last executing test programs: 9.002642353s ago: executing program 3 (id=1763): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x20040000) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000005400000008000300", @ANYRES32=r4, @ANYBLOB="0a00090200980b0f6fd0"], 0x28}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0) socket$inet6(0xa, 0x3, 0x1) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0x4004662b, &(0x7f00000003c0)=0x1) 8.802001989s ago: executing program 0 (id=1764): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x32, 0x800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) recvfrom(r0, &(0x7f0000000580)=""/211, 0xd3, 0x10000, &(0x7f0000000680)=@sco, 0x80) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x300, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, &(0x7f0000000880)=ANY=[@ANYBLOB="9d95000104000000152bfeffffffffff3d86bca5bf287d387efe11f655165f4ecd3eabe59617747f3c58a2406913355f212242428fb94ece26927c359b2d77ff86c865dd0382ef93eaa420615a04f6dfd02cf29806abd7a8ea28a49460d3a8707dd3ff9e0372c200d61846525edce6be59f848ecffa31f6204831c3f72f3b57d48e85df235e7c3069cebf40cdf97922183285635e5769e2c2a2d2590250feba269c23fc283367521104f9ba0b393248e51ac42829674665410bd9e7de1c2b7516df4"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r1, r1, r1], &(0x7f0000000400)=[{0x4, 0x2, 0xd}, {0x1, 0x2, 0xe, 0x1}], 0x10, 0x7848}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, 0x0, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) 8.673687302s ago: executing program 3 (id=1765): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000200)='./file0\x00', 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002f00), 0x0, 0x100, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f00000003c0), 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, 0xffffffffffffffff, 0x6}}, 0x48) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000409000/0x4000)=nil) shmat(r7, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmdt(0x0) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 7.111474041s ago: executing program 0 (id=1768): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0x325, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001340)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f000001a380)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x1c}, 0x60) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 6.168180411s ago: executing program 2 (id=1769): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x4020) msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x32, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) recvfrom(r0, &(0x7f0000000580)=""/211, 0xd3, 0x10000, &(0x7f0000000680)=@sco, 0x80) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x300, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, &(0x7f0000000880)=ANY=[@ANYBLOB="9d95000104000000152bfeffffffffff3d86bca5bf287d387efe11f655165f4ecd3eabe59617747f3c58a2406913355f212242428fb94ece26927c359b2d77ff86c865dd0382ef93eaa420615a04f6dfd02cf29806abd7a8ea28a49460d3a8707dd3ff9e0372c200d61846525edce6be59f848ecffa31f6204831c3f72f3b57d48e85df235e7c3069cebf40cdf97922183285635e5769e2c2a2d2590250feba269c23fc283367521104f9ba0b393248e51ac42829674665410bd9e7de1c2b7516df4"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r1, r1, r1], &(0x7f0000000400)=[{0x4, 0x2, 0xd}, {0x1, 0x2, 0xe, 0x1}], 0x10, 0x7848}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, 0x0, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) 5.864647127s ago: executing program 0 (id=1770): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0x325, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000001340)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f000001a380)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x1c}, 0x60) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 5.66963837s ago: executing program 3 (id=1771): mount$tmpfs(0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@nr_inodes={'nr_inodes', 0x3d, [0x30]}}]}) r0 = socket$inet(0x2, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000780), 0x318, 0x0) recvmmsg(r2, &(0x7f00000007c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000000800)) madvise(&(0x7f000074b000/0x1000)=nil, 0x1000, 0xb) setpriority(0x2, 0x0, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x6}, 0x1c) connect$inet6(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmmsg$inet(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x4001) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x1, &(0x7f0000000580)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000280)={@multicast2, @loopback, @empty}, 0xc) 5.536584265s ago: executing program 1 (id=1772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4811}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x600, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000000)='fuseblk\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000f80)="900000001c001f4d154a817193278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0b21a1c69d33e02cdba86c9d2896c013bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) fcntl$setownex(r3, 0xf, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r4, 0x8b32, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a40000000b060102000000000000e2ff0600000084000880100007800c10028008000140ac1414aa0c00078008001c4000000008100007800c00184000000000000000021c0007801800168014000240ff01"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) r7 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000240)={0x6c, r5, 0x1, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x20000050) 5.493793568s ago: executing program 1 (id=1773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4811}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x600, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000000)='fuseblk\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000f80)="900000001c001f4d154a817193278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0b21a1c69d33e02cdba86c9d2896c013bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0", 0x8e, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) fcntl$setownex(r3, 0xf, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r4, 0x8b32, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a40000000b060102000000000000e2ff0600000084000880100007800c10028008000140ac1414aa0c00078008001c4000000008100007800c00184000000000000000021c0007801800168014000240ff01"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) r7 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000240)={0x6c, r5, 0x1, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x20000050) 5.272104785s ago: executing program 2 (id=1774): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r2 = epoll_create1(0x80000) r3 = eventfd2(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000b80)) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000080)={0x3e8, 0x0, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r7, 0x1b, &(0x7f0000000100)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_enter(r7, 0x0, 0x3f, 0x9, &(0x7f0000000180), 0x18) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)={0xc0002014}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r8, 0x1a491abc7f6457d5, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c090}, 0x8000) socket$tipc(0x1e, 0x2, 0x0) 5.266422406s ago: executing program 1 (id=1782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4811}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x600, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000000)='fuseblk\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000f80)="900000001c001f4d154a817193278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0b21a1c69d33e02cdba86c9d2896c013bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) fcntl$setownex(r3, 0xf, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r4, 0x8b32, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) r7 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000240)={0x6c, r5, 0x1, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x20000050) 5.013243929s ago: executing program 1 (id=1775): r0 = socket$inet(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000007280)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x7, 0xffff}, {}, {0xf, 0x6}}}, 0x24}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'sed\x00', 0x1d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) r8 = socket$inet(0x2, 0x1, 0x6) connect(r8, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) socket$netlink(0x10, 0x3, 0x0) 4.336046496s ago: executing program 1 (id=1776): r0 = socket(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x4020) msgsnd(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x32, 0x800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) recvfrom(r0, &(0x7f0000000580)=""/211, 0xd3, 0x10000, &(0x7f0000000680)=@sco, 0x80) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x81) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x300, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x2, &(0x7f0000000880)=ANY=[@ANYBLOB="9d95000104000000152bfeffffffffff3d86bca5bf287d387efe11f655165f4ecd3eabe59617747f3c58a2406913355f212242428fb94ece26927c359b2d77ff86c865dd0382ef93eaa420615a04f6dfd02cf29806abd7a8ea28a49460d3a8707dd3ff9e0372c200d61846525edce6be59f848ecffa31f6204831c3f72f3b57d48e85df235e7c3069cebf40cdf97922183285635e5769e2c2a2d2590250feba269c23fc283367521104f9ba0b393248e51ac42829674665410bd9e7de1c2b7516df4"], &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r1, r1, r1], &(0x7f0000000400)=[{0x4, 0x2, 0xd}, {0x1, 0x2, 0xe, 0x1}], 0x10, 0x7848}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, 0x0, 0x25, 0x4, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) 4.073110819s ago: executing program 2 (id=1777): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2da, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3d}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x10, 0x0, 0x4}, {0x10, 0x0, 0x8}]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x324, 0x2d4, 0x0, 0xffffffff, 0x0, 0x0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa4, 0x48}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010101, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1b, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @port=0x4e20, @icmp_id=0x65}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth0_to_batadv\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3, 0x4}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @gre_key=0xe63e}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @multicast2, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x380) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f0000000980)={0x5, 0x1d7, 0x6e, 0x0, 0x4}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000010010000"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) sendfile(r0, r5, 0x0, 0x1000000201002) 4.071846444s ago: executing program 0 (id=1778): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'geneve1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@dellink={0x34, 0x11, 0x1, 0x470bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x301}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000005400000008000300", @ANYRES32=r4, @ANYBLOB="0a00090200980b0f6fd0"], 0x28}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0) socket$inet6(0xa, 0x3, 0x1) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f00000003c0)=0x1) 3.690683446s ago: executing program 0 (id=1779): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@setlink={0x20, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x41014, 0x54c1f}}, 0x20}}, 0x20040000) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@dellink={0x34, 0x11, 0x1, 0x470bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x301}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000005400000008000300", @ANYRES32=r4, @ANYBLOB="0a00090200980b0f6fd0"], 0x28}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0) socket$inet6(0xa, 0x3, 0x1) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0x4004662b, &(0x7f00000003c0)=0x1) 2.616622998s ago: executing program 0 (id=1780): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000200)='./file0\x00', 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000002f00), 0x0, 0x100, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f00000003c0), 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, 0xffffffffffffffff, 0x6}}, 0x48) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000409000/0x4000)=nil) shmat(r7, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmdt(0x0) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 2.616076169s ago: executing program 3 (id=1781): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000002540)=""/4091, 0xffffffffffffff24, 0x202d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x3c, r3, 0x1, 0x1, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10001}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}]}, 0x3c}}, 0x24008084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@bridge_newneigh={0x28, 0x1d, 0xc01, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x80, 0x32}, [@NDA_LLADDR={0xa, 0x2, @random}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000580)={0x2d0, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0x84, 0x3, "f104818918e48dc723f2e0bfcc4d2925efed433e2a8592e6e41a2a638908b39c0b5b5f72dc6c1b5dfd6c25fd71046168a7483c1981eb517ebe81d4257cd2ccb077c0a2b8f7866735e9c88b4033772d8828d69317ca84a4efee586b577f7f3116b75ae7427549e525edf3fe232d3c7b4b5b093a32bda655a6d02f08b468d3fb41"}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_WOL_SOPASS={0x60, 0x3, "5109d4403edc3f9443bd443b353cea407c649ccc5892e4c0a11057222227afd9d68ad18e8aad1c37620347d8daf04386623a92ab9e911639f07328b636a2851f15ca2ef559bb21470baa078440bf4a08a33af2c2e08c30b0bb0c42ca"}, @ETHTOOL_A_WOL_MODES={0x1c4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0x44, 0x5, "aeacf88368547540401e468a25428c138757b48eb394b316bbb1ff7f76f1b6a7fab945a6a9611bf4283b21c0d62798742fa1bec86cc68af51a758d89fd57973e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0x101, 0x5, "4ec47e7946c05e604dcab6eed169ea22c60130fa043cce63d0e82629ab4929c6633f739b6dbdc7464ee2212921eaa1fcb9b074882e1038981503ddd2e0f0f9b310b6e481152fff13ab6e924bc1268ddd8574d9f3b2db36a032c2a73877f86bf285b6766e866a323e34d8a7a481261511919c77cd64cb4047f18166b6250cdfc3901930ea18cbbdd0d31977ceb4cba0b869d4e2929f125b56ed058d614b9cfabf88156fae2c17443c0c3609a0b72ff1ad00553f8e41e5893d3a9b26cec651b3dffe0d6a3f6f53ff95dc404f5d252cd6eff1a0c1e1b18a1e81e0666e9ef1df0f105a63f042e40c605a12d315ff9d1f33bdf5379ebdf29247e646feafe3a7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_VALUE={0x53, 0x4, "f7ea94f474fd86b3432c37ba2a4f5ed682704dd2bb0e6d800368107a07c79c35fec52b81fbd052419b6dd6909479200109e606c552f60a8bc72d6633b51aae8184869ce0d0231c413a063e8e355339"}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x20000001}, 0x24044844) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r8, &(0x7f0000002300)=""/4103, 0x1007, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r8) sendto(r8, &(0x7f0000000440)="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", 0x122, 0x8000, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x1ac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x22f0}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x10}]}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xfbfb}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xfb, 0x7, 0x1, 0x0, "80172fcea6bf0081d4605e4a6adc9f9a5409442425a26c961fed9e863cd2a0302515ce8ae1cde7929b414a2659196e16374887f7c7d9108fe454d9dbf2f4f0a5f2da5c41953c606717cdcc6f7f68be6cb508a3b21f5ba0cd86517b9d0223650c9db0e2e61e96245f44d8e5cf7364b1f8d6ca00e81a33fca19b7e67541c456034749cbb29b2a6d640186f94083a002c3580d42ff100c50662d66a1c8ce20d2fca58b03ff26d17db7acd20debb654914cd4916d58c05f6a20b825ab5821677132347fa72dc8132cbc20274a9aee345282b3ae8138e22fb0ecdfb11ac8bb33c39e83a4d57589aa55f9e85cef75a46c52ef60a64629c65bcf7"}]}], {0x14}}, 0x20c}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41400000000000000010000000c000000", 0xfe60) 2.458475277s ago: executing program 2 (id=1783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4811}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x600, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000000)='fuseblk\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000f80)="900000001c001f4d154a817193278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0b21a1c69d33e02cdba86c9d2896c013bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b3", 0x8f, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) fcntl$setownex(r3, 0xf, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r4, 0x8b32, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a40000000b060102000000000000e2ff0600000084000880100007800c10028008000140ac1414aa0c00078008001c4000000008100007800c00184000000000000000021c0007801800168014000240ff01"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) r7 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000240)={0x6c, r5, 0x1, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x20000050) 2.372912285s ago: executing program 3 (id=1784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4811}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x600, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000000)='fuseblk\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000f80)="900000001c001f4d154a817193278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0b21a1c69d33e02cdba86c9d2896c013bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) fcntl$setownex(r3, 0xf, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r4, 0x8b32, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) r7 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000240)={0x6c, r5, 0x1, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x20000050) 2.346417526s ago: executing program 1 (id=1785): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000480)={0xa, {"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", 0x1000}}, 0x1006) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000014c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x7e, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000001640)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2) close(0xffffffffffffffff) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001680), 0x181a01, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f00000016c0)={0xfffffffffffffc00, 0x4}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001700)='./binderfs/binder0\x00', 0x0, 0x0) poll(0x0, 0x0, 0x2) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f0000001840)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000001940)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f00000019c0)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) 2.221730028s ago: executing program 2 (id=1786): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f0000000040)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/console\x00', 0x1, 0x0) write$eventfd(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000200)={0x0, 0x30b5, 0x1000, 0x8000002, 0x158}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r6) read(r0, &(0x7f00000009c0)=""/170, 0xaa) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) socket(0x2b, 0x1, 