last executing test programs: 9.513508947s ago: executing program 0 (id=1330): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000214000000110001"], 0x7c}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2, 0xfd, 0x2}]}, 0x10) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa0000001}, 0xc, &(0x7f0000000180)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4004004) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000005b42"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a01040000000000000000020000055c0004802c0001800b0001006e756d67656e00001c0002800800014000000003080002400000005008000340000000002c0001800b00010065787468647200001c0002800800044000000077080004400000003a08000540000000010900010073797a30000000000900020073797a3200ba903b21697a89284608ad000000140000001100010000"], 0xb0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) bind$alg(r1, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 6.358749665s ago: executing program 3 (id=1339): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc", 0x7c}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b3", 0xb8}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.013397822s ago: executing program 3 (id=1341): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r4, 0x100, 0x0) 5.916640095s ago: executing program 0 (id=1343): shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/148) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2c2000e652fe85faecfcbd3d9ebca0b3ff09000000000000001800cbe4dc1cdc493fc688986bfddaa6485c520e8f15b9acb5fc13392831181ff7e18ecbd703ed17259d6585f73d8d34676c0ccced68b853", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x20040011}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x26020480) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r4 = fsopen(&(0x7f0000000080)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5.754505789s ago: executing program 1 (id=1344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) 4.4696038s ago: executing program 3 (id=1345): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000100)={r5}) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 4.256848585s ago: executing program 0 (id=1347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, &(0x7f00000008c0)=[@iv={0x28, 0x117, 0x2, 0x14, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x40, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579", 0x16}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.224023766s ago: executing program 2 (id=1348): sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x88804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae00", @ANYRESOCT], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f40600", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.141598168s ago: executing program 1 (id=1349): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r0, &(0x7f0000000800)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/module/kvm/parameters/nx_huge_pages_recovery_ratio\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r2, &(0x7f0000000600)='1\x00', 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@code={0xa, 0x15, {"90909090"}}, @uexit={0x0, 0x18, 0xaaaa}], 0x2d}) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.993443832s ago: executing program 2 (id=1350): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11", 0x57}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc", 0x7c}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b3", 0xb8}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.869177615s ago: executing program 1 (id=1351): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000214000000110001"], 0x7c}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2, 0xfd, 0x2}]}, 0x10) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa0000001}, 0xc, &(0x7f0000000180)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4004004) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000005b42"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a01040000000000000000020000055c0004802c0001800b0001006e756d67656e00001c0002800800014000000003080002400000005008000340000000002c0001800b00010065787468647200001c0002800800044000000077080004400000003a08000540000000010900010073797a30000000000900020073797a3200ba903b21697a89284608ad000000140000001100010000"], 0xb0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) bind$alg(r1, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 3.501549934s ago: executing program 2 (id=1352): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, 0x0}) capset(&(0x7f0000000080)={0x20071026, r1}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f00000066c0)=[{&(0x7f0000005380)=""/219, 0xdb}, {0x0}, {0x0}, {0x0}, {&(0x7f0000006580)=""/134, 0x86}, {&(0x7f0000006640)=""/126, 0x7e}], 0x6}, 0x9a9}], 0x1, 0x21, 0x0) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) 2.484388699s ago: executing program 2 (id=1353): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2.42876721s ago: executing program 3 (id=1354): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffff7fa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa50003d1) readv(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) 2.334208183s ago: executing program 0 (id=1355): shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/148) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2c2000e652fe85faecfcbd3d9ebca0b3ff09000000000000001800cbe4dc1cdc493fc688986bfddaa6485c520e8f15b9acb5fc13392831181ff7e18ecbd703ed17259d6585f73d8d34676c0ccced68b853", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x20040011}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x26020480) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r4 = fsopen(&(0x7f0000000080)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.654576529s ago: executing program 2 (id=1356): mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000240)='10', 0x2) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = shmget$private(0x0, 0x400000, 0x80, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 1.593698041s ago: executing program 3 (id=1357): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) 1.592881471s ago: executing program 1 (id=1358): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r6 = add_key(&(0x7f0000000000)='id_resolver\x00', 0x0, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000180)=""/94, 0x2000, 0x800, 0x8000, 0x3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 609.569125ms ago: executing program 1 (id=1359): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r0, &(0x7f0000000800)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/module/kvm/parameters/nx_huge_pages_recovery_ratio\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r2, &(0x7f0000000600)='1\x00', 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@code={0xa, 0x15, {"90909090"}}, @uexit={0x0, 0x18, 0xaaaa}], 0x2d}) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 608.725225ms ago: executing program 0 (id=1360): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11", 0x57}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc", 0x7c}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b3", 0xb8}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 553.893566ms ago: executing program 2 (id=1361): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) capset(0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f00000066c0)=[{&(0x7f0000005380)=""/219, 0xdb}, {0x0}, {0x0}, {0x0}, {&(0x7f0000006580)=""/134, 0x86}, {&(0x7f0000006640)=""/126, 0x7e}], 0x6}, 0x9a9}], 0x1, 0x21, 0x0) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) 553.355796ms ago: executing program 3 (id=1362): r0 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) r1 = fsopen(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = fsmount(r1, 0x0, 0x2) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) listen(r4, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000001e00010000000000000000000700000088d9b338b39b490c4549914f6b3b0d4a70f1f3a9f8469dd0892658dd968c949164fef46b735a6e994002014b7cb201ebd891f92f4e97a2045553d895bf5c5f8121721cc85ec838e8e24e73f14709e08eac032e6d293635", @ANYRES32=r8, @ANYBLOB="000002000a000200aaaaaaaaaabb0000"], 0x28}}, 0x4000800) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) sendmsg$inet(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r10, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r10, 0x0, 0x0, 0x80, 0x0, 0x0) r11 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$nl_crypto(r11, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@getstat={0xe0, 0x15, 0x2, 0x70bd28, 0x25dfdbfd, {{'aegis256-aesni\x00'}, '\x00', '\x00', 0x400, 0x2400}, ["", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0xf2901ca589b3d74b}, 0x4) poll(&(0x7f0000000140)=[{r0, 0x8}], 0x1, 0x400) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) 196.322604ms ago: executing program 1 (id=1363): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 0 (id=1364): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. [ 