][ T6894] Node 0 DMA free:2808kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   95.795651][ T6894] lowmem_reserve[]: 0 256 256 256 256
[   95.795882][ T6894] Node 0 DMA: 186*4kB (U) 28*8kB (U) 19*16kB (U) 14*32kB (U) 5*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 2808kB
[   95.796031][ T6894] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   95.796039][ T6894] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   95.796097][ T6894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   95.796167][ T6894] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   95.796176][ T6894] 41263 total pagecache pages
[   95.796259][ T6894] 156 pages in swap cache
[   95.796264][ T6894] Free swap  = 121452kB
[   95.796267][ T6894] Total swap = 124996kB
[   95.796321][ T6894] 524155 pages RAM
[   95.796325][ T6894] 0 pages HighMem/MovableOnly
[   95.796329][ T6894] 217593 pages reserved
[   95.796380][ T6894] 0 pages cma reserved
[   96.368037][ T6904] netlink: 'syz.3.215': attribute type 1 has an invalid length.
[   96.404276][ T6904] gretap1: entered promiscuous mode
[   96.613770][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'.
[   96.613792][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'.
[   96.613812][ T6909] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22)
[   96.852874][ T5937] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[   97.004394][ T5937] usb 8-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[   97.009620][ T5937] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.009636][ T5937] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.009647][ T5937] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   97.009888][ T5937] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.050583][ T5937] usb 8-1: config 0 descriptor??
[   97.729923][ T5937] usbhid 8-1:0.0: can't add hid device: -71
[   97.730866][ T5937] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[   97.821495][ T5937] usb 8-1: USB disconnect, device number 11
[   97.846257][ T6926] syzkaller0: entered promiscuous mode
[   97.846275][ T6926] syzkaller0: entered allmulticast mode
[   98.498002][ T6938] syzkaller0: entered promiscuous mode
[   98.498022][ T6938] syzkaller0: entered allmulticast mode
[   98.521561][ T6940] netlink: 'syz.1.225': attribute type 1 has an invalid length.
[   98.541239][ T6940] 8021q: adding VLAN 0 to HW filter on device bond5
[   99.022536][ T3401] vhci_hcd vhci_hcd.1: vhci_device speed not set
[   99.171841][ T6948] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[   99.542767][   T42] audit: type=1326 audit(1793189420.831:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   99.542881][   T42] audit: type=1326 audit(1793189420.831:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   99.544049][   T42] audit: type=1326 audit(1793189420.831:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.229" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   99.544089][   T42] audit: type=1326 audit(1793189420.831:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   99.544122][   T42] audit: type=1326 audit(1793189420.831:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   99.547123][   T42] audit: type=1326 audit(1793189420.831:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.229" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   99.547296][   T42] audit: type=1326 audit(1793189420.831:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   99.547501][   T42] audit: type=1326 audit(1793189420.831:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   99.550010][   T42] audit: type=1326 audit(1793189420.831:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.229" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   99.550905][   T42] audit: type=1326 audit(1793189420.831:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.229" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17fbc code=0x7ffc0000