0x1) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000400)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000004c0)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x38, r9, 0x701, 0x10, 0xfffffffe, {0x2e}, [{{@pci={{0x8}, {0xfffffffffffffe83}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) r11 = dup(r8) syz_ublk_setup_queues(r11, r7, &(0x7f0000000600)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2001, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x5f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x4000, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000900)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) r12 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x7a7350fb00ab6963}, 0x20) ioctl$CDROMREADAUDIO(r12, 0x5392, &(0x7f00000000c0)={@lba=0xfffffffe, 0x1, 0x0, 0x0}) 2.045140437s ago: executing program 3 (id=1787): syz_usb_connect(0x6, 0x371, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) read$usbfs(0xffffffffffffffff, &(0x7f0000000600)=""/234, 0xea) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='ping', 0x4, 0x0, 0x0, 0x0) openat$sndtimer(0xffffff9c, 0x0, 0x20480) write(r2, &(0x7f00000000c0)='1\x00', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e3", 0x48) 0s ago: executing program 2 (id=1788): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0x325, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) sched_setaffinity(r4, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f000001a380)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x1c}, 0x60) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) kernel console output (not intermixed with test programs): dropped ** ** 216 printk messages dropped ** ** 209 printk messages dropped ** ** 207 printk messages dropped ** ** 222 printk messages dropped ** ** 180 printk messages dropped ** ** 214 printk messages dropped ** ** 194 printk messages dropped ** ** 189 printk messages dropped ** ** 183 printk messages dropped ** ** 201 printk messages dropped ** ** 208 printk messages dropped ** ** 195 printk messages dropped ** ** 176 printk messages dropped ** ** 161 printk messages dropped ** ** 109 printk messages dropped ** ** 156 printk messages dropped ** ** 113 printk messages dropped ** ** 135 printk messages dropped ** ** 121 printk messages dropped ** ** 136 printk messages dropped ** ** 128 printk messages dropped ** ** 120 printk messages dropped ** ** 37 printk messages dropped ** ** 66 printk messages dropped ** ** 106 printk messages dropped ** ** 133 printk messages dropped ** ** 124 printk messages dropped ** ** 159 printk messages dropped ** ** 117 printk messages dropped ** ** 115 printk messages dropped ** ** 128 printk messages dropped ** ** 87 printk messages dropped ** ** 140 printk messages dropped ** ** 118 printk messages dropped ** ** 133 printk messages dropped ** ** 127 printk messages dropped ** ** 139 printk messages dropped ** ** 121 printk messages dropped ** ** 126 printk messages dropped ** ** 134 printk messages dropped ** ** 113 printk messages dropped ** ** 139 printk messages dropped ** ** 113 printk messages dropped ** ** 227 printk messages dropped ** ** 132 printk messages dropped ** ** 129 printk messages dropped ** ** 110 printk messages dropped ** ** 131 printk messages dropped ** ** 118 printk messages dropped ** ** 143 printk messages dropped ** ** 148 printk messages dropped ** ** 159 printk messages dropped ** ** 141 printk messages dropped ** ** 161 printk messages dropped ** ** 182 printk messages dropped ** ** 161 printk messages dropped ** ** 169 printk messages dropped ** ** 213 printk messages dropped ** ** 274 printk messages dropped ** ** 188 printk messages dropped ** ** 175 printk messages dropped ** ** 231 printk messages dropped ** ** 224 printk messages dropped ** ** 105 printk messages dropped ** ** 129 printk messages dropped ** ** 264 printk messages dropped ** ** 179 printk messages dropped ** ** 225 printk messages dropped ** ** 223 printk messages dropped ** ** 201 printk messages dropped ** ** 222 printk messages dropped ** ** 204 printk messages dropped ** ** 261 printk messages dropped ** ** 230 printk messages dropped ** ** 209 printk messages dropped ** ** 225 printk messages dropped ** ** 225 printk messages dropped ** ** 214 printk messages dropped ** ** 201 printk messages dropped ** ** 237 printk messages dropped ** ** 248 printk messages dropped ** ** 210 printk messages dropped ** ** 216 printk messages dropped ** ** 216 printk messages dropped ** ** 244 printk messages dropped ** ** 239 printk messages dropped ** ** 223 printk messages dropped ** ** 201 printk messages dropped ** ** 210 printk messages dropped ** ** 178 printk messages dropped ** ** 489 printk messages dropped ** ** 188 printk messages dropped ** ** 142 printk messages dropped ** ** 1 printk messages dropped ** ** 193 printk messages dropped ** ** 238 printk messages dropped ** ** 238 printk messages dropped ** ** 234 printk messages dropped ** ** 247 printk messages dropped ** ** 193 printk messages dropped ** ** 221 printk messages dropped ** ** 264 printk messages dropped ** ** 231 printk messages dropped ** ** 230 printk messages dropped ** ** 231 printk messages dropped ** ** 232 printk messages dropped ** ** 265 printk messages dropped ** ** 237 printk messages dropped ** ** 232 printk messages dropped ** ** 226 printk messages dropped ** ** 236 printk messages dropped ** ** 249 printk messages dropped ** ** 289 printk messages dropped ** ** 246 printk messages dropped ** ** 243 printk messages dropped ** ** 337 printk messages dropped ** ** 244 printk messages dropped ** ** 240 printk messages dropped ** ** 233 printk messages dropped ** ** 240 printk messages dropped ** ** 258 printk messages dropped ** ** 275 printk messages dropped ** ** 243 printk messages dropped ** ** 172 printk messages dropped ** ** 25 printk messages dropped ** ** 232 printk messages dropped ** ** 191 printk messages dropped ** ** 248 printk messages dropped ** ** 212 printk messages dropped ** ** 250 printk messages dropped ** ** 215 printk messages dropped ** ** 221 printk messages dropped ** ** 218 printk messages dropped ** ** 141 printk messages dropped ** ** 215 printk messages dropped ** ** 206 printk messages dropped ** ** 208 printk messages dropped ** ** 167 printk messages dropped ** ** 170 printk messages dropped ** ** 151 printk messages dropped ** ** 153 printk messages dropped ** ** 147 printk messages dropped ** ** 71 printk messages dropped ** [ 510.008544][ T42] audit: type=1800 audit(1793130902.722:1243): pid=10939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1063" name="bus" dev="ramfs" ino=28638 res=0 errno=-4 [ 510.056358][T10966] pim6reg: entered allmulticast mode [ 510.150828][T10964] pim6reg: left allmulticast mode [ 511.199613][ C3] net_ratelimit: 76 callbacks suppressed [ 512.634482][T10968] pim6reg: entered allmulticast mode [ 512.635086][T10969] pim6reg: left allmulticast mode [ 512.916084][T10983] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1078'. [ 512.922484][T10983] tipc: Enabling of bearer rejected, already enabled ** 613 printk messages dropped ** ** 25 printk messages dropped ** ** 2 printk messages dropped ** ** 18 printk messages dropped ** ** 13 printk messages dropped ** ** 25 printk messages dropped ** ** 24 printk messages dropped ** ** 16 printk messages dropped ** ** 15 printk messages dropped ** ** 16 printk messages dropped ** ** 10 printk messages dropped ** ** 25 printk messages dropped ** ** 18 printk messages dropped ** ** 639 printk messages dropped ** [ 514.215610][ T5148] Bluetooth: hci3: unexpected event 0x01 length: 16 > 1 [ 514.513035][T11006] bridge0: port 4(syz_tun) entered blocking state [ 514.513082][T11006] bridge0: port 4(syz_tun) entered listening state [ 514.513222][T11006] bridge0: port 3(netdevsim0) entered blocking state [ 514.513268][T11006] bridge0: port 3(netdevsim0) entered listening state [ 514.513397][T11006] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.513446][T11006] bridge0: port 2(bridge_slave_1) entered listening state [ 514.513641][T11006] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.513714][T11006] bridge0: port 1(bridge_slave_0) entered listening state ** 674 printk messages dropped ** ** 102 printk messages dropped ** ** 76 printk messages dropped ** ** 83 printk messages dropped ** ** 83 printk messages dropped ** ** 88 printk messages dropped ** ** 10 printk messages dropped ** ** 3 printk messages dropped ** [ 516.479650][ C3] net_ratelimit: 3389 callbacks suppressed [ 516.801038][T11006] macvlan0: left promiscuous mode [ 516.826095][T11006] vlan2: left allmulticast mode [ 516.826110][T11006] bridge1: left allmulticast mode [ 516.840228][T11006] gretap1: left promiscuous mode [ 516.841604][T11006] 8021q: adding VLAN 0 to HW filter on device bond2 [ 516.848925][T11006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.868170][T11012] pim6reg: entered allmulticast mode [ 516.870715][T11014] pim6reg: left allmulticast mode [ 516.887999][T11022] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1087'. [ 516.921134][T11025] tipc: Enabling of bearer rejected, already enabled [ 517.445988][T11038] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 518.069859][ T9849] ip6_tunnel: M xmit: Local address not yet configured! [ 518.070037][ T9849] ip6_tunnel: M xmit: Local address not yet configured! [ 518.139341][ T24] ip6_tunnel: M xmit: Local address not yet configured! [ 518.389780][ T50] ip6_tunnel: M xmit: Local address not yet configured! [ 518.669988][ T50] ip6_tunnel: M xmit: Local address not yet configured! [ 518.953243][T11056] Invalid ELF header magic: != ELF [ 519.848288][T11064] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1097'. [ 519.900779][T11064] tipc: Enabling of bearer rejected, already enabled [ 520.596519][T11076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1101'. [ 520.949763][T11080] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1102'. [ 520.959010][T11080] tipc: Enabling of bearer rejected, already enabled [ 521.522601][ T7594] net_ratelimit: 584 callbacks suppressed [ 522.399892][ C2] ip6_tunnel: M xmit: Local address not yet configured! [ 522.822759][T11100] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1106'. [ 522.825774][T11100] tipc: Enabling of bearer rejected, already enabled [ 523.463475][T11111] Invalid ELF header magic: != ELF [ 523.492610][T11111] overlay: Unknown parameter '/' [ 523.774096][ T41] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 524.197456][T11115] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1111'. [ 524.217455][T11115] tipc: Enabling of bearer rejected, already enabled [ 524.272863][ T41] usb 8-1: unable to get BOS descriptor or descriptor too short [ 524.272886][ T41] usb 8-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=0.40 [ 524.275304][ T41] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 524.275319][ T41] usb 8-1: can't read configurations, error -71 [ 524.365814][T11119] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1112'. [ 524.561010][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1114'. [ 524.567507][T11125] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1115'. [ 524.577741][T11125] tipc: Enabling of bearer rejected, already enabled [ 526.649639][ C3] net_ratelimit: 267 callbacks suppressed [ 526.664634][T11142] pim6reg: entered allmulticast mode [ 526.745091][T11142] pim6reg: left allmulticast mode [ 527.144535][T11149] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1121'. [ 527.172661][T11149] tipc: Enabling of bearer rejected, already enabled [ 527.204177][T11151] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1123'. [ 527.209372][T11153] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1122'. [ 527.290751][T11157] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1124'. [ 527.294315][T11157] tipc: Enabling of bearer rejected, already enabled [ 527.339461][T11162] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1125'. [ 527.358489][T11162] tipc: Enabling of bearer rejected, already enabled [ 529.184984][T11182] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1132'. [ 529.190162][T11182] tipc: Enabling of bearer rejected, already enabled [ 529.784086][T11190] pim6reg: entered allmulticast mode [ 529.784524][T11194] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1135'. [ 529.790170][T11192] tipc: Enabling of bearer rejected, already enabled [ 529.894266][T11197] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1136'. [ 529.952199][T11189] pim6reg: left allmulticast mode [ 530.025769][T11199] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1137'. [ 530.034646][T11199] tipc: Enabling of bearer rejected, already enabled [ 530.238154][T11204] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1139'. [ 530.369687][ T42] audit: type=1326 audit(1793130923.032:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11200 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 530.369735][ T42] audit: type=1326 audit(1793130923.032:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11200 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 530.369771][ T42] audit: type=1326 audit(1793130923.042:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11200 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 530.369807][ T42] audit: type=1326 audit(1793130923.052:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11200 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 530.369848][ T42] audit: type=1326 audit(1793130923.052:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11200 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 530.369885][ T42] audit: type=1326 audit(1793130923.052:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11200 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 530.369921][ T42] audit: type=1326 audit(1793130923.052:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11200 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 530.369957][ T42] audit: type=1326 audit(1793130923.052:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11200 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 530.369994][ T42] audit: type=1326 audit(1793130923.052:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11200 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 530.370028][ T42] audit: type=1326 audit(1793130923.062:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11200 comm="syz.3.1138" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 531.067819][T11213] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1141'. [ 531.078438][T11213] tipc: Enabling of bearer rejected, already enabled [ 531.129652][ C2] ip6_tunnel: M xmit: Local address not yet configured! [ 531.690205][ C3] net_ratelimit: 6798 callbacks suppressed [ 531.832688][T11215] all (unregistering): Released all slaves [ 532.294687][T11227] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1144'. [ 532.342068][T11232] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1146'. [ 532.438770][T11227] tipc: Enabling of bearer rejected, already enabled [ 532.505055][T11236] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1147'. [ 532.510952][T11236] tipc: Enabling of bearer rejected, already enabled ** 2636 printk messages dropped ** [ 533.281874][T11243] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1150'. [ 533.285357][T11243] tipc: Enabling of bearer rejected, already enabled ** 3266 printk messages dropped ** [ 533.863076][T11255] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 535.011180][T11271] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1156'. [ 535.016716][T11272] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1155'. [ 535.016769][T11271] tipc: Enabling of bearer rejected, already enabled [ 535.030021][T11272] tipc: Enabling of bearer rejected, already enabled [ 535.082769][T11276] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1160'. [ 535.088093][T11276] tipc: Enabling of bearer rejected, already enabled [ 535.148186][T11278] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1159'. [ 535.289288][T11286] jffs2: notice: (11286) jffs2_build_xattr_subsystem: complete building xattr subsystem, 10 of xdatum (10 unchecked, 0 orphan) and 20 of xref (0 dead, 0 orphan) found. [ 535.383747][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 535.384308][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 535.392132][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 535.581872][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1165'. [ 536.320294][T11307] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1168'. [ 536.320854][T11306] x_tables: ip_tables: TCPMSS.0 target: invalid size 8 (kernel) != (user) 16 [ 536.325902][T11307] tipc: Enabling of bearer rejected, already enabled [ 536.346591][T11309] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1169'. [ 536.351266][T11309] tipc: Enabling of bearer rejected, already enabled [ 536.700948][T11316] Invalid ELF header magic: != ELF [ 536.710271][T11316] net_ratelimit: 313 callbacks suppressed [ 537.515212][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 537.515231][ T42] audit: type=1326 audit(1793130930.232:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 537.515798][ T42] audit: type=1326 audit(1793130930.232:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 537.569653][ T42] audit: type=1326 audit(1793130930.232:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 537.569688][ T42] audit: type=1326 audit(1793130930.242:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 537.569708][ T42] audit: type=1326 audit(1793130930.242:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 537.569728][ T42] audit: type=1326 audit(1793130930.242:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 537.569748][ T42] audit: type=1326 audit(1793130930.242:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 537.569767][ T42] audit: type=1326 audit(1793130930.242:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 537.569789][ T42] audit: type=1326 audit(1793130930.242:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 537.569810][ T42] audit: type=1326 audit(1793130930.242:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 537.813995][T11336] tipc: Enabling of bearer rejected, already enabled [ 538.010423][T11338] tipc: Enabling of bearer rejected, already enabled [ 538.481280][ T6801] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 538.859876][ T6801] usb 8-1: Using ep0 maxpacket: 8 [ 538.862249][ T6801] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 538.863105][ T6801] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 538.863117][ T6801] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 538.863129][ T6801] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 538.863140][ T6801] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.863169][ T6801] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.909639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 538.989225][T11364] tipc: Enabling of bearer rejected, already enabled [ 539.191946][ T6801] usb 8-1: GET_CAPABILITIES returned 0 [ 539.192015][ T6801] usbtmc 8-1:16.0: can't read capabilities [ 539.340100][T11369] tipc: Enabling of bearer rejected, already enabled [ 539.457320][ T50] usb 8-1: USB disconnect, device number 17 [ 539.545420][T11372] pim6reg: entered allmulticast mode [ 