77.298250][ T5764] cgroup: Unknown subsys name 'net' [ 77.444883][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.121484][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.721932][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.730934][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.740657][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.749515][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.749567][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.765146][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.774602][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.774628][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.783199][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.797885][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.798086][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.805986][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.821353][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.822606][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.829390][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.836700][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.843083][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.851873][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.858915][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.864728][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.872087][ T5087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.878426][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.886952][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.905532][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.383899][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 81.414079][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 81.473199][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 81.547751][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 81.669459][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.680024][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.687527][ T5777] bridge_slave_0: entered allmulticast mode [ 81.694526][ T5777] bridge_slave_0: entered promiscuous mode [ 81.705771][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.713238][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.720664][ T5777] bridge_slave_1: entered allmulticast mode [ 81.727642][ T5777] bridge_slave_1: entered promiscuous mode [ 81.747942][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.755249][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.762944][ T5776] bridge_slave_0: entered allmulticast mode [ 81.770875][ T5776] bridge_slave_0: entered promiscuous mode [ 81.807684][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.815127][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.822779][ T5776] bridge_slave_1: entered allmulticast mode [ 81.830371][ T5776] bridge_slave_1: entered promiscuous mode [ 81.862856][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.885672][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.922102][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.929684][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.937856][ T5778] bridge_slave_0: entered allmulticast mode [ 81.944733][ T5778] bridge_slave_0: entered promiscuous mode [ 81.952990][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.960530][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.968032][ T5778] bridge_slave_1: entered allmulticast mode [ 81.974946][ T5778] bridge_slave_1: entered promiscuous mode [ 82.017199][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.036891][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.044162][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.054166][ T5779] bridge_slave_0: entered allmulticast mode [ 82.061552][ T5779] bridge_slave_0: entered promiscuous mode [ 82.070652][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.078143][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.085346][ T5779] bridge_slave_1: entered allmulticast mode [ 82.092494][ T5779] bridge_slave_1: entered promiscuous mode [ 82.102374][ T5777] team0: Port device team_slave_0 added [ 82.113824][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.136875][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.159433][ T5777] team0: Port device team_slave_1 added [ 82.190352][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.224312][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.244925][ T5776] team0: Port device team_slave_0 added [ 82.264275][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.286350][ T5776] team0: Port device team_slave_1 added [ 82.294529][ T5778] team0: Port device team_slave_0 added [ 82.327904][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.334934][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.361373][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.384918][ T5778] team0: Port device team_slave_1 added [ 82.393763][ T5779] team0: Port device team_slave_0 added [ 82.403430][ T5779] team0: Port device team_slave_1 added [ 82.409947][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.417975][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.444334][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.476436][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.483459][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.509941][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.561541][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.568755][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.595425][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.610358][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.622629][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.649626][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.677763][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.684758][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.711192][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.723227][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.731008][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.757632][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.813742][ T5777] hsr_slave_0: entered promiscuous mode [ 82.820258][ T5777] hsr_slave_1: entered promiscuous mode [ 82.830731][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.837964][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.866969][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.914405][ T5776] hsr_slave_0: entered promiscuous mode [ 82.921831][ T5776] hsr_slave_1: entered promiscuous mode [ 82.929807][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.938255][ T5788] Bluetooth: hci3: command tx timeout [ 82.938635][ T5776] Cannot create hsr debugfs directory [ 82.944045][ T5788] Bluetooth: hci2: command tx timeout [ 82.949761][ T5780] Bluetooth: hci1: command tx timeout [ 82.961642][ T5791] Bluetooth: hci0: command tx timeout [ 82.976283][ T5778] hsr_slave_0: entered promiscuous mode [ 82.982644][ T5778] hsr_slave_1: entered promiscuous mode [ 82.988900][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.996518][ T5778] Cannot create hsr debugfs directory [ 83.019995][ T5779] hsr_slave_0: entered promiscuous mode [ 83.028307][ T5779] hsr_slave_1: entered promiscuous mode [ 83.034680][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.042644][ T5779] Cannot create hsr debugfs directory [ 83.481219][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.495201][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.508770][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.523082][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.598540][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.618083][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.628649][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.643793][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.729012][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.741937][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.752272][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.766889][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.884108][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.895236][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.911115][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.924695][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.028836][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.081132][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.107947][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.125763][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.162537][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.169941][ T2897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.183533][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.213515][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.220702][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.237745][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.251196][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.258367][ T2897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.272817][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.280215][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.312964][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.320306][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.349154][ T2897] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.356515][ T2897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.379999][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.437985][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.465339][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.472511][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.497737][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.504889][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.565272][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.615211][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.752553][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.957180][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.017190][ T5780] Bluetooth: hci2: command tx timeout [ 85.022678][ T5780] Bluetooth: hci1: command tx timeout [ 85.029172][ T51] Bluetooth: hci3: command tx timeout [ 85.034899][ T5791] Bluetooth: hci0: command tx timeout [ 85.105946][ T5776] veth0_vlan: entered promiscuous mode [ 85.162289][ T5776] veth1_vlan: entered promiscuous mode [ 85.252206][ T5776] veth0_macvtap: entered promiscuous mode [ 85.264515][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.279684][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.291689][ T5776] veth1_macvtap: entered promiscuous mode [ 85.304358][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.338719][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.352204][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.388632][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.401587][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.410999][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.420968][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.518058][ T5777] veth0_vlan: entered promiscuous mode [ 85.531904][ T5779] veth0_vlan: entered promiscuous mode [ 85.557241][ T5777] veth1_vlan: entered promiscuous mode [ 85.571702][ T5778] veth0_vlan: entered promiscuous mode [ 85.588298][ T5778] veth1_vlan: entered promiscuous mode [ 85.605298][ T5779] veth1_vlan: entered promiscuous mode [ 85.694638][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.711635][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.725397][ T5777] veth0_macvtap: entered promiscuous mode [ 85.740869][ T5778] veth0_macvtap: entered promiscuous mode [ 85.768824][ T5777] veth1_macvtap: entered promiscuous mode [ 85.778753][ T5779] veth0_macvtap: entered promiscuous mode [ 85.789792][ T5778] veth1_macvtap: entered promiscuous mode [ 85.811480][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.818466][ T5779] veth1_macvtap: entered promiscuous mode [ 85.824020][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.842264][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.855360][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.868285][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.900893][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.913301][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.925815][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.945131][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.958416][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.968646][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.979474][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.991401][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.010347][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.026282][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.037720][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.048738][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.059836][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.071661][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.083094][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.093443][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.104763][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.114247][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.123288][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.139071][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.149958][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.159975][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.171310][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.190048][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.209922][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.228696][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.242820][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.255120][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.284832][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.296842][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.311696][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.323031][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.334654][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.344683][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.355816][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.391998][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.406696][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.416616][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.425686][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.513336][ T5842] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.645593][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.662889][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.743946][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.769199][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.809817][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.828287][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.828416][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.845787][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.097387][ T5791] Bluetooth: hci0: command tx timeout [ 87.102964][ T5791] Bluetooth: hci1: command tx timeout [ 87.109064][ T5791] Bluetooth: hci3: command tx timeout [ 87.114492][ T5791] Bluetooth: hci2: command tx timeout [ 87.150594][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.174295][ T5846] capability: warning: `syz.0.6' uses deprecated v2 capabilities in a way that may be insecure [ 87.196632][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.217067][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.225140][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.512351][ T5849] hsr0 speed is unknown, defaulting to 1000 [ 87.519694][ T5849] hsr0 speed is unknown, defaulting to 1000 [ 87.536768][ T5849] hsr0 speed is unknown, defaulting to 1000 [ 87.579298][ T5849] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 87.639235][ T5849] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 88.007685][ T5849] hsr0 speed is unknown, defaulting to 1000 [ 88.041313][ T5849] hsr0 speed is unknown, defaulting to 1000 [ 88.053296][ T5849] hsr0 speed is unknown, defaulting to 1000 [ 88.071721][ T5849] hsr0 speed is unknown, defaulting to 1000 [ 88.340285][ T5854] syzkaller0: entered promiscuous mode [ 88.356637][ T5854] syzkaller0: entered allmulticast mode [ 89.186527][ T5780] Bluetooth: hci2: command tx timeout [ 89.192228][ T5780] Bluetooth: hci3: command tx timeout [ 89.199223][ T5780] Bluetooth: hci1: command tx timeout [ 89.204930][ T5780] Bluetooth: hci0: command tx timeout [ 90.558187][ T5879] syz.2.12: attempt to access beyond end of device [ 90.558187][ T5879] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 92.000052][ T28] audit: type=1326 audit(1785287939.862:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.13" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 92.071342][ T28] audit: type=1326 audit(1785287939.932:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.13" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 92.095220][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.106747][ T28] audit: type=1326 audit(1785287939.932:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.13" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 92.140515][ T28] audit: type=1326 audit(1785287939.942:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.13" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 92.206356][ T28] audit: type=1326 audit(1785287939.942:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.13" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 92.234969][ T28] audit: type=1326 