[   99.802320][   T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   99.952608][   T34] usb 5-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00
[  100.317466][   T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.317489][   T34] usb 5-1: Product: syz
[  100.317500][   T34] usb 5-1: Manufacturer: syz
[  100.317510][   T34] usb 5-1: SerialNumber: syz
[  100.524799][ T6963] syzkaller0: entered promiscuous mode
[  100.524850][ T6963] syzkaller0: entered allmulticast mode
[  100.728577][   T34] usb 5-1: USB2VGA dongle found at address 5
[  100.732450][   T34] usb 5
** replaying previous printk message **
[  100.732450][   T34] usb 5-1: Allocated 8 output buffers
[  100.732775][    C3] ==================================================================
[  100.732785][    C3] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0
[  100.732818][    C3] Read of size 1 at addr ffff88805f6624e8 by task kworker/3:0/34
[  100.732831][    C3] 
[  100.732842][    C3] CPU: 3 UID: 0 PID: 34 Comm: kworker/3:0 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  100.732868][    C3] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  100.732874][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  100.732886][    C3] Workqueue: usb_hub_wq hub_event
[  100.732910][    C3] Call Trace:
[  100.732916][    C3]  <IRQ>
[  100.732923][    C3]  dump_stack_lvl+0x100/0x190
[  100.732949][    C3]  print_report+0x13d/0x4b0
[  100.732973][    C3]  ? __virt_addr_valid+0x239/0x430
[  100.732992][    C3]  ? find_endpoint+0x2a3/0x2c0
[  100.733013][    C3]  kasan_report+0xdf/0x1c0
[  100.733032][    C3]  ? find_endpoint+0x2a3/0x2c0
[  100.733058][    C3]  find_endpoint+0x2a3/0x2c0
[  100.733083][    C3]  dummy_timer+0x506/0x3840
[  100.733103][    C3]  ? do_raw_spin_lock+0x128/0x260
[  100.733124][    C3]  ? find_held_lock+0x2b/0x80
[  100.733146][    C3]  ? debug_object_deactivate+0x2e4/0x3b0
[  100.733164][    C3]  ? debug_object_deactivate+0x2e4/0x3b0
[  100.733183][    C3]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  100.733205][    C3]  ? debug_object_deactivate+0x2e4/0x3b0
[  100.733223][    C3]  ? __pfx_debug_object_deactivate+0x10/0x10
[  100.733241][    C3]  ? __pfx_dummy_timer+0x10/0x10
[  100.733258][    C3]  ? __pfx_dummy_timer+0x10/0x10
[  100.733276][    C3]  ? mark_held_locks+0x40/0x70
[  100.733292][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  100.733310][    C3]  ? __pfx_dummy_timer+0x10/0x10
[  100.733327][    C3]  __hrtimer_run_queues+0x448/0x9a0
[  100.733355][    C3]  hrtimer_run_softirq+0x1ca/0x360
[  100.733380][    C3]  handle_softirqs+0x216/0xa20
[  100.733398][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[  100.733414][    C3]  ? _raw_spin_unlock+0x28/0x50
[  100.733429][    C3]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  100.733446][    C3]  __irq_exit_rcu+0x178/0x220
[  100.733461][    C3]  irq_exit_rcu+0x9/0x30
[  100.733476][    C3]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  100.733494][    C3]  </IRQ>
[  100.733500][    C3]  <TASK>
[  100.733506][    C3]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  100.733525][    C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  100.733565][    C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 c6 2a fc f5 48 89 df e8 4e 81 fc f5 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 c5 44 eb f5 65 48 83 3d 84 22 cc 09 00 74 16 5b
[  100.733581][    C3] RSP: 0018:ffffc900005cebb8 EFLAGS: 00000246
[  100.733595][    C3] RAX: 0000000000000006 RBX: ffff88804c3e3818 RCX: 0000000000000040
[  100.733606][    C3] RDX: 0000000000000001 RSI: ffffffff8e61deab RDI: ffffffff8c833b80