539.736697][T11372] pim6reg: left allmulticast mode [ 540.105041][T11380] IPVS: ip_vs_add_dest(): server weight less than zero [ 540.466283][T11385] __nla_validate_parse: 6 callbacks suppressed [ 540.466304][T11385] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1194'. [ 540.998883][T11401] 9pnet_virtio: no channels available for device syz [ 541.042342][T11398] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1198'. [ 541.108664][T11398] tipc: Enabling of bearer rejected, already enabled ** 550 printk messages dropped ** [ 542.000109][ T7592] net_ratelimit: 80 callbacks suppressed [ 542.463786][T11410] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1200'. [ 542.485521][T11410] tipc: Enabling of bearer rejected, already enabled [ 543.278533][T11426] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 543.278560][T11426] overlayfs: failed to set xattr on upper [ 543.278564][T11426] overlayfs: ...falling back to redirect_dir=nofollow. [ 543.278569][T11426] overlayfs: ...falling back to metacopy=off. [ 543.278573][T11426] overlayfs: ...falling back to index=off. [ 543.278577][T11426] overlayfs: ...falling back to uuid=null. [ 543.483813][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 543.483824][ T42] audit: type=1326 audit(1793130936.102:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 543.483862][ T42] audit: type=1326 audit(1793130936.102:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 543.483894][ T42] audit: type=1326 audit(1793130936.102:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 543.483925][ T42] audit: type=1326 audit(1793130936.112:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 543.483958][ T42] audit: type=1326 audit(1793130936.112:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 543.483992][ T42] audit: type=1326 audit(1793130936.112:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 543.484026][ T42] audit: type=1326 audit(1793130936.112:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 543.484061][ T42] audit: type=1326 audit(1793130936.112:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 543.484093][ T42] audit: type=1326 audit(1793130936.112:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 543.484123][ T42] audit: type=1326 audit(1793130936.112:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11428 comm="syz.2.1204" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 543.876065][T11433] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1205'. [ 544.039711][T11435] 9pnet_virtio: no channels available for device syz [ 544.112535][T11439] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1207'. [ 544.122563][T11439] tipc: Enabling of bearer rejected, already enabled [ 544.169047][T11443] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1209'. [ 544.173087][T11443] tipc: Enabling of bearer rejected, already enabled [ 544.379660][ T50] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 544.580807][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 544.581040][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 544.581233][ C1] bridge0: port 3(netdevsim0) entered learning state [ 544.581418][ C1] bridge0: port 4(syz_tun) entered learning state [ 545.722994][ T50] usb 7-1: unable to get BOS descriptor or descriptor too short [ 545.723016][ T50] usb 7-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=0.40 [ 545.727232][ T50] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 545.727252][ T50] usb 7-1: can't read configurations, error -71 [ 546.894928][T11461] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1215'. [ 547.080562][ T5893] net_ratelimit: 67 callbacks suppressed [ 547.180927][T11463] pim6reg: entered allmulticast mode [ 547.263998][T11465] pim6reg: left allmulticast mode [ 548.132543][T11477] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1218'. [ 548.160749][T11477] tipc: Enabling of bearer rejected, already enabled [ 548.399792][ C2] ip6_tunnel: M xmit: Local address not yet configured! [ 549.079082][T11490] pim6reg: entered allmulticast mode [ 549.160589][T11490] pim6reg: left allmulticast mode [ 551.691135][T11508] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1229'. [ 551.921817][T11510] IPVS: ip_vs_add_dest(): server weight less than zero [ 552.169639][ C0] net_ratelimit: 48 callbacks suppressed [ 552.692275][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 552.692290][ T42] audit: type=1326 audit(1793130945.412:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 552.692888][ T42] audit: type=1326 audit(1793130945.412:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 552.708474][ T42] audit: type=1326 audit(1793130945.412:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1230" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 552.708517][ T42] audit: type=1326 audit(1793130945.422:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 552.708550][ T42] audit: type=1326 audit(1793130945.422:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 552.708569][ T42] audit: type=1326 audit(1793130945.422:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1230" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 552.708589][ T42] audit: type=1326 audit(1793130945.422:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 552.708608][ T42] audit: type=1326 audit(1793130945.422:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 552.708628][ T42] audit: type=1326 audit(1793130945.422:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1230" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 552.724319][ T42] audit: type=1326 audit(1793130945.422:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11515 comm="syz.1.1230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 555.671156][T11544] pim6reg: entered allmulticast mode ** 139 printk messages dropped ** [ 555.884606][T11544] pim6reg: left allmulticast mode ** 49 printk messages dropped ** ** 180 printk messages dropped ** ** 196 printk messages dropped ** ** 407 printk messages dropped ** ** 134 printk messages dropped ** ** 232 printk messages dropped ** ** 164 printk messages dropped ** ** 146 printk messages dropped ** ** 112 printk messages dropped ** ** 150 printk messages dropped ** ** 615 printk messages dropped ** ** 1520 printk messages dropped ** ** 276 printk messages dropped ** ** 143 printk messages dropped ** ** 174 printk messages dropped ** ** 177 printk messages dropped ** ** 397 printk messages dropped ** ** 2997 printk messages dropped ** ** 121 printk messages dropped ** ** 1173 printk messages dropped ** [ 556.875134][T11555] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1239'. [ 556.931382][T11555] tipc: Enabling of bearer rejected, already enabled [ 557.519585][ C0] net_ratelimit: 67 callbacks suppressed [ 558.805273][T11571] 9pnet_virtio: no channels available for device syz [ 560.398906][T11578] pim6reg: entered allmulticast mode [ 560.496590][T11578] pim6reg: left allmulticast mode [ 561.506653][T11581] jffs2: notice: (11581) jffs2_build_xattr_subsystem: complete building xattr subsystem, 11 of xdatum (10 unchecked, 0 orphan) and 21 of xref (0 dead, 0 orphan) found. [ 561.620586][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1245'. [ 561.621435][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1245'. [ 561.626002][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1245'. [ 561.995301][ T5148] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 562.206631][T11601] pim6reg: entered allmulticast mode [ 562.491324][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.203543][ T29] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 563.369615][ C3] net_ratelimit: 70 callbacks suppressed [ 564.022547][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 564.022586][ T29] usb 5-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=0.40 [ 564.023711][ T29] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 564.023739][ T29] usb 5-1: can't read configurations, error -71 [ 566.230263][T11608] syz.1.1250 (11608) used greatest stack depth: 16952 bytes left [ 566.402539][T11615] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1261'. [ 566.407485][T11615] tipc: Enabling of bearer rejected, already enabled [ 566.657192][T11623] netlink: 'syz.1.1254': attribute type 10 has an invalid length. [ 566.959436][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1253'. [ 567.170950][T11620] bridge0: port 3(netdevsim0) entered blocking state [ 567.171128][T11620] bridge0: port 3(netdevsim0) entered disabled state [ 567.172898][T11620] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 567.187143][T11620] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 567.443590][T11621] vlan3: entered promiscuous mode [ 567.443608][T11621] hsr0: entered promiscuous mode [ 567.443932][T11621] vlan3: entered allmulticast mode [ 567.443945][T11621] hsr0: entered allmulticast mode [ 567.443956][T11621] hsr_slave_0: entered allmulticast mode [ 567.443972][T11621] hsr_slave_1: entered allmulticast mode [ 567.456904][T11625] hsr_slave_0: left promiscuous mode [ 567.457896][T11625] hsr_slave_1: left promiscuous mode [ 568.260966][T11634] 9pnet_virtio: no channels available for device syz ** 1075 printk messages dropped ** ** 5110 printk messages dropped ** [ 568.559587][ C0] net_ratelimit: 64 callbacks suppressed [ 569.135480][T11647] pim6reg: entered allmulticast mode [ 569.146173][T11648] pim6reg: left allmulticast mode [ 570.406341][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 570.406355][ T42] audit: type=1326 audit(1793130963.122:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.1.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 570.407069][ T42] audit: type=1326 audit(1793130963.122:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.1.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 570.415116][ T42] audit: type=1326 audit(1793130963.132:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.1.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 570.415158][ T42] audit: type=1326 audit(1793130963.132:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.1.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 570.415191][ T42] audit: type=1326 audit(1793130963.132:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.1.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 570.416658][ T42] audit: type=1326 audit(1793130963.132:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.1.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 570.420504][ T42] audit: type=1326 audit(1793130963.132:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.1.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 570.420545][ T42] audit: type=1326 audit(1793130963.132:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.1.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 570.423380][ T42] audit: type=1326 audit(1793130963.142:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.1.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 570.425251][ T42] audit: type=1326 audit(1793130963.142:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11653 comm="syz.1.1263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 570.622329][T11645] gretap1: left promiscuous mode [ 570.627582][T11645] 8021q: adding VLAN 0 to HW filter on device eth0 [ 570.631269][T11645] 8021q: adding VLAN 0 to HW filter on device eth1 [ 570.635808][T11645] 8021q: adding VLAN 0 to HW filter on device eth2 [ 570.642990][T11645] 8021q: adding VLAN 0 to HW filter on device eth3 [ 570.772137][T11667] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1265'. [ 570.775336][T11667] tipc: Enabling of bearer rejected, already enabled [ 571.128782][ T5874] ip6_tunnel: M xmit: Local address not yet configured! [ 571.128976][ T5874] ip6_tunnel: M xmit: Local address not yet configured! [ 571.149815][ T1039] ip6_tunnel: M xmit: Local address not yet configured! [ 571.385162][T11680] IPVS: ip_vs_add_dest(): server weight less than zero [ 571.920132][ T1039] ip6_tunnel: M xmit: Local address not yet configured! [ 572.091594][ T1039] ip6_tunnel: M xmit: Local address not yet configured! [ 572.121409][T11685] 9pnet_virtio: no channels available for device syz [ 573.693240][T11700] pim6reg: left allmulticast mode [ 573.949177][ T7361] net_ratelimit: 174 callbacks suppressed [ 574.048382][T11710] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1274'. [ 574.054708][T11710] tipc: Enabling of bearer rejected, already enabled [ 574.170471][T11712] Invalid ELF header magic: != ELF [ 574.649618][ C1] bridge0: port 4(syz_tun) entered forwarding state [ 574.649627][ C1] bridge0: topology change detected, propagating [ 574.649802][ C1] bridge0: port 3(netdevsim0) entered forwarding state [ 574.649809][ C1] bridge0: topology change detected, propagating [ 574.649896][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.649905][ C1] bridge0: topology change detected, propagating [ 574.650128][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.650143][ C1] bridge0: topology change detected, propagating [ 575.153512][T11717] xfrm0: entered allmulticast mode [ 575.180896][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'. [ 575.209703][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 576.482928][ T9849] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.489727][ T9849] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.489884][ T9849] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.489983][ T9849] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.490029][ T9849] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.490048][ T9849] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.490214][ T9849] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.490306][ T9849] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.640045][T11750] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1282'. [ 576.652918][T11750] tipc: Enabling of bearer rejected, already enabled [ 577.130083][T11758] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1285'. [ 577.133531][T11758] tipc: Enabling of bearer rejected, already enabled [ 577.267801][T11764] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1286'. [ 579.199658][ C0] net_ratelimit: 556 callbacks suppressed [ 579.667767][T11774] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 579.667780][T11774] block device autoloading is deprecated and will be removed. [ 580.267683][T11787] Invalid ELF header magic: != ELF [ 580.988655][T11791] Invalid ELF header magic: != ELF [ 581.009476][T11791] overlay: Unknown parameter '/' [ 581.260032][T11793] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1292'. [ 581.274798][T11793] tipc: Enabling of bearer rejected, already enabled [ 581.724197][T11800] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1294'. [ 581.727659][T11800] tipc: Enabling of bearer rejected, already enabled [ 582.068058][T11804] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1295'. [ 582.220391][T11808] pim6reg: entered allmulticast mode [ 582.247748][T11811] tipc: Enabling of bearer rejected, already enabled [ 582.319670][ C2] ip6_tunnel: M xmit: Local address not yet configured! [ 582.915304][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1300'. [ 582.969021][T11817] ipvlan2: entered allmulticast mode [ 582.969034][T11817] virt_wifi0: entered allmulticast mode [ 582.984116][T11817] batman_adv: batadv0: Adding interface: ipvlan2 [ 582.984131][T11817] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.984229][T11817] batman_adv: batadv0: Interface activated: ipvlan2 [ 583.599648][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 583.822906][T11824] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1302'. [ 583.830964][T11824] tipc: Enabling of bearer rejected, already enabled [ 584.215932][T11828] Invalid ELF header magic: != ELF [ 584.222112][T11828] net_ratelimit: 89 callbacks suppressed [ 584.707605][T11830] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1305'. [ 584.716250][T11830] tipc: Enabling of bearer rejected, already enabled [ 585.015064][T11842] tipc: Enabling of bearer rejected, already enabled [ 585.398442][T11847] pim6reg: entered allmulticast mode [ 585.810559][T11725] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 585.966387][T11725] usb 5-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 585.989181][T11725] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 585.989299][T11725] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 585.989896][T11725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.248175][T11725] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 586.404652][T11725] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 586.789457][T11852] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1310'. [ 586.991307][T11840] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 586.992337][T11840] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 586.998248][T11840] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 587.156384][T11840] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 587.261014][T11839] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 587.262153][ T6801] usb 5-1: USB disconnect, device number 26 [ 587.268513][ T6801] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 587.269793][ T6801] spcp8x5 5-1:1.0: device disconnected [ 587.507190][T11862] pim6reg: entered allmulticast mode [ 588.153601][T11867] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 588.153601][T11867] [ 588.153737][T11867] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 588.153817][T11867] CIFS: Attempting to mount //172.20.20.170/share [ 588.162575][T11865] NILFS (nullb0): couldn't find nilfs on the device [ 588.166631][T11865] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 588.360890][T11875] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1316'. [ 588.385460][T11875] tipc: Enabling of bearer rejected, already enabled [ 588.475627][T11879] tipc: Enabling of bearer rejected, already enabled [ 588.556176][T11881] tipc: Enabling of bearer rejected, already enabled [ 588.655338][ T5148] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 588.999721][T11867] CIFS: VFS: cifs_mount failed w/return code = -112 [ 589.279641][ C3] net_ratelimit: 78 callbacks suppressed [ 590.194772][T11887] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.195010][T11887] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.452373][T11896] tipc: Enabling of bearer rejected, already enabled [ 590.455805][T11725] syz1: Port: 1 Link DOWN [ 590.469830][ T5830] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.469856][ T5830] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.469874][ T5830] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.469891][ T5830] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.555919][T11900] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1323'. [ 590.566809][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 590.566824][ T42] audit: type=1326 audit(1793130983.282:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11901 comm="syz.2.1324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 590.566991][ T42] audit: type=1326 audit(1793130983.282:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11901 comm="syz.2.1324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 590.568168][ T42] audit: type=1326 audit(1793130983.282:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11901 