audit(1785287939.942:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.13" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 92.275283][ T28] audit: type=1326 audit(1785287939.942:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.13" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 92.382107][ T28] audit: type=1326 audit(1785287939.942:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.13" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 92.524771][ T790] cfg80211: failed to load regulatory.db [ 92.593999][ T28] audit: type=1326 audit(1785287939.942:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.13" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 92.618117][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.706383][ T28] audit: type=1326 audit(1785287939.942:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.3.13" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 95.936550][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.136966][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 96.164805][ T27] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 96.196213][ T27] usb 1-1: config 0 has no interface number 0 [ 96.213774][ T27] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 96.244959][ T27] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 96.269140][ T27] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 96.286310][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.306029][ T27] usb 1-1: Product: syz [ 96.315659][ T27] usb 1-1: Manufacturer: syz [ 96.320917][ T27] usb 1-1: SerialNumber: syz [ 96.384762][ T27] usb 1-1: config 0 descriptor?? [ 96.413817][ T5931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 96.429189][ T5931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 96.660500][ T5931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 96.688999][ T5931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.000592][ T27] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 97.012638][ T27] asix: probe of 1-1:0.34 failed with error -61 [ 98.902605][ T8] usb 1-1: USB disconnect, device number 2 [ 98.926090][ C1] sched: RT throttling activated [ 100.666161][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.906233][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 100.915144][ T8] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 100.926118][ T8] usb 3-1: config 0 has no interface number 0 [ 100.932383][ T8] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 100.975240][ T8] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 101.033008][ T8] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 101.072478][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.113134][ T8] usb 3-1: Product: syz [ 101.119258][ T8] usb 3-1: Manufacturer: syz [ 101.128949][ T8] usb 3-1: SerialNumber: syz [ 101.180019][ T8] usb 3-1: config 0 descriptor?? [ 101.890504][ T5991] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.979717][ T5991] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.260662][ T5991] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.275323][ T5991] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.329730][ T6007] syzkaller0: entered promiscuous mode [ 102.410142][ T6007] syzkaller0: entered allmulticast mode [ 103.013551][ T8] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 103.032856][ T8] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 103.043040][ T8] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 103.063846][ T8] asix: probe of 3-1:0.34 failed with error -32 [ 103.077731][ T8] usb 3-1: USB disconnect, device number 2 [ 105.194569][ T6042] syzkaller0: entered promiscuous mode [ 105.206302][ T6042] syzkaller0: entered allmulticast mode [ 105.710080][ T6057] netlink: 60 bytes leftover after parsing attributes in process `syz.3.64'. [ 105.719723][ T6057] netlink: 60 bytes leftover after parsing attributes in process `syz.3.64'. [ 105.739405][ T6057] netlink: 60 bytes leftover after parsing attributes in process `syz.3.64'. [ 107.116274][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.326326][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 107.359598][ T27] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 107.369554][ T27] usb 1-1: config 0 has no interface number 0 [ 108.169809][ T27] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 108.172706][ T6081] syzkaller0: entered promiscuous mode [ 108.186127][ T27] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 108.206856][ T27] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 108.216841][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.226262][ T27] usb 1-1: Product: syz [ 108.226496][ T6081] syzkaller0: entered allmulticast mode [ 108.230659][ T27] usb 1-1: Manufacturer: syz [ 108.241041][ T27] usb 1-1: SerialNumber: syz [ 108.249525][ T27] usb 1-1: config 0 descriptor?? [ 108.255613][ T6060] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 108.263384][ T6060] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 108.493718][ T6060] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 108.514219][ T6060] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 108.642360][ T6094] syz.2.75 uses obsolete (PF_INET,SOCK_PACKET) [ 108.746328][ T27] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 108.948637][ T27] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 108.966184][ T27] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 108.989638][ T27] asix: probe of 1-1:0.34 failed with error -32 [ 109.021889][ T27] usb 1-1: USB disconnect, device number 3 [ 113.226408][ T174] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.146591][ T174] usb 3-1: Using ep0 maxpacket: 16 [ 114.158233][ T174] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 114.166750][ T174] usb 3-1: config 0 has no interface number 0 [ 114.172910][ T174] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 114.196359][ T174] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 114.230320][ T174] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 114.249144][ T174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.286176][ T174] usb 3-1: Product: syz [ 114.290516][ T174] usb 3-1: Manufacturer: syz [ 114.295155][ T174] usb 3-1: SerialNumber: syz [ 114.332884][ T174] usb 3-1: config 0 descriptor?? [ 114.349510][ T6141] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 114.369116][ T6141] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 114.887636][ T6141] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 114.998717][ T6141] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.316705][ T174] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 115.522484][ T174] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 115.567860][ T174] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 115.624844][ T174] asix: probe of 3-1:0.34 failed with error -32 [ 116.093903][ T174] usb 3-1: USB disconnect, device number 3 [ 116.102905][ T6167] syz.3.98: attempt to access beyond end of device [ 116.102905][ T6167] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 119.919387][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.110398][ T6209] syzkaller0: entered promiscuous mode [ 120.197353][ T6209] syzkaller0: entered allmulticast mode [ 120.209499][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 120.246269][ T9] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 120.339987][ T9] usb 3-1: config 0 has no interface number 0 [ 120.390665][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 120.432188][ T9] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 120.612147][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 120.629301][ T6214] syz.1.110: attempt to access beyond end of device [ 120.629301][ T6214] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 120.767961][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.854952][ T9] usb 3-1: Product: syz [ 120.931632][ T9] usb 3-1: Manufacturer: syz [ 120.970907][ T9] usb 3-1: SerialNumber: syz [ 121.001880][ T9] usb 3-1: config 0 descriptor?? [ 121.046618][ T6199] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.056490][ T6199] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.332936][ T9] asix: probe of 3-1:0.34 failed with error -71 [ 121.373578][ T9] usb 3-1: USB disconnect, device number 4 [ 123.745571][ T6251] syzkaller0: entered promiscuous mode [ 123.755682][ T6251] syzkaller0: entered allmulticast mode [ 124.261895][ T6263] syz_tun: entered allmulticast mode [ 124.310827][ T6262] syz_tun: left allmulticast mode [ 124.676158][ T5836] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.876314][ T5836] usb 1-1: Using ep0 maxpacket: 16 [ 124.903679][ T5836] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 125.487238][ T5836] usb 1-1: config 0 has no interface number 0 [ 125.494741][ T5836] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 125.506922][ T5836] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 125.541914][ T5836] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 125.602089][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.626103][ T5836] usb 1-1: Product: syz [ 125.655077][ T5836] usb 1-1: Manufacturer: syz [ 125.683249][ T5836] usb 1-1: SerialNumber: syz [ 125.751255][ T5836] usb 1-1: config 0 descriptor?? [ 125.767781][ T6265] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 125.783178][ T6265] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 126.630354][ T6265] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 126.686890][ T6265] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 126.942815][ T5836] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 127.229015][ T5836] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 127.383998][ T5836] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 127.565283][ T5836] asix: probe of 1-1:0.34 failed with error -32 [ 127.595699][ T5836] usb 1-1: USB disconnect, device number 4 [ 129.683455][ T6310] syz.0.137: attempt to access beyond end of device [ 129.683455][ T6310] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 130.149039][ T6322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 130.271275][ T6322] kernel profiling enabled (shift: 5) [ 131.676190][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 131.857404][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 131.866214][ T790] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 131.872447][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 131.896186][ T9] usb 1-1: config 0 has no interface number 0 [ 131.902429][ T9] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 131.938177][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 131.956121][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.964771][ T9] usb 1-1: Product: syz [ 131.970450][ T9] usb 1-1: Manufacturer: syz [ 131.975277][ T9] usb 1-1: SerialNumber: syz [ 131.987311][ T9] usb 1-1: config 0 descriptor?? [ 132.004033][ T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 132.014308][ T9] em28xx 1-1:0.132: Video interface 132 found: [ 132.075340][ T790] usb 4-1: Using ep0 maxpacket: 16 [ 132.090700][ T790] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 132.109702][ T790] usb 4-1: config 0 has no interface number 0 [ 132.115892][ T790] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 132.131046][ T790] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 132.154312][ T790] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 132.171582][ T790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.195965][ T790] usb 4-1: Product: syz [ 132.201633][ T790] usb 4-1: Manufacturer: syz [ 132.210571][ T790] usb 4-1: SerialNumber: syz [ 132.240320][ T790] usb 4-1: config 0 descriptor?? [ 132.266555][ T6337] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 132.274040][ T6337] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 132.278565][ T6341] fuse: Bad value for 'fd' [ 132.408665][ T9] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 132.489922][ T6337] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 132.497670][ T6337] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 132.713444][ T790] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 132.937741][ T790] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 133.497724][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.504622][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.713134][ T790] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 133.723973][ T790] asix: probe of 4-1:0.34 failed with error -32 [ 133.740066][ T790] usb 4-1: USB disconnect, device number 2 [ 133.790976][ T9] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 133.830966][ T9] em28xx 1-1:0.132: board has no eeprom [ 134.001321][ T9] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 134.097547][ T9] em28xx 1-1:0.132: analog set to bulk mode. [ 134.160832][ T8] em28xx 1-1:0.132: Registering V4L2 extension [ 134.358208][ T9] usb 1-1: USB disconnect, device number 5 [ 134.426938][ T9] em28xx 1-1:0.132: Disconnecting em28xx [ 134.877180][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 135.358420][ T6373] fuse: Bad value for 'fd' [ 135.394231][ T8] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 135.436159][ T8] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 135.453829][ T8] em28xx 1-1:0.132: No AC97 audio processor [ 135.487213][ T8] usb 1-1: Decoder not found [ 135.514899][ T8] em28xx 1-1:0.132: failed to create media graph [ 135.535150][ T8] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 135.588745][ T8] em28xx 1-1:0.132: Remote control support is not available for this card. [ 135.609304][ T9] em28xx 1-1:0.132: Closing input extension [ 135.651508][ T9] em28xx 1-1:0.132: Freeing device [ 137.341568][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 137.516596][ T790] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.746367][ T790] usb 4-1: Using ep0 maxpacket: 16 [ 137.787978][ T790] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 137.826847][ T790] usb 4-1: config 0 has no interface number 0 [ 137.836528][ T790] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 137.860984][ T790] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 137.889547][ T790] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 137.910285][ T790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.925416][ T790] usb 4-1: Product: syz [ 137.947733][ T790] usb 4-1: Manufacturer: syz [ 137.953733][ T790] usb 4-1: SerialNumber: syz [ 138.035597][ T790] usb 4-1: config 0 descriptor?? [ 138.064169][ T6390] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.159792][ T6390] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.435220][ T6390] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.509037][ T6390] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.792470][ T790] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 139.099931][ T790] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 139.113038][ T790] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 139.124415][ T790] asix: probe of 4-1:0.34 failed with error -61 [ 139.335013][ T5780] Bluetooth: hci3: link tx timeout [ 139.342063][ T5780] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.646540][ T790] usb 4-1: USB disconnect, device number 3 [ 140.881521][ T5780] Bluetooth: hci2: command tx timeout [ 141.654196][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.177'. [ 141.684169][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 143.716558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 144.116101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 144.126188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 144.536083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 144.962280][ T6456] syz.2.184: attempt to access beyond end of device [ 144.962280][ T6456] loop5: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 144.976222][ T6456] hfsplus: unable to find HFS+ superblock [ 146.599684][ T6470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 146.879930][ T790] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 147.375491][ T790] usb 2-1: Using ep0 maxpacket: 16 [ 148.048912][ T790] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 148.057184][ T790] usb 2-1: config 0 has no interface number 0 [ 148.063406][ T790] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 148.076625][ T790] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 148.105826][ T790] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 148.118902][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.128086][ T790] usb 2-1: Product: syz [ 148.132434][ T790] usb 2-1: Manufacturer: syz [ 148.132522][ T790] usb 2-1: SerialNumber: syz [ 148.218038][ T790] usb 2-1: config 0 descriptor?? [ 148.234020][ T6461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 148.234946][ T6461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 148.503238][ T6461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 148.599880][ T6461] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 148.867260][ T790] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 149.079226][ T790] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 149.106149][ T790] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 149.138101][ T790] asix: probe of 2-1:0.34 failed with error -61 [ 149.206540][ T5781] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 149.296696][ T5891] usb 2-1: USB disconnect, device number 2 [ 149.417912][ T5781] usb 4-1: Using ep0 maxpacket: 32 [ 149.482415][ T5781] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 149.514479][ T5781] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 149.550815][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 149.617707][ T5781] usb 4-1: Product: syz [ 149.662386][ T5781] usb 4-1: Manufacturer: syz [ 149.703527][ T5781] usb 4-1: SerialNumber: syz [ 150.064292][ T5781] usb 4-1: config 0 descriptor?? [ 150.234381][ T6485] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 