[  100.733617][    C3] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000000
[  100.733627][    C3] R10: 0000000000000001 R11: 000000000000774b R12: ffffffff81e4f27d
[  100.733638][    C3] R13: ffff88804c3e3818 R14: 0000000000000282 R15: ffffc900005ced10
[  100.733665][    C3]  ? prepare_to_wait_event+0x8d/0x770
[  100.733694][    C3]  prepare_to_wait_event+0xbe/0x770
[  100.733720][    C3]  sisusb_send_bulk_msg.constprop.0+0xb93/0x1490
[  100.733747][    C3]  ? __pfx_sisusb_send_bulk_msg.constprop.0+0x10/0x10
[  100.733768][    C3]  ? __bus_probe_device+0x60/0x160
[  100.733787][    C3]  ? __pfx_autoremove_wake_function+0x10/0x10
[  100.733812][    C3]  ? dev_printk_emit+0xd2/0x10d
[  100.733837][    C3]  sisusb_init_gfxdevice+0x73c/0x3520
[  100.733862][    C3]  ? __dev_printk+0xe9/0x100
[  100.733886][    C3]  ? __pfx_sisusb_init_gfxdevice+0x10/0x10
[  100.733907][    C3]  ? __pfx__dev_info+0x10/0x10
[  100.733931][    C3]  ? __kasan_kmalloc+0xaa/0xb0
[  100.733947][    C3]  ? __kmalloc_noprof+0x350/0x840
[  100.733970][    C3]  ? lockdep_init_map_type+0x5c/0x250
[  100.733988][    C3]  ? kobject_get+0xbb/0x150
[  100.734011][    C3]  sisusb_probe.cold+0xad5/0xcbd
[  100.734036][    C3]  usb_probe_interface+0x386/0x980
[  100.734063][    C3]  ? __pfx_usb_probe_interface+0x10/0x10
[  100.734087][    C3]  ? kernfs_put+0x3f/0x60
[  100.734109][    C3]  ? sysfs_create_link+0x68/0xc0
[  100.734130][    C3]  ? __pfx_usb_probe_interface+0x10/0x10
[  100.734155][    C3]  really_probe+0x241/0xa60
[  100.734178][    C3]  __driver_probe_device+0x210/0x460
[  100.734205][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  100.734223][    C3]  driver_probe_device+0x4a/0x140
[  100.734245][    C3]  __device_attach_driver+0x1df/0x320
[  100.734269][    C3]  ? __pfx___device_attach_driver+0x10/0x10
[  100.734291][    C3]  bus_for_each_drv+0x159/0x1e0
[  100.734309][    C3]  ? __pfx_bus_for_each_drv+0x10/0x10
[  100.734328][    C3]  ? lockdep_hardirqs_on+0x7d/0x110
[  100.734345][    C3]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  100.734363][    C3]  __device_attach+0x1e4/0x4c0
[  100.734386][    C3]  ? __pfx___device_attach+0x10/0x10
[  100.734408][    C3]  ? do_raw_spin_unlock+0x145/0x1e0
[  100.734421][    C3]  device_initial_probe+0xaf/0xf0
[  100.734436][    C3]  __bus_probe_device+0x60/0x160
[  100.734447][    C3]  device_add+0x121d/0x1970
[  100.734457][    C3]  ? __pfx_device_add+0x10/0x10
[  100.734465][    C3]  ? mark_held_locks+0x40/0x70
[  100.734475][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  100.734486][    C3]  usb_set_configuration+0xd97/0x1dc0
[  100.734503][    C3]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  100.734515][    C3]  usb_generic_driver_probe+0xa1/0xe0
[  100.734527][    C3]  usb_probe_device+0xef/0x400
[  100.734540][    C3]  ? __pfx_usb_probe_device+0x10/0x10
[  100.734554][    C3]  really_probe+0x241/0xa60
[  100.734568][    C3]  __driver_probe_device+0x210/0x460
[  100.734594][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  100.734605][    C3]  driver_probe_device+0x4a/0x140
[  100.734618][    C3]  __device_attach_driver+0x1df/0x320
[  100.734632][    C3]  ? __pfx___device_attach_driver+0x10/0x10
[  100.734646][    C3]  bus_for_each_drv+0x159/0x1e0
[  100.734657][    C3]  ? __pfx_bus_for_each_drv+0x10/0x10
[  100.734668][    C3]  ? lockdep_hardirqs_on+0x7d/0x110
[  100.734678][    C3]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  100.734688][    C3]  __device_attach+0x1e4/0x4c0
[  100.734702][    C3]  ? __pfx___device_attach+0x10/0x10
[  100.734716][    C3]  ? do_raw_spin_unlock+0x145/0x1e0
[  100.734729][    C3]  device_initial_probe+0xaf/0xf0
[  100.734743][    C3]  __bus_probe_device+0x60/0x160