comm="syz.2.1324" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 590.568327][ T42] audit: type=1326 audit(1793130983.282:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11901 comm="syz.2.1324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 590.568478][ T42] audit: type=1326 audit(1793130983.282:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11901 comm="syz.2.1324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 590.568889][ T42] audit: type=1326 audit(1793130983.282:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11901 comm="syz.2.1324" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 590.572138][ T42] audit: type=1326 audit(1793130983.292:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11901 comm="syz.2.1324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 590.573363][ T42] audit: type=1326 audit(1793130983.292:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11901 comm="syz.2.1324" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73aefbc code=0x7ffc0000 [ 590.579727][ T42] audit: type=1326 audit(1793130983.292:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11901 comm="syz.2.1324" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71077ab code=0x7ffc0000 [ 590.580730][ T42] audit: type=1326 audit(1793130983.292:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11901 comm="syz.2.1324" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71077ab code=0x7ffc0000 [ 591.137257][T11907] tipc: Enabling of bearer rejected, already enabled [ 591.254629][T11913] FAULT_INJECTION: forcing a failure. [ 591.254629][T11913] name failslab, interval 1, probability 0, space 0, times 0 [ 591.254651][T11913] CPU: 2 UID: 0 PID: 11913 Comm: syz.1.1328 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.254667][T11913] Tainted: [L]=SOFTLOCKUP [ 591.254671][T11913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 591.254678][T11913] Call Trace: [ 591.254682][T11913] [ 591.254687][T11913] dump_stack_lvl+0x100/0x190 [ 591.254706][T11913] should_fail_ex.cold+0x5/0xa [ 591.254722][T11913] should_failslab+0xc2/0x120 [ 591.254739][T11913] __kmalloc_noprof+0xfc/0x840 [ 591.254754][T11913] ? process_preds+0x498/0x1d90 [ 591.254769][T11913] process_preds+0x498/0x1d90 [ 591.254783][T11913] ? __asan_memcpy+0x3c/0x60 [ 591.254798][T11913] apply_subsystem_event_filter+0x4a0/0x17a0 [ 591.254815][T11913] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 591.254831][T11913] ? _copy_from_user+0x59/0xd0 [ 591.254850][T11913] subsystem_filter_write+0x95/0x120 [ 591.254864][T11913] vfs_write+0x2aa/0x1050 [ 591.254879][T11913] ? __pfx_subsystem_filter_write+0x10/0x10 [ 591.254891][T11913] ? lock_acquire+0x1d1/0x380 [ 591.254901][T11913] ? __fget_files+0x34/0x3d0 [ 591.254916][T11913] ? __pfx_vfs_write+0x10/0x10 [ 591.254929][T11913] ? find_held_lock+0x2b/0x80 [ 591.254943][T11913] ? __fget_files+0x215/0x3d0 [ 591.254961][T11913] ? __fget_files+0x21f/0x3d0 [ 591.254980][T11913] ksys_write+0x12a/0x250 [ 591.254994][T11913] ? __pfx_ksys_write+0x10/0x10 [ 591.255012][T11913] __do_fast_syscall_32+0x14b/0x8c0 [ 591.255029][T11913] do_fast_syscall_32+0x32/0x70 [ 591.255044][T11913] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 591.255058][T11913] RIP: 0023:0xf73defbc [ 591.255068][T11913] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 591.255078][T11913] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 591.255089][T11913] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000440 [ 591.255097][T11913] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 591.255105][T11913] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 591.255113][T11913] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 591.255120][T11913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 591.255135][T11913] [ 591.524046][T11921] tipc: Enabling of bearer rejected, already enabled [ 591.570316][ T64] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 591.719682][ T64] usb 8-1: Using ep0 maxpacket: 8 [ 591.722080][ T64] usb 8-1: unable to get BOS descriptor or descriptor too short [ 591.722105][ T64] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=33.40 [ 591.722997][ T64] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.723011][ T64] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 591.723040][ T64] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 591.725254][ T64] usb 8-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127 [ 591.725272][ T64] usb 8-1: Product: syz [ 591.725285][ T64] usb 8-1: Manufacturer: syz [ 591.725297][ T64] usb 8-1: SerialNumber: syz [ 591.749974][ T6801] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 591.921588][ T6801] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 591.922392][ T6801] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.922404][ T6801] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 591.922430][ T6801] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.164275][ T64] cdc_ncm 8-1:1.0: skipping garbage [ 592.164283][ T64] cdc_ncm 8-1:1.0: skipping garbage [ 592.164291][ T64] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 592.164310][ T64] cdc_ncm 8-1:1.0: bind() failure [ 592.183604][ T64] usb 8-1: USB disconnect, device number 18 [ 593.487381][T11935] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.576005][T11935] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 593.576020][T11935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 593.592703][T11935] veth1_vlan: left promiscuous mode [ 593.594862][T11935] veth0_vlan: left promiscuous mode [ 593.597300][T11935] veth0_vlan: entered promiscuous mode [ 593.599247][T11935] veth1_vlan: entered promiscuous mode [ 593.615891][T11935] veth1_macvtap: left promiscuous mode [ 593.618936][T11935] veth0_macvtap: left promiscuous mode [ 593.624760][T11935] veth0_macvtap: entered promiscuous mode [ 593.627179][T11935] veth1_macvtap: entered promiscuous mode [ 593.640810][T11935] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 593.642292][T11935] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 593.643499][T11935] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 593.645466][T11935] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.675895][ T232] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.675977][ T232] bridge0: port 1(bridge_slave_0) entered listening state [ 593.692101][ T232] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.692165][ T232] bridge0: port 2(bridge_slave_1) entered listening state [ 593.788361][ T9849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.788392][ T9849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.788420][ T9849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.788439][ T9849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.409616][ C0] net_ratelimit: 116 callbacks suppressed [ 594.764667][ T41] usb 7-1: USB disconnect, device number 16 [ 594.894421][T11946] tipc: Enabling of bearer rejected, already enabled [ 595.065409][T11952] tipc: Enabling of bearer rejected, already enabled [ 595.110831][T11954] pim6reg: left allmulticast mode [ 595.524741][T11964] 9pnet_virtio: no channels available for device syz [ 596.217934][T11971] pim6reg: entered allmulticast mode [ 596.247444][T11970] pim6reg: left allmulticast mode [ 597.475612][T11973] netlink: 'syz.2.1345': attribute type 10 has an invalid length. [ 597.667793][T11990] erspan0: left allmulticast mode [ 597.667810][T11990] erspan0: left promiscuous mode [ 597.668110][T11990] bridge1: port 1(erspan0) entered disabled state [ 597.696547][T11990] syz_tun: left allmulticast mode [ 597.696557][T11990] syz_tun: left promiscuous mode [ 597.696657][T11990] bridge0: port 4(syz_tun) entered disabled state [ 597.704573][T11990] bridge_slave_0: left allmulticast mode [ 597.704585][T11990] bridge_slave_0: left promiscuous mode [ 597.704710][T11990] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.754316][T11990] bridge_slave_1: left allmulticast mode [ 597.754331][T11990] bridge_slave_1: left promiscuous mode [ 597.755731][T11990] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.801897][T11990] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 597.804298][T11990] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 597.804497][T11990] bridge0: port 3(netdevsim0) entered disabled state [ 597.828926][T11990] bond1: (slave gretap1): Releasing active interface [ 597.849936][T11738] ip6_tunnel: M xmit: Local address not yet configured! [ 597.863102][T11994] tipc: Enabling of bearer rejected, already enabled [ 597.893166][T11990] vlan0: entered promiscuous mode [ 597.903853][T11990] tipc: Enabling of bearer rejected, failed to enable media [ 597.954611][T12003] tipc: Enabling of bearer rejected, already enabled [ 597.991092][T11743] ip6_tunnel: M xmit: Local address not yet configured! [ 598.258373][T12011] pim6reg: left allmulticast mode [ 599.605773][T12022] pim6reg: entered allmulticast mode [ 599.655541][T12022] pim6reg: left allmulticast mode [ 600.112330][ T5893] net_ratelimit: 109 callbacks suppressed [ 600.153413][T12029] 9pnet_virtio: no channels available for device syz [ 600.236510][T12030] tipc: Enabling of bearer rejected, already enabled [ 600.572586][T12039] tipc: Enabling of bearer rejected, already enabled [ 603.258035][T12058] pim6reg: entered allmulticast mode [ 603.291075][T12050] 9pnet_virtio: no channels available for device syz [ 603.380602][T12058] pim6reg: left allmulticast mode [ 603.429480][T12060] nvmet: adding nsid 1 to subsystem testsubsys [ 603.441622][T12060] nvmet_tcp: malformed ip/port passed: 127.0: [ 603.657710][T12063] tipc: Enabling of bearer rejected, already enabled [ 603.760050][T12067] tipc: Enabling of bearer rejected, already enabled [ 605.119608][ C0] net_ratelimit: 10 callbacks suppressed [ 605.354629][T12093] Invalid ELF header magic: != ELF [ 605.527456][T12093] overlay: Unknown parameter '/' [ 606.000742][ C3] ipvlan_process_outbound: 2 callbacks suppressed [ 606.118275][T12099] tipc: Enabling of bearer rejected, already enabled [ 606.252319][T12105] tipc: Enabling of bearer rejected, already enabled [ 607.070879][T12109] pim6reg: entered allmulticast mode [ 607.154925][T12109] pim6reg: left allmulticast mode [ 608.018571][T12118] pim6reg: entered allmulticast mode [ 608.203389][T12117] pim6reg: left allmulticast mode [ 608.754199][T12134] tipc: Enabling of bearer rejected, already enabled [ 608.795661][T12141] Invalid ELF header magic: != ELF [ 608.813262][T12141] overlay: Unknown parameter '/' [ 608.828938][T12132] tipc: Enabling of bearer rejected, already enabled [ 609.029708][T11724] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 609.181749][T11724] usb 6-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 609.184189][T11724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.184199][T11724] usb 6-1: Product: syz [ 609.184207][T11724] usb 6-1: Manufacturer: syz [ 609.184214][T11724] usb 6-1: SerialNumber: syz [ 609.207520][T12154] pim6reg: left allmulticast mode [ 609.213596][T11724] usb 6-1: USB2VGA dongle found at address 21 [ 609.214625][T11724] usb 6-1: Allocated 8 output buffers [ 609.315153][T12155] Invalid ELF header magic: != ELF [ 609.429643][T12155] overlay: Unknown parameter '/' [ 609.784418][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'. [ 609.986195][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1393'. [ 610.029971][T12159] ipvlan2: entered allmulticast mode [ 610.029987][T12159] virt_wifi0: entered allmulticast mode [ 610.040680][T12159] batman_adv: batadv0: Adding interface: ipvlan2 [ 610.040692][T12159] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.041709][T12159] batman_adv: batadv0: Interface activated: ipvlan2 [ 610.151346][T11724] usb 6-1: Failed to early initialize device [ 610.193456][T11724] usb 6-1: USB disconnect, device number 21 [ 610.240167][ C3] net_ratelimit: 343 callbacks suppressed [ 610.942441][T12173] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 610.942457][T12173] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 610.943284][T12173] vhci_hcd vhci_hcd.0: Device attached [ 610.950502][T12173] loop8: detected capacity change from 0 to 16384 [ 611.124294][T11724] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 611.142630][T12178] loop8: detected capacity change from 16384 to 16383 [ 611.210085][T11724] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 611.335256][T12182] pim6reg: entered allmulticast mode [ 611.356411][T12179] pim6reg: left allmulticast mode [ 611.877100][T12174] vhci_hcd: connection reset by peer [ 611.878173][ T5830] vhci_hcd vhci_hcd.0: stop threads [ 611.878194][ T5830] vhci_hcd vhci_hcd.0: release socket [ 611.878237][ T5830] vhci_hcd vhci_hcd.0: disconnect device [ 612.559094][T12192] tipc: Enabling of bearer rejected, already enabled [ 612.695093][T12199] tipc: Enabling of bearer rejected, already enabled [ 612.801494][T12203] sctp_transport_update_pmtu: 54 callbacks suppressed [ 612.801507][T12203] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 613.060225][T12204] pim6reg: entered allmulticast mode [ 613.193759][T12204] pim6reg: left allmulticast mode [ 614.193718][T12223] Invalid ELF header magic: != ELF [ 614.240781][T12223] overlay: Unknown parameter '/' [ 614.248644][T12225] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 614.248644][T12225] [ 614.248665][T12225] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 614.248745][T12225] CIFS: Attempting to mount //172.20.20.170/share [ 614.495124][T12227] pim6reg: entered allmulticast mode [ 614.588611][T12227] pim6reg: left allmulticast mode [ 615.078789][T12225] CIFS: VFS: cifs_mount failed w/return code = -112 [ 615.350548][ T5893] net_ratelimit: 530 callbacks suppressed [ 615.354299][ T42] kauditd_printk_skb: 57 callbacks suppressed [ 615.354312][ T42] audit: type=1326 audit(1793131008.072:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.3.1410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 615.354453][ T42] audit: type=1326 audit(1793131008.072:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.3.1410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 615.357653][ T42] audit: type=1326 audit(1793131008.072:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.3.1410" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 615.357750][ T42] audit: type=1326 audit(1793131008.072:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.3.1410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 615.357846][ T42] audit: type=1326 audit(1793131008.072:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.3.1410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 615.358172][ T42] audit: type=1326 audit(1793131008.072:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.3.1410" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 615.358873][ T42] audit: type=1326 audit(1793131008.072:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.3.1410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 615.361330][ T42] audit: type=1326 audit(1793131008.082:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.3.1410" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 615.398504][ T42] audit: type=1326 audit(1793131008.112:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.3.1410" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a77ab code=0x7ffc0000 [ 615.398780][ T42] audit: type=1326 audit(1793131008.112:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.3.1410" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a77ab code=0x7ffc0000 [ 615.516999][T12242] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 615.517015][T12242] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 615.521415][T12242] vhci_hcd vhci_hcd.0: Device attached [ 615.579780][ T6596] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 615.721865][T11738] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 615.755841][ T6596] usb 6-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 615.757356][ T6596] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 615.757378][ T6596] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 615.757423][ T6596] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.769045][ T6596] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 615.779658][T11738] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 615.788854][ T6596] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 616.310150][T11724] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 616.478670][T12243] vhci_hcd: connection reset by peer [ 616.479061][ T5858] vhci_hcd vhci_hcd.2: stop threads [ 616.479074][ T5858] vhci_hcd vhci_hcd.2: release socket [ 616.479108][ T5858] vhci_hcd vhci_hcd.2: disconnect device [ 616.492515][T12232] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 616.492813][T12232] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 616.493071][T12232] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 616.585042][T12232] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 616.689896][T12231] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 616.695879][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1412'. [ 616.737015][ T29] usb 6-1: USB disconnect, device number 22 [ 616.768184][ T29] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 616.768570][ T29] spcp8x5 6-1:1.0: device disconnected [ 617.109879][T12260] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1413'. [ 617.223929][T12262] tipc: Enabling of bearer rejected, already enabled [ 617.451185][T12268] tipc: Enabling of bearer rejected, already enabled [ 617.509737][T12266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1415'. [ 618.028099][T12274] netlink: 'syz.2.1418': attribute type 1 has an invalid length. [ 618.120255][T12276] pim6reg: entered allmulticast mode [ 618.192675][T12267] pim6reg: left allmulticast mode [ 618.221369][T12278] pim6reg: entered allmulticast mode [ 618.289018][T12279] pim6reg: left allmulticast mode [ 618.767283][T12286] pim6reg: entered allmulticast mode [ 618.915284][T12286] pim6reg: left allmulticast mode [ 619.678899][T12293] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1422'. [ 620.559585][ C3] net_ratelimit: 25 callbacks suppressed [ 620.879705][T11738] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 621.236054][T12291] syz.2.1423: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 621.236102][T12291] CPU: 3 UID: 0 PID: 12291 Comm: syz.2.1423 Tainted: G L syzkaller #0 PREEMPT(full) [ 621.236119][T12291] Tainted: [L]=SOFTLOCKUP [ 621.236124][T12291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 621.236131][T12291] Call Trace: [ 621.236136][T12291] [ 621.236141][T12291] dump_stack_lvl+0x100/0x190 [ 621.236160][T12291] warn_alloc.cold+0x9e/0xb2 [ 621.236175][T12291] ? __pfx_warn_alloc+0x10/0x10 [ 621.236191][T12291] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 621.236209][T12291] ? __pfx_get_page_from_freelist+0x10/0x10 [ 621.236227][T12291] __alloc_frozen_pages_noprof+0x17ab/0x3190 [ 621.236249][T12291] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 621.236283][T12291] ? lock_acquire+0x1d1/0x380 [ 621.236297][T12291] ? page_table_check_set+0x1aa/0x630 [ 621.236317][T12291] ? page_table_check_set+0x39e/0x630 [ 621.236343][T12291] __folio_alloc_noprof+0x16/0x260 [ 621.236356][T12291] alloc_migration_target+0x1d7/0x6d0 [ 621.236375][T12291] migrate_pages_batch+0x5c2/0x4700 [ 