153.956194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 154.733543][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.200'. [ 154.744224][ T5781] usb 4-1: USB disconnect, device number 4 [ 156.436248][ T5781] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 157.346250][ T5781] usb 4-1: Using ep0 maxpacket: 16 [ 157.474504][ T5781] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 157.503456][ T5781] usb 4-1: config 0 has no interface number 0 [ 157.527223][ T5781] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 157.572492][ T5781] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 157.595722][ T5781] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 157.614113][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.614147][ T5781] usb 4-1: Product: syz [ 157.614164][ T5781] usb 4-1: Manufacturer: syz [ 157.614181][ T5781] usb 4-1: SerialNumber: syz [ 157.617116][ T5781] usb 4-1: config 0 descriptor?? [ 157.618928][ T6529] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.619082][ T6529] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.874072][ T6529] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.917423][ T6529] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.446615][ T5781] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 158.569570][ T5781] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 158.584289][ T5781] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 158.595028][ T5781] asix: probe of 4-1:0.34 failed with error -61 [ 158.797269][ T23] usb 4-1: USB disconnect, device number 5 [ 159.142239][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'. [ 163.141901][ T6583] syz.2.220: attempt to access beyond end of device [ 163.141901][ T6583] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 163.385075][ T6592] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 164.317679][ T6606] fuse: Bad value for 'fd' [ 169.001239][ T6631] blktrace: Concurrent blktraces are not allowed on loop0 [ 169.279806][ T6626] syz.0.232: attempt to access beyond end of device [ 169.279806][ T6626] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 171.098847][ T5781] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 171.366242][ T5781] usb 2-1: Using ep0 maxpacket: 8 [ 171.396586][ T5781] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 171.412188][ T5781] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.426387][ T5781] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.436836][ T5781] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.447238][ T5781] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.460973][ T5781] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 171.470865][ T5781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.746662][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.792155][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.811128][ T5781] usb 2-1: usb_control_msg returned -71 [ 171.820762][ T5781] usbtmc 2-1:16.0: can't read capabilities [ 171.863337][ T5781] usb 2-1: USB disconnect, device number 3 [ 178.338656][ T6707] syz_tun: entered allmulticast mode [ 178.562385][ T6705] syz_tun: left allmulticast mode [ 179.044250][ T6710] syz.2.258: attempt to access beyond end of device [ 179.044250][ T6710] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 185.454235][ T6766] syz.2.272: attempt to access beyond end of device [ 185.454235][ T6766] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 191.316846][ T6816] netlink: 'syz.0.286': attribute type 1 has an invalid length. [ 191.347006][ T6816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.789969][ T6821] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd3": -EINTR [ 192.795951][ T6816] bond1: (slave geneve2): making interface the new active one [ 192.822479][ T6816] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 194.916181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 195.978970][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.985549][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.554799][ T6867] blktrace: Concurrent blktraces are not allowed on loop4 [ 196.649378][ T6860] syz.2.300: attempt to access beyond end of device [ 196.649378][ T6860] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 202.596491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 207.260495][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 207.270191][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 207.276403][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 207.495732][ T6950] syz.3.328: attempt to access beyond end of device [ 207.495732][ T6950] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 207.828794][ T6842] IPVS: starting estimator thread 0... [ 207.927726][ T6975] IPVS: using max 33 ests per chain, 79200 per kthread [ 210.276193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 211.712949][ T7005] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 216.000464][ T7037] syz.3.354: attempt to access beyond end of device [ 216.000464][ T7037] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 216.015032][ T7037] hfsplus: unable to find HFS+ superblock [ 217.676765][ T7041] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 217.683985][ T9] IPVS: starting estimator thread 0... [ 217.690860][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 217.816421][ T7043] IPVS: using max 15 ests per chain, 36000 per kthread [ 219.649493][ T7071] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 219.684938][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 219.999782][ T7075] syz.2.369: attempt to access beyond end of device [ 219.999782][ T7075] loop5: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 220.013732][ T7075] hfsplus: unable to find HFS+ superblock [ 224.237150][ T8] IPVS: starting estimator thread 0... [ 224.510352][ T7104] IPVS: using max 15 ests per chain, 36000 per kthread [ 231.301051][ T7158] syz.0.400: attempt to access beyond end of device [ 231.301051][ T7158] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 231.314381][ T7158] hfsplus: unable to find HFS+ superblock [ 232.526156][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 232.842812][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 233.293633][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 233.326162][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 233.335501][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.354016][ T7176] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 233.365324][ T9] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 236.891024][ T5891] usb 1-1: USB disconnect, device number 6 [ 237.343671][ T7197] syz.3.412: attempt to access beyond end of device [ 237.343671][ T7197] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 237.357371][ T7197] hfsplus: unable to find HFS+ superblock [ 237.850808][ T8] IPVS: starting estimator thread 0... [ 237.946354][ T7213] IPVS: using max 16 ests per chain, 38400 per kthread [ 239.722248][ T7231] syz.1.427: attempt to access beyond end of device [ 239.722248][ T7231] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 239.735644][ T7231] hfsplus: unable to find HFS+ superblock [ 241.816311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 244.962822][ T7268] syz.1.440: attempt to access beyond end of device [ 244.962822][ T7268] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 244.976613][ T7268] hfsplus: unable to find HFS+ superblock [ 247.983640][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 247.983683][ T28] audit: type=1326 audit(1785288095.842:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fd9de99 code=0x7ffc0000 [ 249.136271][ T28] audit: type=1326 audit(1785288095.842:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fd9de99 code=0x7ffc0000 [ 249.292447][ T28] audit: type=1326 audit(1785288095.842:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fd9de99 code=0x7ffc0000 [ 249.370255][ T28] audit: type=1326 audit(1785288095.842:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fd9de99 code=0x7ffc0000 [ 249.423496][ T28] audit: type=1326 audit(1785288095.842:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3e2fd9de99 code=0x7ffc0000 [ 249.483361][ T28] audit: type=1326 audit(1785288095.842:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fd9de99 code=0x7ffc0000 [ 249.483576][ T28] audit: type=1326 audit(1785288095.842:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fd9de99 code=0x7ffc0000 [ 249.483827][ T28] audit: type=1326 audit(1785288095.842:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fd9de99 code=0x7ffc0000 [ 249.484238][ T28] audit: type=1326 audit(1785288095.842:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fd9de99 code=0x7ffc0000 [ 249.484644][ T28] audit: type=1326 audit(1785288095.842:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.2.