[  100.734754][    C3]  device_add+0x121d/0x1970
[  100.734764][    C3]  ? __pfx_device_add+0x10/0x10
[  100.734772][    C3]  ? add_device_randomness+0xc9/0x110
[  100.734789][    C3]  usb_new_device.part.0+0xcc2/0x1686
[  100.734806][    C3]  ? do_raw_spin_lock+0x128/0x260
[  100.734817][    C3]  ? __pfx_usb_new_device.part.0+0x10/0x10
[  100.734833][    C3]  ? mark_held_locks+0x40/0x70
[  100.734843][    C3]  hub_event.cold+0x1e3/0xe90
[  100.734857][    C3]  ? __pfx_hub_event+0x10/0x10
[  100.734870][    C3]  ? __up_read+0x710/0x980
[  100.734882][    C3]  ? lock_acquire+0x1d1/0x380
[  100.734891][    C3]  ? process_one_work+0xa2c/0x1b10
[  100.734905][    C3]  ? process_one_work+0x906/0x1b10
[  100.734919][    C3]  ? process_one_work+0x906/0x1b10
[  100.734933][    C3]  process_one_work+0xac7/0x1b10
[  100.734949][    C3]  ? __pfx_process_one_work+0x10/0x10
[  100.734962][    C3]  ? lock_acquire+0x1d1/0x380
[  100.734974][    C3]  ? __pfx_hub_event+0x10/0x10
[  100.734987][    C3]  worker_thread+0x5ef/0xe50
[  100.735003][    C3]  ? kthread+0x13a/0x450
[  100.735015][    C3]  ? __pfx_worker_thread+0x10/0x10
[  100.735028][    C3]  kthread+0x373/0x450
[  100.735040][    C3]  ? __pfx_kthread+0x10/0x10
[  100.735053][    C3]  ret_from_fork+0x730/0xd60
[  100.735064][    C3]  ? __pfx_ret_from_fork+0x10/0x10
[  100.735074][    C3]  ? __switch_to+0x800/0x10e0
[  100.735089][    C3]  ? __pfx_kthread+0x10/0x10
[  100.735101][    C3]  ret_from_fork_asm+0x1a/0x30
[  100.735115][    C3]  </TASK>
[  100.735119][    C3] 
[  100.735121][    C3] Allocated by task 6919:
[  100.735127][    C3]  kasan_save_stack+0x30/0x50
[  100.735135][    C3]  kasan_save_track+0x14/0x30
[  100.735143][    C3]  __kasan_kmalloc+0xaa/0xb0
[  100.735151][    C3]  __kmalloc_cache_noprof+0x2f8/0x6d0
[  100.735162][    C3]  kernfs_fop_open+0x347/0x10f0
[  100.735170][    C3]  do_dentry_open+0x674/0x1470
[  100.735179][    C3]  vfs_open_consume+0xcc/0x460
[  100.735190][    C3]  path_openat+0x1547/0x23f0
[  100.735199][    C3]  do_file_open+0x20e/0x430
[  100.735212][    C3]  do_sys_openat2+0x163/0x1d0
[  100.735223][    C3]  __ia32_compat_sys_openat+0x12d/0x210
[  100.735235][    C3]  __do_fast_syscall_32+0x14b/0x8c0
[  100.735246][    C3]  do_fast_syscall_32+0x32/0x70
[  100.735256][    C3]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  100.735268][    C3] 
[  100.735270][    C3] Freed by task 6919:
[  100.735274][    C3]  kasan_save_stack+0x30/0x50
[  100.735282][    C3]  kasan_save_track+0x14/0x30
[  100.735290][    C3]  kasan_save_free_info+0x3b/0x70
[  100.735301][    C3]  __kasan_slab_free+0x5f/0x80
[  100.735309][    C3]  kfree+0x22b/0x6d0
[  100.735319][    C3]  kernfs_fop_release+0x12c/0x1f0
[  100.735327][    C3]  __fput+0x3fb/0xb50
[  100.735336][    C3]  task_work_run+0x150/0x240
[  100.735349][    C3]  exit_to_user_mode_loop+0x1d8/0x700
[  100.735360][    C3]  __do_fast_syscall_32+0x5b0/0x8c0
[  100.735370][    C3]  do_fast_syscall_32+0x32/0x70
[  100.735380][    C3]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  100.735391][    C3] 
[  100.735393][    C3] The buggy address belongs to the object at ffff88805f662400
[  100.735393][    C3]  which belongs to the cache kmalloc-512 of size 512
[  100.735401][    C3] The buggy address is located 232 bytes inside of
[  100.735401][    C3]  freed 512-byte region [ffff88805f662400, ffff88805f662600)
[  100.735411][    C3] 
[  100.735413][    C3] The buggy address belongs to the physical page:
[  100.735417][    C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805f661400 pfn:0x5f660
[  100.735426][    C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  100.735434][    C3] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff)
[  100.735444][    C3] page_type: f5(slab)