621.236395][T12291] ? set_pte_range+0x440/0xa00 [ 621.236412][T12291] ? __pfx_alloc_migration_target+0x10/0x10 [ 621.236432][T12291] ? rcu_read_unlock+0x2d/0xb0 [ 621.236445][T12291] ? __pfx_migrate_pages_batch+0x10/0x10 [ 621.236463][T12291] ? finish_fault+0xaea/0x13e0 [ 621.236483][T12291] ? folio_unlock+0xf5/0x190 [ 621.236498][T12291] migrate_pages_sync+0x12c/0x880 [ 621.236516][T12291] ? __pfx_alloc_migration_target+0x10/0x10 [ 621.236536][T12291] ? __pfx_migrate_pages_sync+0x10/0x10 [ 621.236560][T12291] migrate_pages+0x1a79/0x2840 [ 621.236573][T12291] ? __pfx_alloc_migration_target+0x10/0x10 [ 621.236594][T12291] ? __pfx_migrate_pages+0x10/0x10 [ 621.236610][T12291] ? mtree_load+0x3a4/0xb50 [ 621.236627][T12291] move_pages_and_store_status+0xf1/0x230 [ 621.236640][T12291] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 621.236657][T12291] kernel_move_pages+0xca4/0x14d0 [ 621.236673][T12291] ? __pfx_kernel_move_pages+0x10/0x10 [ 621.236689][T12291] ? find_held_lock+0x2b/0x80 [ 621.236703][T12291] ? __might_fault+0xc5/0x140 [ 621.236713][T12291] ? __might_fault+0xc5/0x140 [ 621.236725][T12291] __ia32_sys_move_pages+0xdd/0x1b0 [ 621.236737][T12291] __do_fast_syscall_32+0x14b/0x8c0 [ 621.236752][T12291] ? lockdep_hardirqs_on+0x7d/0x110 [ 621.236766][T12291] do_fast_syscall_32+0x32/0x70 [ 621.236781][T12291] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 621.236795][T12291] RIP: 0023:0xf73aefbc [ 621.236805][T12291] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 621.236816][T12291] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 000000000000013d [ 621.236827][T12291] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000000020a0 [ 621.236834][T12291] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 621.236841][T12291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 621.236847][T12291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.236854][T12291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 621.236868][T12291] [ 621.244158][T12291] Mem-Info: [ 621.244167][T12291] active_anon:21682 inactive_anon:2581 isolated_anon:0 [ 621.244167][T12291] active_file:2649 inactive_file:11002 isolated_file:0 [ 621.244167][T12291] unevictable:1599 dirty:243 writeback:0 [ 621.244167][T12291] slab_reclaimable:7130 slab_unreclaimable:58408 [ 621.244167][T12291] mapped:41559 shmem:24005 pagetables:1243 [ 621.244167][T12291] sec_pagetables:341 bounce:0 [ 621.244167][T12291] kernel_misc_reclaimable:0 [ 621.244167][T12291] free:15416 free_pcp:372 free_cma:0 [ 621.244196][T12291] Node 0 active_anon:32kB inactive_anon:204kB active_file:4kB inactive_file:1272kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7936kB pagetables:1092kB sec_pagetables:1144kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 621.244226][T12291] Node 1 active_anon:86696kB inactive_anon:10120kB active_file:10592kB inactive_file:42736kB unevictable:6396kB isolated(anon):0kB isolated(file):0kB mapped:166084kB dirty:972kB writeback:0kB shmem:96020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7968kB pagetables:3880kB sec_pagetables:220kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 621.244256][T12291] Node 0 DMA free:2092kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:4kB inactive_anon:60kB active_file:0kB inactive_file:352kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 621.244289][T12291] lowmem_reserve[]: 0 256 256 256 256 [ 621.244309][T12291] Node 0 DMA32 free:11924kB boost:25992kB min:37544kB low:40432kB high:43320kB reserved_highatomic:0kB free_highatomic:0kB active_anon:28kB inactive_anon:144kB active_file:4kB inactive_file:920kB unevictable:0kB writepending:0kB zspages:428kB present:1032196kB managed:262812kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 621.244342][T12291] lowmem_reserve[]: 0 0 0 0 0 [ 621.244360][T12291] Node 1 DMA32 free:47848kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048kB free_highatomic:932kB active_anon:86696kB inactive_anon:10120kB active_file:10592kB inactive_file:42736kB unevictable:6396kB writepending:972kB zspages:8536kB present:1048432kB managed:948208kB mlocked:2300kB bounce:0kB free_pcp:1248kB local_pcp:468kB free_cma:0kB [ 621.244391][T12291] lowmem_reserve[]: 0 0 0 0 0 [ 621.244408][T12291] Node 0 DMA: 136*4kB (U) 12*8kB (U) 2*16kB (U) 15*32kB (UM) 9*64kB (UM) 1*128kB (M) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2112kB [ 621.244480][T12291] Node 0 DMA32: 188*4kB (UME) 107*8kB (UME) 86*16kB (UME) 113*32kB (UME) 29*64kB (UME) 4*128kB (ME) 4*256kB (ME) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 12040kB [ 621.244552][T12291] Node 1 DMA32: 256*4kB (UEH) 490*8kB (UMEH) 280*16kB (UEH) 165*32kB (UMEH) 59*64kB (UEH) 26*128kB (UMEH) 3*256kB (UE) 5*512kB (UME) 6*1024kB (UME) 8*2048kB (UM) 0*4096kB = 47664kB [ 621.244631][T12291] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.244640][T12291] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 621.244648][T12291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.244657][T12291] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 621.244665][T12291] 38508 total pagecache pages [ 621.244669][T12291] 782 pages in swap cache [ 621.244672][T12291] Free swap = 77988kB [ 621.244676][T12291] Total swap = 124996kB [ 621.244681][T12291] 524155 pages RAM [ 621.244684][T12291] 0 pages HighMem/MovableOnly [ 621.244688][T12291] 217560 pages reserved [ 621.244692][T12291] 0 pages cma reserved [ 621.839703][ T5881] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 621.853465][T12314] tipc: Enabling of bearer rejected, already enabled [ 621.990554][ T5881] usb 8-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 621.991753][ T5881] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 621.991776][ T5881] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 621.991819][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.020475][ T5881] spcp8x5 8-1:1.0: SPCP8x5 converter detected [ 622.027852][ T5881] usb 8-1: SPCP8x5 converter now attached to ttyUSB0 [ 622.609944][T12307] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 622.610195][T12307] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 622.614588][T12307] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 622.708325][T12307] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 622.810388][T12306] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 622.814377][ T5881] usb 8-1: USB disconnect, device number 19 [ 622.849820][ T5881] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 622.850209][ T5881] spcp8x5 8-1:1.0: device disconnected [ 623.920055][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 623.920235][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 623.922468][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.417876][T12325] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1431'. [ 625.839811][ C3] net_ratelimit: 101 callbacks suppressed [ 626.430315][T12332] pim6reg: entered allmulticast mode [ 626.898423][T12336] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1433'. [ 627.287639][T12332] pim6reg: left allmulticast mode [ 627.725866][T12341] pim6reg: entered allmulticast mode [ 627.797764][T12341] pim6reg: left allmulticast mode [ 628.553101][T12347] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1443'. [ 628.597812][T12351] pim6reg: entered allmulticast mode [ 628.714139][T12356] pim6reg: left allmulticast mode [ 630.858667][T12380] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 630.858718][T12380] block device autoloading is deprecated and will be removed. [ 630.867306][T12375] 9pnet_virtio: no channels available for device syz [ 631.199626][ C3] net_ratelimit: 31 callbacks suppressed [ 631.349405][T12387] pim6reg: entered allmulticast mode [ 631.424755][T12388] pim6reg: left allmulticast mode [ 632.889808][ C2] ipvlan_process_outbound: 3 callbacks suppressed [ 633.000394][T12396] pim6reg: entered allmulticast mode [ 633.390641][T12397] pim6reg: entered allmulticast mode [ 633.422976][T12396] pim6reg: left allmulticast mode [ 633.600365][T12397] pim6reg: left allmulticast mode [ 634.295267][T12403] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 634.295290][T12403] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 634.295357][T12403] vhci_hcd vhci_hcd.0: Device attached [ 634.296677][T12410] pim6reg: entered allmulticast mode [ 634.469947][ T5881] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 634.529631][ T5881] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 635.013824][T12401] pim6reg: entered allmulticast mode [ 635.098159][T12420] pim6reg: left allmulticast mode [ 635.294778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 636.409629][ C0] net_ratelimit: 27 callbacks suppressed [ 637.530602][T12411] vhci_hcd: connection reset by peer [ 637.532852][ T5830] vhci_hcd vhci_hcd.3: stop threads [ 637.532873][ T5830] vhci_hcd vhci_hcd.3: release socket [ 637.532916][ T5830] vhci_hcd vhci_hcd.3: disconnect device [ 639.129914][ T29] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 639.679721][ T5881] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 640.291701][ T29] usb 5-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 640.296646][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.296656][ T29] usb 5-1: Product: syz [ 640.296664][ T29] usb 5-1: Manufacturer: syz [ 640.296671][ T29] usb 5-1: SerialNumber: syz [ 640.317543][ T29] usb 5-1: USB2VGA dongle found at address 27 [ 640.325987][ T29] usb 5-1: Allocated 8 output buffers [ 640.603559][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1457'. [ 640.745504][ T29] usb 5-1: Failed to early initialize device [ 640.776212][ T29] usb 5-1: USB disconnect, device number 27 [ 641.045926][T12465] pim6reg: entered allmulticast mode [ 641.196712][T12465] pim6reg: left allmulticast mode [ 641.311519][T11724] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 641.399479][T12468] pim6reg: entered allmulticast mode [ 641.459675][T11724] usb 7-1: Using ep0 maxpacket: 16 [ 641.461712][T12469] pim6reg: left allmulticast mode [ 641.463699][T11724] usb 7-1: unable to get BOS descriptor or descriptor too short [ 641.463734][T11724] usb 7-1: New USB device found: idVendor=0d8c, idProduct=0201, bcdDevice=0.40 [ 641.464799][T11724] usb 7-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config [ 641.464868][T11724] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 641.467055][T11724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.467072][T11724] usb 7-1: Product: syz [ 641.467084][T11724] usb 7-1: Manufacturer: syz [ 641.467149][T11724] usb 7-1: SerialNumber: syz [ 641.839711][ C0] net_ratelimit: 11 callbacks suppressed [ 642.353054][T12488] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1465'. [ 642.698155][T12493] random: crng reseeded on system resumption [ 642.965974][T11724] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 642.982075][T11724] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 643.124435][T11724] usb 7-1: USB disconnect, device number 17 [ 644.734237][T12520] pim6reg: entered allmulticast mode [ 644.843042][T12520] pim6reg: left allmulticast mode [ 646.717732][T12536] pim6reg: entered allmulticast mode [ 646.734070][T12537] No buffer was provided with the request [ 646.786343][T12538] pim6reg: left allmulticast mode [ 647.364451][T12541] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1480'. [ 647.439574][ C3] net_ratelimit: 9 callbacks suppressed [ 647.532090][T12541] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1480'. [ 647.808673][T12551] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.933803][T12553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1483'. [ 647.941686][T12551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 647.941740][T12551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 647.952720][T12551] veth1_vlan: left promiscuous mode [ 647.955151][T12551] veth0_vlan: left promiscuous mode [ 647.957938][T12551] veth0_vlan: entered promiscuous mode [ 647.960305][T12551] veth1_vlan: entered promiscuous mode [ 647.970037][T12551] veth1_macvtap: left promiscuous mode [ 647.971349][T12551] veth0_macvtap: left promiscuous mode [ 647.971936][T12551] veth0_macvtap: entered promiscuous mode [ 647.972488][T12551] veth1_macvtap: entered promiscuous mode [ 647.975828][T12551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 647.978265][T12551] 8021q: adding VLAN 0 to HW filter on device bond2 [ 648.008440][T12551] 8021q: adding VLAN 0 to HW filter on device eth0 [ 648.008938][T12551] 8021q: adding VLAN 0 to HW filter on device eth1 [ 648.009425][T12551] 8021q: adding VLAN 0 to HW filter on device eth2 [ 648.010239][T12551] 8021q: adding VLAN 0 to HW filter on device eth3 [ 648.041588][ T7592] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.041630][ T7592] bridge0: port 1(bridge_slave_0) entered listening state [ 648.056728][ T7592] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.056771][ T7592] bridge0: port 2(bridge_slave_1) entered listening state [ 648.215965][ T858] syz1: Port: 1 Link ACTIVE [ 648.227406][T12562] pim6reg: entered allmulticast mode [ 648.229726][ T9849] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.229752][ T9849] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.229777][ T9849] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.229795][ T9849] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.306113][ T5830] ip6_tunnel: M xmit: Local address not yet configured! [ 648.306252][ T5830] ip6_tunnel: M xmit: Local address not yet configured! [ 648.333218][ T858] ip6_tunnel: M xmit: Local address not yet configured! [ 648.375808][T12559] pim6reg: left allmulticast mode [ 648.440179][ T858] ip6_tunnel: M xmit: Local address not yet configured! [ 648.991532][T12575] pim6reg: entered allmulticast mode [ 649.055669][T12576] pim6reg: left allmulticast mode [ 649.450673][ T858] ip6_tunnel: M xmit: Local address not yet configured! [ 650.183680][T12591] pim6reg: entered allmulticast mode [ 650.250643][T12592] pim6reg: left allmulticast mode [ 650.661402][T12602] pim6reg: entered allmulticast mode [ 650.679287][T12598] pim6reg: left allmulticast mode [ 650.726668][T12603] pim6reg: left allmulticast mode [ 651.919764][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 652.108059][ T5881] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 652.108083][ T5881] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 652.108095][ T5881] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 652.108107][ T5881] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 652.108119][ T5881] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 652.108131][ T5881] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 652.108143][ T5881] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 652.108155][ T5881] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 652.136184][ T5881] hid-generic 0000:0000:0001.0004: hidraw1: HID v0.10 Device [syz0] on syz1 [ 652.165217][ T42] kauditd_printk_skb: 51 callbacks suppressed [ 652.165232][ T42] audit: type=1326 audit(1793131044.782:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.3.1498" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 652.165261][ T42] audit: type=1326 audit(1793131044.792:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.3.1498" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 652.221445][ T42] audit: type=1326 audit(1793131044.942:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.3.1498" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf744efbc code=0x7ffc0000 [ 652.317446][T12624] fido_id[12624]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 652.391746][T12629] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1499'. [ 652.574385][T12632] pim6reg: entered allmulticast mode [ 652.719776][ C3] net_ratelimit: 156 callbacks suppressed [ 652.724525][T12636] pim6reg: entered allmulticast mode [ 652.841751][T12642] pim6reg: left allmulticast mode [ 652.998542][T12641] pim6reg: entered allmulticast mode [ 652.998702][T12643] pim6reg: left allmulticast mode [ 653.090512][T12646] pim6reg: left allmulticast mode [ 653.999696][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.999713][ C1] bridge0: topology change detected, propagating [ 653.999996][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.000011][ C1] bridge0: topology change detected, propagating [ 654.639760][ C2] ip6_tunnel: M xmit: Local address not yet configured! [ 654.833638][T12654] pim6reg: entered allmulticast mode [ 654.858834][T12651] pim6reg: entered allmulticast mode [ 654.926588][T12655] pim6reg: left allmulticast mode [ 655.048223][T12656] pim6reg: left allmulticast mode [ 655.337626][T12661] Invalid ELF header magic: != ELF [ 655.743153][T12660] overlay: Unknown parameter '/' [ 656.095202][ T5148] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 657.305408][T12692] pim6reg: entered allmulticast mode [ 657.391647][T12690] pim6reg: left allmulticast mode [ 657.839699][ C3] net_ratelimit: 243 callbacks suppressed [ 658.295190][T12704] pim6reg: entered allmulticast mode [ 658.317002][T12703] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1518'. [ 658.375495][T12704] pim6reg: left allmulticast mode [ 658.823754][ T29] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 659.048007][ T29] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 659.073750][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 659.073905][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.167439][ T29] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 659.169399][ T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 81 [ 659.169888][ T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 1 [ 659.213595][ T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 659.213770][ T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 659.221406][ T29] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 659.227232][ T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 659.227397][ T29] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 659.367035][ T29] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 659.546347][T12727] tipc: Enabling of bearer rejected, already enabled [ 659.769819][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 660.411406][T12729] pim6reg: entered allmulticast mode [ 660.582612][T12735] pim6reg: left allmulticast mode [ 661.542252][T12747] No buffer was provided with the request [ 661.647587][ T858] usb 7-1: USB disconnect, device number 18 [ 661.665417][ T858] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 661.713066][ T858] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 661.715452][ T858] keyspan 7-1:1.0: device disconnected [ 662.351836][T12754] 9pnet_virtio: no channels available for device syz [ 662.371158][T12754] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 662.371183][T12754] CIFS: Attempting to mount //::1/share [ 662.434288][T12754] CIFS: VFS: Error connecting to socket. Aborting operation. [ 662.434326][T12754] CIFS: VFS: cifs_mount failed w/return code = -4 [ 662.553087][T12760] tipc: Enabling of bearer rejected, already enabled [ 662.677452][T12757] pim6reg: entered allmulticast mode [ 662.928492][T12764] pim6reg: left allmulticast mode [ 663.439612][ C0] net_ratelimit: 90 callbacks suppressed [ 664.647582][T12781] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1538'. [ 664.766330][T12785] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1538'. [ 