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e2fd9de99 code=0x7ffc0000 [ 249.755296][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.054671][ T7318] syz.1.454: attempt to access beyond end of device [ 250.054671][ T7318] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 250.068459][ T7318] hfsplus: unable to find HFS+ superblock [ 251.361929][ T7362] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 253.020162][ T28] kauditd_printk_skb: 151 callbacks suppressed [ 253.020181][ T28] audit: type=1326 audit(1785288100.902:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.1.466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd828b5e6ce code=0x7ffc0000 [ 253.125981][ T28] audit: type=1326 audit(1785288101.002:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.1.466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd828b5e6ce code=0x7ffc0000 [ 253.233311][ T28] audit: type=1326 audit(1785288101.102:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.1.466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd828b5e6ce code=0x7ffc0000 [ 253.279078][ T28] audit: type=1326 audit(1785288101.132:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.1.466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd828b9de99 code=0x7ffc0000 [ 253.306640][ T28] audit: type=1326 audit(1785288101.132:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.1.466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd828b9de99 code=0x7ffc0000 [ 253.362469][ T28] audit: type=1326 audit(1785288101.212:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.1.466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd828b5e6ce code=0x7ffc0000 [ 253.596230][ T28] audit: type=1326 audit(1785288101.312:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.1.466" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd828b9de99 code=0x7ffc0000 [ 256.326962][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.333394][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.542212][ T7385] syz.1.472: attempt to access beyond end of device [ 256.542212][ T7385] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 256.555862][ T7385] hfsplus: unable to find HFS+ superblock [ 256.638464][ T28] audit: type=1326 audit(1785288104.502:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.2.477" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fd9de99 code=0x7ffc0000 [ 257.098043][ T28] audit: type=1326 audit(1785288104.512:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.2.477" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fd9de99 code=0x7ffc0000 [ 257.293945][ T28] audit: type=1326 audit(1785288104.512:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.2.477" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e2fd9de99 code=0x7ffc0000 [ 257.318080][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.338930][ T7446] netlink: 'syz.2.490': attribute type 1 has an invalid length. [ 259.476422][ T7446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.589983][ T7448] bond1: (slave geneve2): making interface the new active one [ 259.629567][ T7448] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 260.181410][ T7455] 9pnet_virtio: no channels available for device 127.0.0.1 [ 260.481918][ T7458] file system registered [ 261.238249][ T5779] ffs_data_put(): freeing [ 263.677173][ T7492] syz.0.502: attempt to access beyond end of device [ 263.677173][ T7492] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 265.306488][ T7528] netlink: 'syz.1.510': attribute type 1 has an invalid length. [ 265.383379][ T7528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.514532][ T7530] bond1: (slave geneve2): making interface the new active one [ 265.531284][ T7530] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 267.638916][ T7571] Bluetooth: MGMT ver 1.22 [ 268.626228][ T5791] Bluetooth: hci0: command 0x0406 tx timeout [ 269.398269][ T7583] netlink: 'syz.0.525': attribute type 1 has an invalid length. [ 269.446915][ T7583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 270.109368][ T7595] 9pnet_virtio: no channels available for device 127.0.0.1 [ 271.248040][ T5778] ffs_data_put(): freeing [ 274.239520][ T7628] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 274.276888][ T7628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.849747][ T7634] 9pnet_virtio: no channels available for device 127.0.0.1 [ 275.981064][ T5779] ffs_data_put(): freeing [ 280.219643][ T7675] 9pnet_virtio: no channels available for device 127.0.0.1 [ 281.386827][ T5776] ffs_data_put(): freeing [ 281.631464][ T7680] syz_tun: entered allmulticast mode [ 281.675743][ T7679] syz_tun: left allmulticast mode [ 282.697803][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 282.746533][ T28] audit: type=1326 audit(1785288130.572:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.3.555" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 283.458086][ T28] audit: type=1326 audit(1785288130.572:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.3.555" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 283.482157][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.512179][ T28] audit: type=1326 audit(1785288130.572:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.3.555" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 283.538142][ T28] audit: type=1326 audit(1785288130.572:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.3.555" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 283.563073][ T28] audit: type=1326 audit(1785288130.572:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.3.555" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 283.589736][ T28] audit: type=1326 audit(1785288130.572:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.3.555" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 283.637409][ T28] audit: type=1326 audit(1785288130.582:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.3.555" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 283.717146][ T28] audit: type=1326 audit(1785288130.582:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.3.555" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 283.786654][ T28] audit: type=1326 audit(1785288130.582:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.3.555" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 283.834943][ T28] audit: type=1326 audit(1785288130.582:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.3.555" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 283.976397][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 285.429975][ T7708] 9pnet_virtio: no channels available for device 127.0.0.1 [ 286.507676][ T5779] ffs_data_put(): freeing [ 286.602933][ T7715] dummy0: entered promiscuous mode [ 286.629437][ T7715] macsec1: entered promiscuous mode [ 286.635414][ T7715] macsec1: entered allmulticast mode [ 286.671343][ T7715] dummy0: entered allmulticast mode [ 286.817354][ T7715] dummy0: left allmulticast mode [ 286.851606][ T7715] dummy0: left promiscuous mode [ 287.317675][ T7722] ======================================================= [ 287.317675][ T7722] WARNING: The mand mount option has been deprecated and [ 287.317675][ T7722] and is ignored by this kernel. Remove the mand [ 287.317675][ T7722] option from the mount to silence this warning. [ 287.317675][ T7722] ======================================================= [ 287.354099][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.614738][ T7738] syz_tun: entered allmulticast mode [ 289.664561][ T7739] syzkaller0: entered promiscuous mode [ 289.672953][ T7739] syzkaller0: entered allmulticast mode [ 289.701677][ T7736] syz_tun: left allmulticast mode [ 290.187009][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 290.187048][ T28] audit: type=1326 audit(1785288138.032:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 290.218106][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.883045][ T28] audit: type=1326 audit(1785288138.032:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 290.935535][ T28] audit: type=1326 audit(1785288138.042:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 290.991719][ T28] audit: type=1326 audit(1785288138.042:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 291.064934][ T28] audit: type=1326 audit(1785288138.042:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 291.116139][ T28] audit: type=1326 audit(1785288138.052:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 291.166135][ T28] audit: type=1326 audit(1785288138.052:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 291.224489][ T28] audit: type=1326 audit(1785288138.062:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 291.269545][ T28] audit: type=1326 audit(1785288138.062:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 291.331333][ T28] audit: type=1326 audit(1785288138.062:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.3.567" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 294.077706][ T7769] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 295.806454][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 295.806695][ T28] audit: type=1326 audit(1785288143.462:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.3.