[  100.735453][    C3] raw: 04fff00000000240 ffff88801d442c80 ffffea0001599610 ffffea000112c010
[  100.735462][    C3] raw: ffff88805f661400 000000000010000b 00000000f5000000 0000000000000000
[  100.735470][    C3] head: 04fff00000000240 ffff88801d442c80 ffffea0001599610 ffffea000112c010
[  100.735478][    C3] head: ffff88805f661400 000000000010000b 00000000f5000000 0000000000000000
[  100.735487][    C3] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  100.735495][    C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  100.735500][    C3] page dumped because: kasan: bad access detected
[  100.735505][    C3] page_owner tracks the page as allocated
[  100.735508][    C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6570, tgid 6569 (syz.1.147), ts 77710532223
[  100.735524][    C3]  post_alloc_hook+0xfd/0x120
[  100.735535][    C3]  get_page_from_freelist+0x1113/0x35e0
[  100.735547][    C3]  __alloc_frozen_pages_noprof+0x2bd/0x3280
[  100.735559][    C3]  new_slab+0xb1/0x6d0
[  100.735570][    C3]  refill_objects+0xe3/0x410
[  100.735582][    C3]  __pcs_replace_empty_main+0x35e/0x650
[  100.735593][    C3]  __kmalloc_cache_noprof+0x4ef/0x6d0
[  100.735604][    C3]  snd_mixer_oss_build_test+0x7a/0x380
[  100.735613][    C3]  snd_mixer_oss_build_test_all+0x5d0/0x6e0
[  100.735622][    C3]  snd_mixer_oss_build_input+0x139/0xd50
[  100.735631][    C3]  snd_mixer_oss_notify_handler+0x4e5/0xa10
[  100.735640][    C3]  snd_card_register+0x2bd/0x780
[  100.735652][    C3]  f_midi2_bind+0x1198/0x2770
[  100.735664][    C3]  usb_add_function+0x219/0x890
[  100.735678][    C3]  configfs_composite_bind+0xd83/0x1960
[  100.735691][    C3]  gadget_bind_driver+0x28c/0xbf0
[  100.735701][    C3] page last free pid 6227 tgid 6226 ts 58031050564 stack trace:
[  100.735707][    C3]  __free_frozen_pages+0x7b4/0x1110
[  100.735717][    C3]  qlist_free_all+0x47/0xf0
[  100.735730][    C3]  kasan_quarantine_reduce+0x1a0/0x1f0
[  100.735743][    C3]  __kasan_slab_alloc+0x69/0x90
[  100.735752][    C3]  kmem_cache_alloc_noprof+0x269/0x6a0
[  100.735765][    C3]  ptlock_alloc+0x1f/0x70
[  100.735774][    C3]  pte_alloc_one+0x82/0x3d0
[  100.735787][    C3]  do_fault+0x960/0x1890
[  100.735800][    C3]  __handle_mm_fault+0x150b/0x2f60
[  100.735809][    C3]  handle_mm_fault+0x363/0xa20
[  100.735818][    C3]  do_user_addr_fault+0x745/0x12f0
[  100.735829][    C3]  exc_page_fault+0x6f/0xd0
[  100.735838][    C3]  asm_exc_page_fault+0x26/0x30
[  100.735847][    C3] 
[  100.735849][    C3] Memory state around the buggy address:
[  100.735853][    C3]  ffff88805f662380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  100.735860][    C3]  ffff88805f662400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  100.735866][    C3] >ffff88805f662480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  100.735871][    C3]                                                           ^
[  100.735876][    C3]  ffff88805f662500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  100.735882][    C3]  ffff88805f662580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  100.735887][    C3] ==================================================================
[  100.735894][    C3] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  101.213677][    C3] CPU: 3 UID: 0 PID: 34 Comm: kworker/3:0 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  101.217682][    C3] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  101.220069][    C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[  101.223812][    C3] Workqueue: usb_hub_wq hub_event
[  101.225621][    C3] Call Trace:
[  101.226889][    C3]  <IRQ>
[  101.227987][    C3]  dump_stack_lvl+0x100/0x190
[  101.229769][    C3]  vpanic+0x2dc/0x6f8
[  101.231304][    C3]  panic+0xd1/0xe0