664.872792][T12787] vlan0: left promiscuous mode [ 664.934141][T12787] ipvlan2: left allmulticast mode [ 664.934209][T12787] virt_wifi0: left allmulticast mode [ 665.190109][ T858] ip6_tunnel: M xmit: Local address not yet configured! [ 665.214993][T12791] tipc: Enabling of bearer rejected, already enabled [ 665.921176][ T858] ip6_tunnel: M xmit: Local address not yet configured! [ 668.380637][T12816] pim6reg: entered allmulticast mode [ 668.444893][T12817] pim6reg: left allmulticast mode [ 668.779226][T12822] Invalid ELF header magic: != ELF [ 668.787486][T12822] net_ratelimit: 119 callbacks suppressed [ 669.057846][T12822] overlay: Unknown parameter '/' [ 669.678036][T12826] tipc: Enabling of bearer rejected, already enabled [ 670.430406][T12846] Invalid ELF header magic: != ELF [ 670.484249][T12846] overlay: Unknown parameter '/' [ 670.781074][T12861] No buffer was provided with the request [ 672.130582][T12877] pim6reg: entered allmulticast mode [ 672.228611][T12878] Invalid ELF header magic: != ELF [ 672.466270][T12878] overlay: Unknown parameter '/' [ 672.561110][T12879] pim6reg: left allmulticast mode [ 672.733667][T12882] tipc: Enabling of bearer rejected, already enabled [ 673.122832][T12891] tipc: Enabling of bearer rejected, already enabled [ 673.227830][T12888] fuse: Bad value for 'fd' [ 674.239625][ C3] net_ratelimit: 607 callbacks suppressed [ 675.123006][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 676.331486][T12931] Invalid ELF header magic: != ELF [ 676.425221][T12931] overlay: Unknown parameter '/' [ 676.948537][T12936] pim6reg: entered allmulticast mode [ 677.291262][ T1039] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 677.316697][T12936] pim6reg: left allmulticast mode [ 677.964537][ T1039] usb 7-1: not running at top speed; connect to a high speed hub [ 677.964566][ T1039] usb 7-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 677.988441][ T1039] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 677.988465][ T1039] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 677.988530][ T1039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.319920][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 678.320059][ C3] bridge0: port 1(bridge_slave_0) entered learning state [ 678.339671][ T1039] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 678.501402][ T1039] usb 8-1: unable to get BOS descriptor or descriptor too short [ 678.501428][ T1039] usb 8-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 678.502171][ T1039] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 678.502184][ T1039] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 678.503707][ T1039] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.503717][ T1039] usb 8-1: Product: syz [ 678.503725][ T1039] usb 8-1: Manufacturer: syz [ 678.503732][ T1039] usb 8-1: SerialNumber: syz [ 678.551215][ T1039] usb 8-1: selecting invalid altsetting 1 [ 678.551829][ T1039] usb 8-1: unit 6 not found! [ 678.571785][T11724] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 678.719792][T11724] usb 6-1: Using ep0 maxpacket: 32 [ 678.720617][T11724] usb 6-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 678.722251][T11724] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.722264][T11724] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.722275][T11724] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 678.722304][T11724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.723547][T11724] usb 6-1: config 0 descriptor?? [ 678.774854][T12952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1580'. [ 679.148802][T11724] hid (null): report_id 0 is invalid [ 679.148815][T11724] hid (null): report_id 0 is invalid [ 679.216937][T11724] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.0005/input/input21 [ 679.353016][T11724] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0458:5011.0005/input/input22 [ 679.394957][T12948] mmap: syz.1.1579 (12948): VmData 37502976 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 679.538499][T11724] kye 0003:0458:5011.0005: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 679.679583][ C0] net_ratelimit: 118 callbacks suppressed [ 679.698535][ T1039] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 679.955320][T12964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.955762][T12964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.962450][T12964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.002564][T12964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.009692][T11660] usb 6-1: USB disconnect, device number 23 [ 680.232070][T12963] fido_id[12963]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/6-1/report_descriptor': No such file or directory [ 680.639601][T12966] pim6reg: entered allmulticast mode [ 680.710876][T12971] pim6reg: left allmulticast mode [ 680.785752][T12938] udevd[12938]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.342581][T11746] usb 8-1: USB disconnect, device number 20 [ 681.725736][ T1039] usb 7-1: USB disconnect, device number 19 [ 682.327833][ T42] audit: type=1800 audit(1793131075.032:1551): pid=12987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1592" name="file0" dev="overlay" ino=2054 res=0 errno=-22 [ 683.073083][T12991] pim6reg: entered allmulticast mode [ 683.152561][T12993] pim6reg: left allmulticast mode [ 684.169639][T11746] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 684.334406][T13008] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1590'. [ 684.334456][T13008] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1590'. [ 684.340617][T11746] usb 5-1: Using ep0 maxpacket: 8 [ 684.360701][T11746] usb 5-1: unable to get BOS descriptor or descriptor too short [ 684.360744][T11746] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=33.40 [ 684.367930][T11746] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.367952][T11746] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 684.368007][T11746] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 684.370128][T11746] usb 5-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127 [ 684.370147][T11746] usb 5-1: Product: syz [ 684.370160][T11746] usb 5-1: Manufacturer: syz [ 684.370174][T11746] usb 5-1: SerialNumber: syz [ 684.408846][T13008] FAULT_INJECTION: forcing a failure. [ 684.408846][T13008] name failslab, interval 1, probability 0, space 0, times 0 [ 684.408869][T13008] CPU: 3 UID: 0 PID: 13008 Comm: syz.2.1590 Tainted: G L syzkaller #0 PREEMPT(full) [ 684.408885][T13008] Tainted: [L]=SOFTLOCKUP [ 684.408889][T13008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 684.408896][T13008] Call Trace: [ 684.408900][T13008] [ 684.408905][T13008] dump_stack_lvl+0x100/0x190 [ 684.408924][T13008] should_fail_ex.cold+0x5/0xa [ 684.408941][T13008] should_failslab+0xc2/0x120 [ 684.408959][T13008] __kmalloc_cache_noprof+0x91/0x6d0 [ 684.408974][T13008] ? assoc_array_insert+0x10b/0x32c0 [ 684.408989][T13008] assoc_array_insert+0x10b/0x32c0 [ 684.409001][T13008] ? __mutex_lock+0x267/0x1c10 [ 684.409036][T13008] ? __key_link_lock+0x92/0xb0 [ 684.409055][T13008] ? __pfx___mutex_lock+0x10/0x10 [ 684.409072][T13008] ? __pfx_assoc_array_insert+0x10/0x10 [ 684.409088][T13008] ? down_write+0x141/0x1f0 [ 684.409105][T13008] ? __pfx_down_write+0x10/0x10 [ 684.409124][T13008] __key_link_begin+0xf5/0x260 [ 684.409137][T13008] key_instantiate_and_link+0x201/0x4b0 [ 684.409156][T13008] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 684.409174][T13008] ? keyctl_get_persistent+0x4b4/0x860 [ 684.409200][T13008] keyring_alloc+0x7a/0xc0 [ 684.409220][T13008] keyctl_get_persistent+0x694/0x860 [ 684.409240][T13008] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 684.409251][T13008] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 684.409271][T13008] ? find_held_lock+0x2b/0x80 [ 684.409286][T13008] ? __might_fault+0xc5/0x140 [ 684.409296][T13008] ? __might_fault+0xc5/0x140 [ 684.409308][T13008] __ia32_compat_sys_keyctl+0x38f/0x550 [ 684.409328][T13008] __do_fast_syscall_32+0x14b/0x8c0 [ 684.409344][T13008] do_fast_syscall_32+0x32/0x70 [ 684.409363][T13008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 684.409386][T13008] RIP: 0023:0xf73aefbc [ 684.409401][T13008] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 684.409417][T13008] RSP: 002b:00000000f53c650c EFLAGS: 00000292 ORIG_RAX: 0000000000000120 [ 684.409436][T13008] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 0000000000000000 [ 684.409448][T13008] RDX: 000000001cff6f0e RSI: 0000000000000000 RDI: 0000000000000000 [ 684.409459][T13008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 684.409468][T13008] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 684.409479][T13008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 684.409557][T13008] [ 684.455570][T13011] tipc: Enabling of bearer rejected, already enabled [ 684.719655][ C2] net_ratelimit: 65 callbacks suppressed [ 684.725430][T13004] socket: no more sockets [ 684.987705][T13017] veth0_vlan: left promiscuous mode [ 685.113164][T11746] cdc_ncm 5-1:1.0: skipping garbage [ 685.116861][T11746] cdc_ncm 5-1:1.0: skipping garbage [ 685.116877][T11746] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 685.116912][T11746] cdc_ncm 5-1:1.0: bind() failure [ 685.137953][T11746] usb 5-1: USB disconnect, device number 28 [ 685.229770][T11660] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 685.320667][T13020] No buffer was provided with the request [ 685.361043][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.380104][T11660] usb 6-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 685.381196][T11660] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 685.382121][T11660] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 685.383834][T11660] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.383844][T11660] usb 6-1: Product: syz [ 685.383851][T11660] usb 6-1: Manufacturer: syz [ 685.383859][T11660] usb 6-1: SerialNumber: syz [ 685.410583][T11660] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 685.417958][T11660] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 685.429752][T11660] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 687.858303][T13017] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear output buffers, -110 [ 687.872240][ T1039] usb 6-1: USB disconnect, device number 24 [ 687.934710][T13016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.955770][ T1039] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 687.964462][ T1039] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 687.964998][ T1039] ti_usb_3410_5052 6-1:2.0: device disconnected [ 688.378674][T13052] tipc: Enabling of bearer rejected, already enabled [ 689.850847][T13063] pim6reg: entered allmulticast mode [ 689.930219][T13068] pim6reg: entered allmulticast mode [ 690.001466][T13069] pim6reg: left allmulticast mode [ 690.019360][T13070] pim6reg: left allmulticast mode [ 690.319636][ C3] net_ratelimit: 72 callbacks suppressed [ 691.562718][T13077] pim6reg: entered allmulticast mode [ 691.776360][T13077] pim6reg: left allmulticast mode [ 692.373131][T13082] pim6reg: entered allmulticast mode [ 692.455064][T13082] pim6reg: left allmulticast mode [ 693.189831][ T1039] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 693.350633][ T1039] usb 6-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 693.351575][ T1039] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.351592][ T1039] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 693.351633][ T1039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.519615][ C3] net_ratelimit: 71 callbacks suppressed [ 696.002705][ T858] usb 6-1: USB disconnect, device number 25 [ 696.218356][T13095] 9pnet_virtio: no channels available for device syz [ 697.440193][T11746] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 697.609765][T11746] usb 6-1: Using ep0 maxpacket: 8 [ 697.611931][T11746] usb 6-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 697.614610][T11746] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 697.614643][T11746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.616023][T11746] usb 6-1: config 0 descriptor?? [ 697.856309][T11746] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 698.065389][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1616'. [ 698.137320][ T42] audit: type=1326 audit(1793131090.762:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 698.137353][ T42] audit: type=1326 audit(1793131090.762:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 698.137374][ T42] audit: type=1326 audit(1793131090.772:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 698.137428][ T42] audit: type=1326 audit(1793131090.772:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 698.137449][ T42] audit: type=1326 audit(1793131090.772:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 698.137469][ T42] audit: type=1326 audit(1793131090.772:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 698.137489][ T42] audit: type=1326 audit(1793131090.772:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 698.137508][ T42] audit: type=1326 audit(1793131090.772:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 698.137528][ T42] audit: type=1326 audit(1793131090.782:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 698.137548][ T42] audit: type=1326 audit(1793131090.782:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13125 comm="syz.0.1622" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73eefbc code=0x7ffc0000 [ 698.453379][T11660] usb 6-1: USB disconnect, device number 26 [ 698.963221][T13141] Invalid ELF header magic: != ELF [ 699.002262][T11746] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 699.150073][T11746] usb 8-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 699.150961][T11746] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.150982][T11746] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 699.151025][T11746] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.642810][T13158] pim6reg: entered allmulticast mode [ 700.649615][ C3] net_ratelimit: 83 callbacks suppressed [ 700.807277][T13158] pim6reg: left allmulticast mode [ 701.299090][T13169] bond0 (unregistering): Released all slaves [ 701.376947][T13164] syz.2.1630 (13164): drop_caches: 2 [ 701.377433][T13164] syz.2.1630 (13164): drop_caches: 2 [ 702.033568][ T858] usb 8-1: USB disconnect, device number 21 [ 702.837185][T13181] pim6reg: entered allmulticast mode [ 702.878168][T13180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1635'. [ 703.054165][T13187] pim6reg: left allmulticast mode [ 703.478020][T13172] pim6reg: entered allmulticast mode [ 703.497073][T13172] pim6reg: left allmulticast mode [ 704.219700][T11746] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 704.380608][T11746] usb 6-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 704.381979][T11746] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 704.382001][T11746] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 704.382048][T11746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.395539][T11746] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 704.409040][T11746] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 705.208887][T13194] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 705.213653][T13194] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 705.214220][T13194] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 705.216090][T13194] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 705.338880][T13193] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 705.344921][T11746] usb 6-1: USB disconnect, device number 27 [ 705.383037][T11746] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 705.386322][T11746] spcp8x5 6-1:1.0: device disconnected [ 705.585545][T13206] pim6reg: entered allmulticast mode [ 705.647726][T13207] pim6reg: left allmulticast mode [ 705.929677][ C2] net_ratelimit: 67 callbacks suppressed [ 706.189640][T11746] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 706.259973][T13220] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1645'. [ 706.289990][T13220] tipc: Enabling of bearer rejected, already enabled [ 706.363646][T11746] usb 5-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 706.364522][T11746] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.364535][T11746] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 706.364583][T11746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.671156][T13225] pim6reg: entered allmulticast mode [ 707.119736][ C1] ip6_tunnel: M xmit: Local address not yet configured! [ 707.574901][T13229] pim6reg: left allmulticast mode [ 707.913514][T13234] pim6reg: entered allmulticast mode [ 707.948813][T13222] pim6reg: left allmulticast mode [ 708.409666][ C3] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.409681][ C3] bridge0: topology change detected, propagating [ 708.410028][ C3] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.410041][ C3] bridge0: topology change detected, propagating [ 708.659062][T13248] pim6reg: entered allmulticast mode [ 708.740062][T13248] pim6reg: left allmulticast mode [ 708.918774][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1657'. [ 708.969495][ T858] usb 5-1: USB disconnect, device number 29 [ 709.052711][ T7351] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:1873239b-b25f-44ca-9d9b-527ca08fe168. [ 709.116337][T13248] hsr_slave_1 (unregistering): left promiscuous mode [ 709.136377][T13236] nvme nvme0: creating 4 I/O queues. [ 709.147318][T13236] nvme nvme0: new ctrl: "testsubsys" [ 709.519363][T13263] pim6reg: entered allmulticast mode [ 709.617646][T13263] pim6reg: left allmulticast mode [ 710.137174][T13267] pim6reg: entered allmulticast mode [ 710.213601][T13274] pim6reg: left allmulticast mode [ 711.167298][ T5879] net_ratelimit: 64 callbacks suppressed [ 711.297853][T13282] pim6reg: entered allmulticast mode [ 711.491010][T13286] pim6reg: left allmulticast mode [ 712.206599][T13290] pim6reg: entered allmulticast mode [ 712.346543][T13290] pim6reg: left allmulticast mode [ 712.959635][T11746] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 713.120355][T11746] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 713.181289][T13298] pim6reg: entered allmulticast mode [ 713.243515][T11746] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.243541][T11746] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 713.243590][T11746] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.293092][T13298] pim6reg: left allmulticast mode [ 713.970651][T13308] pim6reg: entered allmulticast mode [ 714.241789][T13315] pim6reg: left allmulticast mode [ 714.339823][T13316] pim6reg: entered allmulticast mode [ 714.380221][T13316] pim6reg: left allmulticast mode [ 714.665222][T13314] nvme nvme1: rdma connection establishment failed (-512) [ 714.722180][T13314] nvme nvme1: rdma connection establishment failed (-512) [ 714.845694][T13314] nvme nvme1: rdma connection establishment failed (-512) [ 714.953822][T13325] pim6reg: entered allmulticast mode [ 714.997967][T13314] nvme nvme1: rdma connection establishment failed (-512) [ 715.052651][T13333] pim6reg: left allmulticast mode [ 715.064257][T13314] nvme nvme1: rdma connection establishment failed (-512) [ 715.376882][T13338] pim6reg: entered allmulticast mode [ 715.511254][T13340] pim6reg: left allmulticast mode [ 715.785969][T11660] usb 7-1: USB disconnect, device number 20 [ 715.921304][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 715.935260][T13344] gtp1: entered allmulticast mode [ 716.409970][T11724] net_ratelimit: 160 callbacks suppressed [ 716.514069][T13354] No buffer was provided with the request [ 716.588344][T13355] pim6reg: entered allmulticast mode [ 716.716289][T13355] pim6reg: left allmulticast mode [ 717.391203][T13363] pim6reg: entered allmulticast mode [ 717.550592][T13364] pim6reg: entered allmulticast mode [ 717.551007][T13358] pim6reg: left allmulticast mode [ 717.634509][T13364] pim6reg: left allmulticast mode [ 718.153607][T13371] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1682'. [ 718.276476][T13376] pim6reg: entered allmulticast mode [ 718.335055][T13379] pim6reg: left allmulticast mode [ 718.642014][T13389] pim6reg: entered allmulticast mode [ 718.690020][T13381] input: syz1 as /devices/virtual/input/input23 [ 718.724173][T13390] pim6reg: left allmulticast mode [ 719.499921][T11660] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 719.605131][T13403] No buffer was provided with the request [ 719.650411][T11660] usb 7-1: Using ep0 maxpacket: 8 [ 719.652536][T11660] usb 7-1: unable to get BOS descriptor or descriptor too short [ 719.652561][T11660] usb 7-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=33.40 [ 719.658541][T11660] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.658555][T11660] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 719.658585][T11660] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 719.660911][T11660] usb 7-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127 [ 719.660929][T11660] usb 7-1: Product: syz [ 719.660942][T11660] usb 7-1: Manufacturer: syz [ 719.660955][T11660] usb 7-1: SerialNumber: syz [ 720.354596][T13410] bond0 (unregistering): Released all slaves [ 720.440020][T13416] comedi comedi3: dt2817: I/O base address or length out of range [ 720.452512][T13415] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1694'. [ 720.664820][T13423] pim6reg: entered allmulticast mode [ 720.734572][T13429] pim6reg: left allmulticast mode [ 721.154857][T13433] pim6reg: entered allmulticast mode [ 721.250073][T13433] pim6reg: left allmulticast mode [ 721.558363][T11660] cdc_ncm 7-1:1.0: skipping garbage [ 721.558372][T11660] cdc_ncm 7-1:1.0: skipping garbage [ 721.558379][T11660] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 721.558399][T11660] cdc_ncm 7-1:1.0: bind() failure [ 721.572984][T11660] usb 7-1: USB disconnect, device number 21 [ 721.827557][ T5148] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 721.828226][T13445] net_ratelimit: 3443 callbacks suppressed [ 721.828236][T13445] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 721.847248][T13445] input: syz0 as /devices/virtual/input/input24 [ 722.057664][T13446] netlink: 'syz.1.1702': attribute type 6 has an invalid length. [ 722.292106][T13452] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1706'. [ 722.442992][T13454] netlink: 'syz.2.1707': attribute type 1 has an invalid length. [ 723.373039][T13480] pim6reg: entered allmulticast mode [ 723.457215][T13481] pim6reg: entered allmulticast mode [ 723.627991][T13481] pim6reg: left allmulticast mode [ 723.672024][T13476] pim6reg: left allmulticast mode [ 723.923764][T13486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1715'. [ 723.923806][T13486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1715'. [ 723.948480][T13486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1715'. [ 723.948524][T13486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1715'. [ 724.016189][T13486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1715'. [ 724.016275][T13486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1715'. [ 724.034169][T13486] netlink: 'syz.3.1715': attribute type 10 has an invalid length. [ 724.034184][T13486] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1715'. [ 724.136273][T13498] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1716'. [ 724.270037][ T5881] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 724.421763][ T5881] usb 6-1: Using ep0 maxpacket: 8 [ 724.423919][ T5881] usb 6-1: unable to get BOS descriptor or descriptor too short [ 724.423945][ T5881] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=33.40 [ 724.424791][ T5881] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.424803][ T5881] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 724.424833][ T5881] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 724.426707][ T5881] usb 6-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127 [ 724.426718][ T5881] usb 6-1: Product: syz [ 724.426725][ T5881] usb 6-1: Manufacturer: syz [ 724.426732][ T5881] usb 6-1: SerialNumber: syz [ 724.659842][T11738] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 724.810210][T11738] usb 7-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 724.811204][T11738] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.811218][T11738] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 724.811245][T11738] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.862895][T13529] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1724'. [ 724.914895][ T5881] cdc_ncm 6-1:1.0: skipping garbage [ 724.914903][ T5881] cdc_ncm 6-1:1.0: skipping garbage [ 724.914910][ T5881] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 724.914927][ T5881] cdc_ncm 6-1:1.0: bind() failure [ 724.931946][ T5881] usb 6-1: USB disconnect, device number 28 [ 726.445290][T13548] pim6reg: entered allmulticast mode [ 726.581785][T13548] pim6reg: left allmulticast mode [ 726.959720][ C3] net_ratelimit: 133 callbacks suppressed [ 727.237158][T13553] pim6reg: entered allmulticast mode [ 727.460344][T13559] __nla_validate_parse: 1 callbacks suppressed [ 727.460357][T13559] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1729'. [ 727.525201][ T858] usb 7-1: USB disconnect, device number 22 [ 727.558202][T13562] tipc: Enabling of bearer rejected, already enabled [ 727.659750][T13555] pim6reg: left allmulticast mode [ 728.077307][T13572] tipc: Enabling of bearer rejected, already enabled [ 728.638488][T13580] pim6reg: entered allmulticast mode [ 728.655617][T13577] pim6reg: left allmulticast mode [ 729.249323][T13581] pim6reg: entered allmulticast mode [ 729.253077][T13582] pim6reg: left allmulticast mode [ 729.491504][T13585] pim6reg: entered allmulticast mode [ 729.647905][T13591] pim6reg: left allmulticast mode [ 731.119742][T13597] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1740'. [ 731.192669][T13602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1739'. [ 731.230963][T13607] tipc: Enabling of bearer rejected, already enabled [ 731.712322][T13614] pim6reg: entered allmulticast mode [ 731.895003][T13604] pim6reg: left allmulticast mode [ 732.075826][T13616] tipc: Enabling of bearer rejected, already enabled [ 732.319661][ C3] net_ratelimit: 79 callbacks suppressed [ 732.615498][T13623] pim6reg: entered allmulticast mode [ 732.700290][T13622] pim6reg: left allmulticast mode [ 733.746275][T13630] pim6reg: entered allmulticast mode [ 733.824253][T13631] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1747'. [ 733.870272][T13630] pim6reg: left allmulticast mode [ 734.527889][T13635] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1748'. [ 734.541048][T13635] tipc: Enabling of bearer rejected, already enabled [ 734.784673][T13646] tipc: Enabling of bearer rejected, already enabled [ 735.423427][T13658] pim6reg: entered allmulticast mode [ 735.580038][T13658] pim6reg: left allmulticast mode [ 736.742492][T13667] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1757'. [ 736.763063][T13667] tipc: Enabling of bearer rejected, already enabled [ 737.237961][T13671] pim6reg: entered allmulticast mode [ 737.345726][T13671] pim6reg: left allmulticast mode [ 737.519667][ C3] net_ratelimit: 71 callbacks suppressed [ 738.143489][T13677] tipc: Enabling of bearer rejected, already enabled [ 738.327070][T13682] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1760'. [ 739.527072][T13697] pim6reg: entered allmulticast mode [ 739.606832][T13697] pim6reg: left allmulticast mode [ 740.054536][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 740.054597][ T42] audit: type=1326 audit(1793131132.762:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.1.1767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 740.054902][ T42] audit: type=1326 audit(1793131132.762:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.1.1767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 740.055138][ T42] audit: type=1326 audit(1793131132.772:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.1.1767" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 740.055284][ T42] audit: type=1326 audit(1793131132.772:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.1.1767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 740.055524][ T42] audit: type=1326 audit(1793131132.772:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.1.1767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 740.055695][ T42] audit: type=1326 audit(1793131132.772:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.1.1767" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 740.055915][ T42] audit: type=1326 audit(1793131132.772:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.1.1767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 740.056087][ T42] audit: type=1326 audit(1793131132.772:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.1.1767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 740.082248][ T42] audit: type=1326 audit(1793131132.772:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.1.1767" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71377ab code=0x7ffc0000 [ 740.082275][ T42] audit: type=1326 audit(1793131132.802:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13700 comm="syz.1.1767" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73defbc code=0x7ffc0000 [ 740.151447][T13699] pim6reg: entered allmulticast mode [ 740.319723][T11724] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 740.346093][T13699] pim6reg: left allmulticast mode [ 740.473324][T11724] usb 6-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 740.485121][T11724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.485138][T11724] usb 6-1: Product: syz [ 740.485151][T11724] usb 6-1: Manufacturer: syz [ 740.485165][T11724] usb 6-1: SerialNumber: syz [ 740.524912][T11724] usb 6-1: USB2VGA dongle found at address 29 [ 740.531259][T11724] usb 6-1: Allocated 8 output buffers [ 741.023963][T11724] usb 6-1: Failed to early initialize device [ 741.036048][T11724] usb 6-1: USB disconnect, device number 29 [ 741.078526][T13710] pim6reg: entered allmulticast mode [ 741.141803][T13712] pim6reg: left allmulticast mode [ 741.602208][T13723] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1772'. [ 741.614987][T13723] tipc: Enabling of bearer rejected, already enabled [ 741.750570][T13726] tipc: Enabling of bearer rejected, already enabled [ 741.979981][T13729] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1782'. [ 742.020627][T13729] tipc: Enabling of bearer rejected, already enabled [ 742.385851][T13738] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1775'. [ 742.719613][ C3] net_ratelimit: 74 callbacks suppressed [ 743.623328][T13747] pim6reg: entered allmulticast mode [ 744.131430][T13757] pim6reg: left allmulticast mode [ 744.859072][T13765] tipc: Enabling of bearer rejected, already enabled [ 744.934242][T13766] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1784'. [ 745.011182][T13766] tipc: Enabling of bearer rejected, already enabled [ 745.198537][T13772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1786'. [ 745.317727][T13769] random: crng reseeded on system resumption [ 745.332745][T13776] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 745.360345][T13776] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 745.361389][T13776] pci 0000:00:01.0: BAR 2 [mem 0xfeaf6000-0xfeaf6fff] [ 745.362113][T13776] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 745.391063][T13776] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 745.800708][T13776] pci 0000:00:01.0: Adding to iommu group 1 [ 745.873936][T13776] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 745.873948][T13776] pci 0000:00:01.0: vgaarb: bridge control possible [ 745.873966][T13776] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 745.913835][T13776] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 745.926336][T13776] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 745.926492][T13776] pci 0000:00:05.0: BAR 1 [mem 0xfeaf8000-0xfeaf8fff] [ 745.927142][T13776] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref] [ 746.027378][T13776] pci 0000:00:05.0: Adding to iommu group 5 [ 746.090595][T13776] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 746.107053][T13776] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 746.112101][T13776] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 746.113704][T13776] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 746.115620][T13776] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 746.205171][T13776] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 746.360366][T13776] [drm] Found bochs VGA, ID 0xb0c5. [ 746.360375][T13776] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 746.587262][T13776] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 746.803522][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.608153][T13776] Console: switching to colour frame buffer device 160x50 [ 747.676347][T13776] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 747.717118][T13776] ========== ** replaying previous printk message ** [ 747.717118][T13776] ================================================================== [ 747.717130][T13776] BUG: KASAN: slab-use-after-free in acpi_ns_get_attached_object+0x148/0x1b0 [ 747.717235][T13776] Read of size 1 at addr ffff88802223b7c0 by task syz.3.1787/13776 [ 747.717250][T13776] [ 747.717285][T13776] CPU: 0 UID: 0 PID: 13776 Comm: syz.3.1787 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.717311][T13776] Tainted: [L]=SOFTLOCKUP [ 747.717318][T13776] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 747.717330][T13776] Call Trace: [ 747.717362][T13776] [ 747.717370][T13776] dump_stack_lvl+0x100/0x190 [ 747.717397][T13776] print_report+0x13d/0x4b0 [ 747.717425][T13776] ? __virt_addr_valid+0x239/0x430 [ 747.717457][T13776] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 747.717479][T13776] kasan_report+0xdf/0x1c0 [ 747.717508][T13776] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 747.717534][T13776] acpi_ns_get_attached_object+0x148/0x1b0 [ 747.717557][T13776] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 747.717581][T13776] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 747.717599][T13776] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 747.717624][T13776] ? acpi_ds_create_operand+0x267/0xc20 [ 747.717652][T13776] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 747.717674][T13776] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 747.717696][T13776] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 747.717714][T13776] ? __asan_memset+0x23/0x50 [ 747.717733][T13776] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 747.717775][T13776] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 747.717802][T13776] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 747.717832][T13776] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 747.717859][T13776] ? acpi_ut_trace_ptr+0x141/0x2a0 [ 747.717879][T13776] acpi_ds_exec_end_op+0xb78/0x1e60 [ 747.717907][T13776] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 747.717934][T13776] acpi_ps_parse_loop+0x5e1/0x26e0 [ 747.717960][T13776] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 747.717977][T13776] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 747.717991][T13776] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 747.718016][T13776] ? acpi_ut_create_thread_state+0x6d/0x170 [ 747.718035][T13776] acpi_ps_parse_aml+0x81e/0x1120 [ 747.718052][T13776] acpi_ps_execute_method+0x5c4/0xe90 [ 747.718065][T13776] acpi_ns_evaluate+0x640/0x1670 [ 747.718078][T13776] acpi_ut_evaluate_object+0xf7/0x610 [ 747.718092][T13776] acpi_rs_get_prt_method_data+0xa0/0x150 [ 747.718105][T13776] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 747.718118][T13776] ? acpi_ut_status_exit+0x111/0x1c0 [ 747.718129][T13776] ? acpi_rs_validate_parameters+0x104/0x210 [ 747.718142][T13776] acpi_get_irq_routing_table+0xb8/0x140 [ 747.718155][T13776] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 747.718169][T13776] ? preempt_schedule_thunk+0x16/0x40 [ 747.718182][T13776] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 747.718197][T13776] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 747.718210][T13776] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 747.718245][T13776] ? pci_conf1_read+0x138/0x240 [ 747.718259][T13776] acpi_pci_irq_lookup+0x8e/0x6b0 [ 747.718275][T13776] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 747.718288][T13776] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 747.718300][T13776] ? __driver_probe_device+0x210/0x460 [ 747.718335][T13776] ? __device_attach_driver+0x1df/0x320 [ 747.718351][T13776] ? bus_for_each_drv+0x159/0x1e0 [ 747.718364][T13776] ? __device_attach+0x1e4/0x4c0 [ 747.718380][T13776] acpi_pci_irq_enable+0x1f5/0x6f0 [ 747.718393][T13776] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 747.718407][T13776] ? __pfx_pci_enable_resources+0x10/0x10 [ 747.718421][T13776] ? __pfx___pci_set_power_state+0x10/0x10 [ 747.718435][T13776] pcibios_enable_device+0xb6/0xe0 [ 747.718447][T13776] do_pci_enable_device+0x21f/0x4a0 [ 747.718458][T13776] ? __pfx_do_pci_enable_device+0x10/0x10 [ 747.718470][T13776] ? pci_update_current_state+0x102/0x240 [ 747.718481][T13776] ? __pfx_pci_update_current_state+0x10/0x10 [ 747.718491][T13776] ? ksm_scan_thread+0x2e10/0x6f90 [ 747.718505][T13776] ? __kasan_kmalloc+0xaa/0xb0 [ 747.718520][T13776] pci_enable_device_flags+0x27c/0x370 [ 747.718534][T13776] ? __pfx_virtio_pci_probe+0x10/0x10 [ 747.718547][T13776] virtio_pci_probe+0x1d5/0x410 [ 747.718559][T13776] local_pci_probe+0xdd/0x1b0 [ 747.718576][T13776] pci_call_probe+0x176/0x800 [ 747.718586][T13776] ? pci_match_device+0x147/0x7d0 [ 747.718596][T13776] ? __pfx_pci_call_probe+0x10/0x10 [ 747.718608][T13776] ? __pfx_pci_match_device+0x10/0x10 [ 747.718622][T13776] pci_device_probe+0x25b/0x400 [ 747.718633][T13776] ? __pfx_pci_device_probe+0x10/0x10 [ 747.718645][T13776] ? sysfs_create_link+0x68/0xc0 [ 747.718657][T13776] ? __pfx_pci_device_probe+0x10/0x10 [ 747.718668][T13776] really_probe+0x241/0xa60 [ 747.718685][T13776] __driver_probe_device+0x210/0x460 [ 747.718701][T13776] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 747.718714][T13776] driver_probe_device+0x4a/0x140 [ 747.718730][T13776] __device_attach_driver+0x1df/0x320 [ 747.718747][T13776] ? __pfx___device_attach_driver+0x10/0x10 [ 747.718763][T13776] bus_for_each_drv+0x159/0x1e0 [ 747.718777][T13776] ? __pfx_bus_for_each_drv+0x10/0x10 [ 747.718790][T13776] ? lockdep_hardirqs_on+0x7d/0x110 [ 747.718803][T13776] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 