[  101.232709][    C3]  ? __pfx_panic+0x10/0x10
[  101.234363][    C3]  ? end_report.part.0+0x23/0x90
[  101.236232][    C3]  ? rcu_is_watching+0x13/0xc0
[  101.238081][    C3]  ? end_report.part.0+0x23/0x90
[  101.239994][    C3]  check_panic_on_warn.cold+0x19/0x34
[  101.242062][    C3]  end_report.part.0+0x3a/0x90
[  101.243903][    C3]  kasan_report.cold+0xe/0x18
[  101.245754][    C3]  ? find_endpoint+0x2a3/0x2c0
[  101.247547][    C3]  find_endpoint+0x2a3/0x2c0
[  101.249350][    C3]  dummy_timer+0x506/0x3840
[  101.250751][    C3]  ? do_raw_spin_lock+0x128/0x260
[  101.252275][    C3]  ? find_held_lock+0x2b/0x80
[  101.253729][    C3]  ? debug_object_deactivate+0x2e4/0x3b0
[  101.255461][    C3]  ? debug_object_deactivate+0x2e4/0x3b0
[  101.257217][    C3]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  101.259200][    C3]  ? debug_object_deactivate+0x2e4/0x3b0
[  101.260932][    C3]  ? __pfx_debug_object_deactivate+0x10/0x10
[  101.262746][    C3]  ? __pfx_dummy_timer+0x10/0x10
[  101.264246][    C3]  ? __pfx_dummy_timer+0x10/0x10
[  101.265749][    C3]  ? mark_held_locks+0x40/0x70
[  101.267190][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  101.269412][    C3]  ? __pfx_dummy_timer+0x10/0x10
[  101.271423][    C3]  __hrtimer_run_queues+0x448/0x9a0
[  101.273564][    C3]  hrtimer_run_softirq+0x1ca/0x360
[  101.275447][    C3]  handle_softirqs+0x216/0xa20
[  101.277306][    C3]  ? __pfx_handle_softirqs+0x10/0x10
[  101.279091][    C3]  ? _raw_spin_unlock+0x28/0x50
[  101.280806][    C3]  ? __hrtimer_rearm_deferred+0x9b/0x7b0
[  101.282753][    C3]  __irq_exit_rcu+0x178/0x220
[  101.284157][    C3]  irq_exit_rcu+0x9/0x30
[  101.285444][    C3]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  101.287154][    C3]  </IRQ>
[  101.288074][    C3]  <TASK>
[  101.288990][    C3]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  101.290812][    C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[  101.292798][    C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 c6 2a fc f5 48 89 df e8 4e 81 fc f5 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 c5 44 eb f5 65 48 83 3d 84 22 cc 09 00 74 16 5b
[  101.298185][    C3] RSP: 0018:ffffc900005cebb8 EFLAGS: 00000246
[  101.300023][    C3] RAX: 0000000000000006 RBX: ffff88804c3e3818 RCX: 0000000000000040
[  101.302448][    C3] RDX: 0000000000000001 RSI: ffffffff8e61deab RDI: ffffffff8c833b80
[  101.304755][    C3] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000000
[  101.307102][    C3] R10: 0000000000000001 R11: 000000000000774b R12: ffffffff81e4f27d
[  101.309522][    C3] R13: ffff88804c3e3818 R14: 0000000000000282 R15: ffffc900005ced10
[  101.311998][    C3]  ? prepare_to_wait_event+0x8d/0x770
[  101.313774][    C3]  prepare_to_wait_event+0xbe/0x770
[  101.315377][    C3]  sisusb_send_bulk_msg.constprop.0+0xb93/0x1490
[  101.317277][    C3]  ? __pfx_sisusb_send_bulk_msg.constprop.0+0x10/0x10
[  101.319276][    C3]  ? __bus_probe_device+0x60/0x160
[  101.320818][    C3]  ? __pfx_autoremove_wake_function+0x10/0x10
[  101.322759][    C3]  ? dev_printk_emit+0xd2/0x10d
[  101.324268][    C3]  sisusb_init_gfxdevice+0x73c/0x3520
[  101.326056][    C3]  ? __dev_printk+0xe9/0x100
[  101.327816][    C3]  ? __pfx_sisusb_init_gfxdevice+0x10/0x10
[  101.329968][    C3]  ? __pfx__dev_info+0x10/0x10
[  101.331794][    C3]  ? __kasan_kmalloc+0xaa/0xb0
[  101.333600][    C3]  ? __kmalloc_noprof+0x350/0x840
[  101.335506][    C3]  ? lockdep_init_map_type+0x5c/0x250
[  101.337573][    C3]  ? kobject_get+0xbb/0x150
[  101.339196][    C3]  sisusb_probe.cold+0xad5/0xcbd
[  101.341065][    C3]  usb_probe_interface+0x386/0x980
[  101.342988][    C3]  ? __pfx_usb_probe_interface+0x10/0x10
[  101.345056][    C3]  ? kernfs_put+0x3f/0x60
[  101.346680][    C3]  ? sysfs_create_link+0x68/0xc0