747.718816][T13776] __device_attach+0x1e4/0x4c0 [ 747.718832][T13776] ? __pfx___device_attach+0x10/0x10 [ 747.718848][T13776] ? do_raw_spin_unlock+0x53/0x1e0 [ 747.718860][T13776] ? do_raw_spin_unlock+0x145/0x1e0 [ 747.718873][T13776] device_initial_probe+0xaf/0xf0 [ 747.718884][T13776] pci_bus_add_device+0xc5/0x100 [ 747.718898][T13776] pci_bus_add_devices+0x9a/0x1f0 [ 747.718912][T13776] pci_rescan_bus+0x2a/0x40 [ 747.718922][T13776] rescan_store+0xfb/0x130 [ 747.718933][T13776] ? __pfx_rescan_store+0x10/0x10 [ 747.718943][T13776] ? sysfs_file_kobj+0xe4/0x290 [ 747.718959][T13776] ? __pfx_rescan_store+0x10/0x10 [ 747.718969][T13776] bus_attr_store+0x74/0xb0 [ 747.718981][T13776] ? __pfx_bus_attr_store+0x10/0x10 [ 747.718993][T13776] sysfs_kf_write+0xf2/0x150 [ 747.719008][T13776] kernfs_fop_write_iter+0x3e0/0x5f0 [ 747.719022][T13776] ? __pfx_sysfs_kf_write+0x10/0x10 [ 747.719038][T13776] vfs_write+0x6af/0x1050 [ 747.719052][T13776] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 747.719067][T13776] ? __pfx_vfs_write+0x10/0x10 [ 747.719080][T13776] ? find_held_lock+0x2b/0x80 [ 747.719097][T13776] ksys_write+0x12a/0x250 [ 747.719110][T13776] ? __pfx_ksys_write+0x10/0x10 [ 747.719126][T13776] __do_fast_syscall_32+0x14b/0x8c0 [ 747.719140][T13776] ? lockdep_hardirqs_on+0x7d/0x110 [ 747.719153][T13776] do_fast_syscall_32+0x32/0x70 [ 747.719167][T13776] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 747.719182][T13776] RIP: 0023:0xf744efbc [ 747.719191][T13776] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 747.719202][T13776] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 747.719213][T13776] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000700 [ 747.719220][T13776] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 747.719227][T13776] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 747.719233][T13776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.719240][T13776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 747.719250][T13776] [ 747.719254][T13776] [ 747.719257][T13776] Allocated by task 1: [ 747.719262][T13776] kasan_save_stack+0x30/0x50 [ 747.719279][T13776] kasan_save_track+0x14/0x30 [ 747.719292][T13776] __kasan_slab_alloc+0x89/0x90 [ 747.719306][T13776] kmem_cache_alloc_noprof+0x269/0x6a0 [ 747.719319][T13776] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 747.719334][T13776] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 747.719348][T13776] acpi_ds_build_internal_object+0x173/0x790 [ 747.719362][T13776] acpi_ds_create_node+0xe3/0x280 [ 747.719375][T13776] acpi_ds_exec_end_op+0x10cf/0x1e60 [ 747.719390][T13776] acpi_ps_parse_loop+0x5e1/0x26e0 [ 747.719405][T13776] acpi_ps_parse_aml+0x81e/0x1120 [ 747.719420][T13776] acpi_ps_execute_table+0x393/0x500 [ 747.719430][T13776] acpi_ns_execute_table+0x596/0x970 [ 747.719442][T13776] acpi_ns_parse_table+0xcb/0x160 [ 747.719453][T13776] acpi_ns_load_table+0xc9/0x490 [ 747.719463][T13776] acpi_tb_load_namespace+0x2b0/0x8f0 [ 747.719478][T13776] acpi_load_tables+0x89/0x160 [ 747.719488][T13776] acpi_init+0x146/0x840 [ 747.719503][T13776] do_one_initcall+0x11c/0x6f0 [ 747.719512][T13776] kernel_init_freeable+0x6ea/0x7b0 [ 747.719524][T13776] kernel_init+0x21/0x1d0 [ 747.719538][T13776] ret_from_fork+0x730/0xd60 [ 747.719548][T13776] ret_from_fork_asm+0x1a/0x30 [ 747.719558][T13776] [ 747.719560][T13776] Freed by task 7397: [ 747.719573][T13776] kasan_save_stack+0x30/0x50 [ 747.719586][T13776] kasan_save_track+0x14/0x30 [ 747.719599][T13776] kasan_save_free_info+0x3b/0x70 [ 747.719609][T13776] __kasan_slab_free+0x5f/0x80 [ 747.719623][T13776] kmem_cache_free+0x127/0x6c0 [ 747.719633][T13776] acpi_os_release_object+0x1c/0x30 [ 747.719644][T13776] acpi_ut_delete_object_desc+0xea/0x130 [ 747.719658][T13776] acpi_ut_update_ref_count.part.0+0x510/0x2250 [ 747.719669][T13776] acpi_ut_update_object_reference+0x5f9/0x800 [ 747.719681][T13776] acpi_ut_remove_reference+0x192/0x1d0 [ 747.719692][T13776] acpi_rs_get_prt_method_data+0xcd/0x150 [ 747.719703][T13776] acpi_get_irq_routing_table+0xb8/0x140 [ 747.719715][T13776] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 747.719727][T13776] acpi_pci_irq_lookup+0x8e/0x6b0 [ 747.719738][T13776] acpi_pci_irq_disable+0x1a8/0x360 [ 747.719749][T13776] pcibios_disable_device+0x89/0xb0 [ 747.719760][T13776] do_pci_disable_device+0x9f/0x100 [ 747.719770][T13776] pci_disable_device+0x130/0x270 [ 747.719780][T13776] virtio_pci_remove+0xcf/0x110 [ 747.719791][T13776] pci_device_remove+0xb2/0x1d0 [ 747.719806][T13776] device_remove+0xcb/0x180 [ 747.719820][T13776] device_release_driver_internal+0x441/0x610 [ 747.719830][T13776] pci_stop_bus_device+0x120/0x160 [ 747.719840][T13776] pci_stop_and_remove_bus_device+0x58/0xa0 [ 747.719850][T13776] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 747.719862][T13776] remove_store+0x123/0x140 [ 747.719873][T13776] dev_attr_store+0x58/0x80 [ 747.719883][T13776] sysfs_kf_write+0xf2/0x150 [ 747.719897][T13776] kernfs_fop_write_iter+0x3e0/0x5f0 [ 747.719910][T13776] vfs_write+0x6af/0x1050 [ 747.719922][T13776] ksys_write+0x12a/0x250 [ 747.719934][T13776] __do_fast_syscall_32+0x14b/0x8c0 [ 747.719947][T13776] do_fast_syscall_32+0x32/0x70 [ 747.719960][T13776] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 747.719972][T13776] [ 747.719975][T13776] The buggy address belongs to the object at ffff88802223b7b8 [ 747.719975][T13776] which belongs to the cache Acpi-Operand of size 72 [ 747.719983][T13776] The buggy address is located 8 bytes inside of [ 747.719983][T13776] freed 72-byte region [ffff88802223b7b8, ffff88802223b800) [ 747.719993][T13776] [ 747.719996][T13776] The buggy address belongs to the physical page: [ 747.720000][T13776] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802223b888 pfn:0x2223b [ 747.720011][T13776] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 747.720022][T13776] page_type: f5(slab) [ 747.720031][T13776] raw: 00fff00000000200 ffff88801d44da40 ffffea0000889a10 ffffea00008932d0 [ 747.720044][T13776] raw: ffff88802223b888 000000020027001d 00000000f5000000 0000000000000000 [ 747.720050][T13776] page dumped because: kasan: bad access detected [ 747.720077][T13776] page_owner tracks the page as allocated [ 747.720082][T13776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2565468900 [ 747.720100][T13776] post_alloc_hook+0xfd/0x120 [ 747.720110][T13776] get_page_from_freelist+0x1113/0x35e0 [ 747.720121][T13776] __alloc_frozen_pages_noprof+0x2f6/0x3190 [ 747.720133][T13776] new_slab+0xb1/0x6d0 [ 747.720142][T13776] refill_objects+0xe3/0x410 [ 747.720153][T13776] __pcs_replace_empty_main+0x35e/0x650 [ 747.720163][T13776] kmem_cache_alloc_noprof+0x4bf/0x6a0 [ 747.720175][T13776] acpi_ut_allocate_object_desc_dbg+0x86/0x240 [ 747.720190][T13776] acpi_ut_create_internal_object_dbg+0x51/0x260 [ 747.720204][T13776] acpi_ds_build_internal_object+0x173/0x790 [ 747.720218][T13776] acpi_ds_build_internal_package_obj+0x481/0xe60 [ 747.720233][T13776] acpi_ds_eval_data_object_operands+0x2fd/0x640 [ 747.720248][T13776] acpi_ds_exec_end_op+0xe41/0x1e60 [ 747.720262][T13776] acpi_ps_parse_loop+0x5e1/0x26e0 [ 747.720281][T13776] acpi_ps_parse_aml+0x81e/0x1120 [ 747.720296][T13776] acpi_ps_execute_table+0x393/0x500 [ 747.720306][T13776] page_owner free stack trace missing [ 747.720310][T13776] [ 747.720312][T13776] Memory state around the buggy address: [ 747.720317][T13776] ffff88802223b680: 00 00 00 00 00 00 00 00 00 fc fc fc fc 00 00 00 [ 747.720324][T13776] ffff88802223b700: 00 00 00 00 00 00 fc fc fc fc fa fb fb fb fb fb [ 747.720331][T13776] >ffff88802223b780: fb fb fb fc fc fc fc fa fb fb fb fb fb fb fb fb [ 747.720337][T13776] ^ [ 747.720343][T13776] ffff88802223b800: fc fc fc fc fa fb fb fb fb fb fb fb fb fc fc fc [ 747.720350][T13776] ffff88802223b880: fc fa fb fb fb fb fb fb fb fb fc fc fc fc fa fb [ 747.720355][T13776] ================================================================== [ 747.720744][T13776] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 748.168680][T13776] CPU: 0 UID: 0 PID: 13776 Comm: syz.3.1787 Tainted: G L syzkaller #0 PREEMPT(full) [ 748.173201][T13776] Tainted: [L]=SOFTLOCKUP [ 748.175012][T13776] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 748.179168][T13776] Call Trace: [ 748.180656][T13776] [ 748.181931][T13776] dump_stack_lvl+0x100/0x190 [ 748.183906][T13776] vpanic+0x553/0x970 [ 748.185603][T13776] ? __pfx_vpanic+0x10/0x10 [ 748.187507][T13776] ? mark_held_locks+0x40/0x70 [ 748.189514][T13776] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 748.192010][T13776] panic+0xd1/0xe0 [ 748.193616][T13776] ? __pfx_panic+0x10/0x10 [ 748.195521][T13776] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 748.197404][T13776] ? preempt_schedule+0x57/0xd0 [ 748.198932][T13776] check_panic_on_warn.cold+0x19/0x34 [ 748.200601][T13776] end_report.part.0+0x3a/0x90 [ 748.202116][T13776] kasan_report.cold+0xe/0x18 [ 748.203590][T13776] ? acpi_ns_get_attached_object+0x148/0x1b0 [ 748.205506][T13776] acpi_ns_get_attached_object+0x148/0x1b0 [ 748.207333][T13776] acpi_ex_resolve_node_to_value+0xb7/0x9a0 [ 748.209179][T13776] ? acpi_ut_trace_ptr+0x1d2/0x2a0 [ 748.210767][T13776] ? __pfx_acpi_ex_resolve_node_to_value+0x10/0x10 [ 748.212760][T13776] ? acpi_ds_create_operand+0x267/0xc20 [ 748.214499][T13776] acpi_ex_resolve_to_value+0x3da/0xcd0 [ 748.216538][T13776] ? __pfx_acpi_ex_resolve_to_value+0x10/0x10 [ 748.218754][T13776] ? __pfx_acpi_ns_lookup+0x10/0x10 [ 748.220360][T13776] ? __asan_memset+0x23/0x50 [ 748.221815][T13776] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 748.223662][T13776] acpi_ds_evaluate_name_path+0x30d/0x4a0 [ 748.225459][T13776] ? __pfx_acpi_ds_evaluate_name_path+0x10/0x10 [ 748.227492][T13776] ? acpi_ps_get_next_namepath+0x1f6/0xa10 [ 748.229288][T13776] ? acpi_ut_trace_ptr+0x141/0x2a0 [ 748.230921][T13776] acpi_ds_exec_end_op+0xb78/0x1e60 [ 748.232528][T13776] ? __pfx_acpi_ds_exec_end_op+0x10/0x10 [ 748.234421][T13776] acpi_ps_parse_loop+0x5e1/0x26e0 [ 748.236546][T13776] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 748.238840][T13776] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 748.241187][T13776] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 748.243699][T13776] ? acpi_ut_create_thread_state+0x6d/0x170 [ 748.246213][T13776] acpi_ps_parse_aml+0x81e/0x1120 [ 748.248368][T13776] acpi_ps_execute_method+0x5c4/0xe90 [ 748.250601][T13776] acpi_ns_evaluate+0x640/0x1670 [ 748.252663][T13776] acpi_ut_evaluate_object+0xf7/0x610 [ 748.254925][T13776] acpi_rs_get_prt_method_data+0xa0/0x150 [ 748.257212][T13776] ? __pfx_acpi_rs_get_prt_method_data+0x10/0x10 [ 748.259808][T13776] ? acpi_ut_status_exit+0x111/0x1c0 [ 748.261959][T13776] ? acpi_rs_validate_parameters+0x104/0x210 [ 748.264359][T13776] acpi_get_irq_routing_table+0xb8/0x140 [ 748.266681][T13776] ? __pfx_acpi_get_irq_routing_table+0x10/0x10 [ 748.268626][T13776] ? preempt_schedule_thunk+0x16/0x40 [ 748.270271][T13776] acpi_pci_irq_find_prt_entry+0x178/0xdd0 [ 748.271967][T13776] ? __pfx_acpi_pci_irq_find_prt_entry+0x10/0x10 [ 748.273926][T13776] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 748.275790][T13776] ? pci_conf1_read+0x138/0x240 [ 748.277301][T13776] acpi_pci_irq_lookup+0x8e/0x6b0 [ 748.278871][T13776] ? __pfx_acpi_pci_irq_lookup+0x10/0x10 [ 748.280766][T13776] ? __pfx_pci_bus_read_config_word+0x10/0x10 [ 748.283329][T13776] ? __driver_probe_device+0x210/0x460 [ 748.285550][T13776] ? __device_attach_driver+0x1df/0x320 [ 748.287890][T13776] ? bus_for_each_drv+0x159/0x1e0 [ 748.290023][T13776] ? __device_attach+0x1e4/0x4c0 [ 748.292098][T13776] acpi_pci_irq_enable+0x1f5/0x6f0 [ 748.294236][T13776] ? __pfx_acpi_pci_irq_enable+0x10/0x10 [ 748.296580][T13776] ? __pfx_pci_enable_resources+0x10/0x10 [ 748.298946][T13776] ? __pfx___pci_set_power_state+0x10/0x10 [ 748.301378][T13776] pcibios_enable_device+0xb6/0xe0 [ 748.303521][T13776] do_pci_enable_device+0x21f/0x4a0 [ 748.305721][T13776] ? __pfx_do_pci_enable_device+0x10/0x10 [ 748.308149][T13776] ? pci_update_current_state+0x102/0x240 [ 748.310580][T13776] ? __pfx_pci_update_current_state+0x10/0x10 [ 748.313018][T13776] ? ksm_scan_thread+0x2e10/0x6f90 [ 748.314618][T13776] ? __kasan_kmalloc+0xaa/0xb0 [ 748.316154][T13776] pci_enable_device_flags+0x27c/0x370 [ 748.317874][T13776] ? __pfx_virtio_pci_probe+0x10/0x10 [ 748.319542][T13776] virtio_pci_probe+0x1d5/0x410 [ 748.321054][T13776] local_pci_probe+0xdd/0x1b0 [ 748.322572][T13776] pci_call_probe+0x176/0x800 [ 748.324042][T13776] ? pci_match_device+0x147/0x7d0 [ 748.325635][T13776] ? __pfx_pci_call_probe+0x10/0x10 [ 748.327203][T13776] ? __pfx_pci_match_device+0x10/0x10 [ 748.328865][T13776] pci_device_probe+0x25b/0x400 [ 748.330413][T13776] ? __pfx_pci_device_probe+0x10/0x10 [ 748.332447][T13776] ? sysfs_create_link+0x68/0xc0 [ 748.334390][T13776] ? __pfx_pci_device_probe+0x10/0x10 [ 748.336591][T13776] really_probe+0x241/0xa60 [ 748.338111][T13776] __driver_probe_device+0x210/0x460 [ 748.339751][T13776] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 748.341566][T13776] driver_probe_device+0x4a/0x140 [ 748.343140][T13776] __device_attach_driver+0x1df/0x320 [ 748.344815][T13776] ? __pfx___device_attach_driver+0x10/0x10 [ 748.346815][T13776] bus_for_each_drv+0x159/0x1e0 [ 748.348358][T13776] ? __pfx_bus_for_each_drv+0x10/0x10 [ 748.350028][T13776] ? lockdep_hardirqs_on+0x7d/0x110 [ 748.351954][T13776] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 748.354428][T13776] __device_attach+0x1e4/0x4c0 [ 748.356473][T13776] ? __pfx___device_attach+0x10/0x10 [ 748.358705][T13776] ? do_raw_spin_unlock+0x53/0x1e0 [ 748.360836][T13776] ? do_raw_spin_unlock+0x145/0x1e0 [ 748.363029][T13776] device_initial_probe+0xaf/0xf0 [ 748.365125][T13776] pci_bus_add_device+0xc5/0x100 [ 748.367220][T13776] pci_bus_add_devices+0x9a/0x1f0 [ 748.369333][T13776] pci_rescan_bus+0x2a/0x40 [ 748.371222][T13776] rescan_store+0xfb/0x130 [ 748.373088][T13776] ? __pfx_rescan_store+0x10/0x10 [ 748.375172][T13776] ? sysfs_file_kobj+0xe4/0x290 [ 748.377235][T13776] ? __pfx_rescan_store+0x10/0x10 [ 748.379380][T13776] bus_attr_store+0x74/0xb0 [ 748.381018][T13776] ? __pfx_bus_attr_store+0x10/0x10 [ 748.382645][T13776] sysfs_kf_write+0xf2/0x150 [ 748.384084][T13776] kernfs_fop_write_iter+0x3e0/0x5f0 [ 748.385768][T13776] ? __pfx_sysfs_kf_write+0x10/0x10 [ 748.387378][T13776] vfs_write+0x6af/0x1050 [ 748.388722][T13776] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 748.390531][T13776] ? __pfx_vfs_write+0x10/0x10 [ 748.392026][T13776] ? find_held_lock+0x2b/0x80 [ 748.393507][T13776] ksys_write+0x12a/0x250 [ 748.394883][T13776] ? __pfx_ksys_write+0x10/0x10 [ 748.396426][T13776] __do_fast_syscall_32+0x14b/0x8c0 [ 748.398051][T13776] ? lockdep_hardirqs_on+0x7d/0x110 [ 748.399664][T13776] do_fast_syscall_32+0x32/0x70 [ 748.401171][T13776] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 748.403135][T13776] RIP: 0023:0xf744efbc [ 748.404422][T13776] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 748.410669][T13776] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 748.414053][T13776] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000700 [ 748.417357][T13776] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 748.420625][T13776] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 748.423899][T13776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.427214][T13776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 748.430491][T13776] [ 748.432746][T13776] Kernel Offset: disabled [ 748.434537][T13776] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:58:56 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85bd94c5 RDI=ffffffff9cf1d7e0 RBP=ffffffff9cf1d7a0 RSP=ffffc90003c0e4b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000032 R14=0000000000000007 R15=ffffc90003c0e7d0 RIP=ffffffff85bd94ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88809529c000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000556d2294a810 CR3=000000005c306000 CR4=00352ef0 DR0=0000000008000003 DR1=00000000000001f8 DR2=0000000000000086 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000004 RBX=ffff8880264556b0 RCX=ffffffff8215e2df RDX=0000000000000002 RSI=0000000000000002 RDI=ffff888026454b00 RBP=0000000000000000 RSP=ffffc90006a7fab0 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=0000000000000002 R13=ffff888026454b00 R14=ffff88805bec2f88 R15=0000000000000001 RIP=ffffffff81e88b01 RFL=00000013 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809539c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080008000 CR3=000000005c306000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffffff90dfc700 RCX=0000000000000001 RDX=ffff88801ebca580 RSI=ffffffff81eba3cc RDI=ffffffff8c832a40 RBP=0000000000000000 RSP=ffffc900006af938 R8 =0000000000000000 R9 =fffffbfff21bf8e0 R10=ffffffff90dfc703 R11=3d3d3d3d3d3d3d3d R12=ffffffff90dfc660 R13=ffffc900006afda8 R14=0000000000000000 R15=ffffc900006afdb4 RIP=ffffffff820d8c90 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809549c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f53a4ff4 CR3=000000006a844000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000100000 RBX=ffff8880422b1440 RCX=0000000000000014 RDX=ffff888022904b00 RSI=ffffc90000415134 RDI=ffff888022904b00 RBP=ffff88802a109038 RSP=ffffc900044bf048 R8 =0000000000000005 R9 =000000000000001f R10=0000000000000014 R11=0000000000000001 R12=ffffc90000415100 R13=ffff8880422b149c R14=ffff8880422b1448 R15=0000000000000014 RIP=ffffffff86cede3f RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa10299c300 ffffffff 00c00000 GS =0000 ffff88809559c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000563b7bea7f40 CR3=000000004c6ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=c3129a71ecbc9801 f420a0d6fe22bd7b c3129a71ecbc9801 f420a0d6fe22bd7b c3129a71ecbc9801 f420a0d6fe22bd7b c3129a71ecbc9801 f420a0d6fe22bd7b ZMM18=31f2676fa5e28b30 8fd1446ad1754a44 31f2676fa5e28b30 8fd1446ad1754a44 31f2676fa5e28b30 8fd1446ad1754a44 31f2676fa5e28b30 8fd1446ad1754a44 ZMM19=8716000000000000 0000000000000004 8716000000000000 0000000000000003 8716000000000000 0000000000000002 8716000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bf1cffffffff81b0 bf10ffffffff81b0 beccffffffff81b0 bec0ffffffff81b0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 be6bffffffff81af fa9affffffff81af fa6b0000026a0300 0000000013600000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000cffffc4840000 0000ffffffff852e c651ffffffff852e ae7effffffff852e ZMM24=7342010073420100 7342010073420100 7342010073420100 7342010073420100 7342010073420100 7342010073420100 7342010073420100 7342010073420100 ZMM25=4314513143145131 4314513143145131 4314513143145131 4314513143145131 4314513143145131 4314513143145131 4314513143145131 4314513143145131 ZMM26=d95c69d7d95c69d7 d95c69d7d95c69d7 d95c69d7d95c69d7 d95c69d7d95c69d7 d95c69d7d95c69d7 d95c69d7d95c69d7 d95c69d7d95c69d7 d95c69d7d95c69d7 ZMM27=fd1f18befd1f18be fd1f18befd1f18be fd1f18befd1f18be fd1f18befd1f18be fd1f18befd1f18be fd1f18befd1f18be fd1f18befd1f18be fd1f18befd1f18be ZMM28=000001300000012f 0000012e0000012d 0000012c0000012b 0000012a00000129 0000012800000127 0000012600000125 0000012400000123 0000012200000121 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9e2900009e290000 9e2900009e290000 9e2900009e290000 9e2900009e290000 9e2900009e290000 9e2900009e290000 9e2900009e290000 9e2900009e290000