[  101.348156][    C3]  ? __pfx_usb_probe_interface+0x10/0x10
[  101.349870][    C3]  really_probe+0x241/0xa60
[  101.351345][    C3]  __driver_probe_device+0x210/0x460
[  101.352946][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  101.354716][    C3]  driver_probe_device+0x4a/0x140
[  101.356249][    C3]  __device_attach_driver+0x1df/0x320
[  101.357860][    C3]  ? __pfx___device_attach_driver+0x10/0x10
[  101.359612][    C3]  bus_for_each_drv+0x159/0x1e0
[  101.361071][    C3]  ? __pfx_bus_for_each_drv+0x10/0x10
[  101.362672][    C3]  ? lockdep_hardirqs_on+0x7d/0x110
[  101.364262][    C3]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  101.366223][    C3]  __device_attach+0x1e4/0x4c0
[  101.367702][    C3]  ? __pfx___device_attach+0x10/0x10
[  101.369319][    C3]  ? do_raw_spin_unlock+0x145/0x1e0
[  101.370909][    C3]  device_initial_probe+0xaf/0xf0
[  101.372491][    C3]  __bus_probe_device+0x60/0x160
[  101.373988][    C3]  device_add+0x121d/0x1970
[  101.375333][    C3]  ? __pfx_device_add+0x10/0x10
[  101.376767][    C3]  ? mark_held_locks+0x40/0x70
[  101.378226][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  101.379944][    C3]  usb_set_configuration+0xd97/0x1dc0
[  101.381561][    C3]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  101.383594][    C3]  usb_generic_driver_probe+0xa1/0xe0
[  101.385207][    C3]  usb_probe_device+0xef/0x400
[  101.386681][    C3]  ? __pfx_usb_probe_device+0x10/0x10
[  101.388312][    C3]  really_probe+0x241/0xa60
[  101.389731][    C3]  __driver_probe_device+0x210/0x460
[  101.391336][    C3]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  101.393333][    C3]  driver_probe_device+0x4a/0x140
[  101.394939][    C3]  __device_attach_driver+0x1df/0x320
[  101.396560][    C3]  ? __pfx___device_attach_driver+0x10/0x10
[  101.398385][    C3]  bus_for_each_drv+0x159/0x1e0
[  101.399854][    C3]  ? __pfx_bus_for_each_drv+0x10/0x10
[  101.401440][    C3]  ? lockdep_hardirqs_on+0x7d/0x110
[  101.403077][    C3]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  101.404837][    C3]  __device_attach+0x1e4/0x4c0
[  101.406306][    C3]  ? __pfx___device_attach+0x10/0x10
[  101.407881][    C3]  ? do_raw_spin_unlock+0x145/0x1e0
[  101.409434][    C3]  device_initial_probe+0xaf/0xf0
[  101.410960][    C3]  __bus_probe_device+0x60/0x160
[  101.412460][    C3]  device_add+0x121d/0x1970
[  101.413831][    C3]  ? __pfx_device_add+0x10/0x10
[  101.415182][    C3]  ? add_device_randomness+0xc9/0x110
[  101.416805][    C3]  usb_new_device.part.0+0xcc2/0x1686
[  101.418482][    C3]  ? do_raw_spin_lock+0x128/0x260
[  101.420056][    C3]  ? __pfx_usb_new_device.part.0+0x10/0x10
[  101.422269][    C3]  ? mark_held_locks+0x40/0x70
[  101.423955][    C3]  hub_event.cold+0x1e3/0xe90
[  101.425440][    C3]  ? __pfx_hub_event+0x10/0x10
[  101.427225][    C3]  ? __up_read+0x710/0x980
[  101.428934][    C3]  ? lock_acquire+0x1d1/0x380
[  101.430792][    C3]  ? process_one_work+0xa2c/0x1b10
[  101.432579][    C3]  ? process_one_work+0x906/0x1b10
[  101.434181][    C3]  ? process_one_work+0x906/0x1b10
[  101.435751][    C3]  process_one_work+0xac7/0x1b10
[  101.437270][    C3]  ? __pfx_process_one_work+0x10/0x10
[  101.438902][    C3]  ? lock_acquire+0x1d1/0x380
[  101.440326][    C3]  ? __pfx_hub_event+0x10/0x10
[  101.441851][    C3]  worker_thread+0x5ef/0xe50
[  101.443267][    C3]  ? kthread+0x13a/0x450
[  101.444543][    C3]  ? __pfx_worker_thread+0x10/0x10
[  101.446111][    C3]  kthread+0x373/0x450
[  101.447314][    C3]  ? __pfx_kthread+0x10/0x10
[  101.448781][    C3]  ret_from_fork+0x730/0xd60
[  101.450196][    C3]  ? __pfx_ret_from_fork+0x10/0x10
[  101.451793][    C3]  ? __switch_to+0x800/0x10e0
[  101.453221][    C3]  ? __pfx_kthread+0x10/0x10
[  101.454629][    C3]  ret_from_fork_asm+0x1a/0x30
[  101.456095][    C3]  </TASK>
[  101.457974][    C3] Kernel Offset: disabled
[  101.459287][    C3] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:10:22  Registers:
info registers vcpu 0

CPU#0
RAX=00000000001fa653 RBX=ffffffff8fc91540 RCX=ffffffff8be9a325 RDX=0000000000000001
RSI=ffffffff8e61deab RDI=ffffffff8c833b80 RBP=fffffbfff1f922a8 RSP=ffffffff8fc07cf0
R8 =0000000000000001 R9 =ffffed10055c6825 R10=ffff88802ae3412b R11=0000000000000001
R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f80fa2 R15=dffffc0000000000
RIP=ffffffff8be987bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888095294000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7496288 CR3=0000000056181000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001f400000000 0000000600000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=fffff52000ccbe6a RCX=0000000000000000 RDX=ffff888027ada580
RSI=ffffc9000665f370 RDI=ffffffff81f78220 RBP=0000000000000dc0 RSP=ffffc9000665f348
R8 =0000000000000004 R9 =0000000000000000 R10=ffff888077411000 R11=0000000000000001
R12=0000000000000001 R13=0000000000000fa0 R14=ffff888077410000 R15=00000000ffffffff
RIP=ffffffff81b1e204 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888095394000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=0000000080000040 CR3=000000004ee0a000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000000 RBX=0000000000000001 RCX=ffff88801ebf2580 RDX=0000000000000001
RSI=ffffffff81ebba13 RDI=0000000000000001 RBP=ffffc900006afda8 RSP=ffffc900006af950
R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000003 R11=7372656666757375
R12=ffffffff90e01820 R13=ffffc900006afda8 R14=0000000000000000 R15=ffffc900006afdb4
RIP=ffffffff820d9bed RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888095494000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7f4a190 CR3=00000000562ef000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff85bee3c5 RDI=ffffffff9cf25f60 RBP=ffffffff9cf25f20 RSP=ffffc900005e8438
R8 =000000000000001f R9 =0000000000000000 R10=0000000000000003 R11=20666f2064616552
R12=0000000000000000 R13=000000000000005b R14=0000000000000000 R15=ffffc900005e8750
RIP=ffffffff85bee3ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888095594000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f7188e10 CR3=000000004bfa9000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000fce00000 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000000004104
Opmask04=00000000ffffff7f Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558f14fc7dd0 0000558f0a293040
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558f14fc7dd0
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558f14f985e0
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000558f14f84680
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabff7f1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabff752c80
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 737365636f727020 756c6c2520716573 006e6f6974697472 6170006b636f6c62
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d352f35627375 2f302e6463685f79 6d6d75642f6d726f 6674616c702f7365
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030616776627375 7369732f6373696d 6273752f302e313a 312d352f312d352f
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 356273752f302e64 63685f796d6d7564 2f6d726f6674616c 702f736563697665
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabff7f2160 00007fabff7f2160 0000000000001431 0000000000000030
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3032
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4631653534303070 3243353176333030 30623a7475706e69 3d5341494c41444f
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000