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 296.296384][ T28] audit: type=1326 audit(1785288143.462:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.3.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 296.323988][ T28] audit: type=1326 audit(1785288143.462:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.3.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 296.390493][ T28] audit: type=1326 audit(1785288143.462:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.3.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 296.414820][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.425561][ T28] audit: type=1326 audit(1785288143.462:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.3.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 296.449523][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.457086][ T28] audit: type=1326 audit(1785288143.482:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.3.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 296.481303][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.497743][ T28] audit: type=1326 audit(1785288143.482:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.3.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 296.522648][ T28] audit: type=1326 audit(1785288143.482:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.3.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 296.547717][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.555411][ T28] audit: type=1326 audit(1785288143.482:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.3.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 296.581226][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.590035][ T28] audit: type=1326 audit(1785288143.482:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.3.578" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bd8b9de99 code=0x7ffc0000 [ 296.614400][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.186100][ T5891] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 302.266140][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 302.274014][ T5891] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 302.296971][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 302.488190][ T5891] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 303.528367][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.545105][ T5891] usb 1-1: Product: syz [ 303.550356][ T5891] usb 1-1: Manufacturer: syz [ 303.555661][ T5891] usb 1-1: SerialNumber: syz [ 303.587279][ T5891] usb 1-1: config 0 descriptor?? [ 303.593855][ T7815] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 303.640674][ T5891] powermate: probe of 1-1:0.0 failed with error -22 [ 305.477245][ T8] usb 1-1: USB disconnect, device number 7 [ 307.556446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 308.160910][ T7875] [ 308.326583][ T7875] &aAmMvҁRjOU9S [ 309.297741][ T7879] binder: 7869:7879 ioctl c00c620f 200000000180 returned -22 [ 310.106291][ T174] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 310.783904][ T174] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 310.822316][ T174] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 310.861637][ T174] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 310.890664][ T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.931811][ T7882] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 310.955782][ T174] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 313.464407][ T5817] usb 2-1: USB disconnect, device number 4 [ 313.813089][ T7916] syz_tun: entered allmulticast mode [ 313.822394][ T7913] syz_tun: left allmulticast mode [ 316.892734][ T174] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 317.074317][ T7952] syz_tun: entered allmulticast mode [ 317.108431][ T174] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 317.126226][ T174] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 317.129098][ T7951] syz_tun: left allmulticast mode [ 317.162643][ T174] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 317.183216][ T174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.221074][ T7941] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 317.239591][ T174] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 317.758107][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.764727][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.167678][ T174] usb 4-1: USB disconnect, device number 6 [ 322.491733][ T7987] syz_tun: entered allmulticast mode [ 322.500522][ T7986] syz_tun: left allmulticast mode [ 326.141560][ T8012] syz.3.641: attempt to access beyond end of device [ 326.141560][ T8012] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 326.154909][ T8012] hfsplus: unable to find HFS+ superblock [ 326.805446][ T5817] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 326.841400][ T8032] syz_tun: entered allmulticast mode [ 326.994216][ T8031] syz_tun: left allmulticast mode [ 327.218256][ T5817] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 327.520593][ T5817] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 327.531312][ T5817] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 327.540479][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.553125][ T8016] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 327.602586][ T5817] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 328.478113][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 331.738822][ T5817] usb 2-1: USB disconnect, device number 5 [ 332.425036][ T8057] syz.2.654: attempt to access beyond end of device [ 332.425036][ T8057] loop5: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 332.439785][ T8057] hfsplus: unable to find HFS+ superblock [ 335.186678][ T5781] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 335.567009][ T5781] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 335.668368][ T5781] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 335.720734][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 335.756055][ T5781] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 335.852301][ T5781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.932755][ T8091] bridge0: port 3(syz_tun) entered blocking state [ 335.996487][ T8091] bridge0: port 3(syz_tun) entered disabled state [ 336.003241][ T8091] syz_tun: entered allmulticast mode [ 336.027132][ T8082] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 336.039574][ T5781] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 336.073204][ T8091] syz_tun: entered promiscuous mode [ 336.089835][ T8091] bridge0: port 3(syz_tun) entered blocking state [ 336.097426][ T8091] bridge0: port 3(syz_tun) entered forwarding state [ 336.235587][ T8091] bond0: entered promiscuous mode [ 336.252684][ T8092] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 336.264983][ T8091] bond_slave_0: entered promiscuous mode [ 336.279075][ T8091] bond_slave_1: entered promiscuous mode [ 336.295295][ T8091] batadv0: entered promiscuous mode [ 336.313290][ T8091] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 337.948641][ T5891] usb 3-1: USB disconnect, device number 5 [ 340.199245][ T8099] syz.0.665: attempt to access beyond end of device [ 340.199245][ T8099] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 340.212485][ T8099] hfsplus: unable to find HFS+ superblock [ 343.024484][ T8132] Zero length message leads to an empty skb [ 344.456668][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 345.959598][ T8154] syz.0.678: attempt to access beyond end of device [ 345.959598][ T8154] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 345.972931][ T8154] hfsplus: unable to find HFS+ superblock [ 350.777781][ T8200] syz.0.690: attempt to access beyond end of device [ 350.777781][ T8200] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 350.791072][ T8200] hfsplus: unable to find HFS+ superblock [ 354.328706][ T8235] bridge0: port 3(syz_tun) entered blocking state [ 354.362265][ T8235] bridge0: port 3(syz_tun) entered disabled state [ 354.393584][ T8235] syz_tun: entered allmulticast mode [ 354.418356][ T8235] syz_tun: entered promiscuous mode [ 354.444641][ T8235] bridge0: port 3(syz_tun) entered blocking state [ 354.451397][ T8235] bridge0: port 3(syz_tun) entered forwarding state [ 354.661533][ T8239] syz.1.700: attempt to access beyond end of device [ 354.661533][ T8239] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 354.674818][ T8239] hfsplus: unable to find HFS+ superblock [ 357.478209][ T6842] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 357.696097][ T6842] usb 2-1: Using ep0 maxpacket: 32 [ 357.714404][ T6842] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 357.759006][ T6842] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 357.782311][ T6842] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 357.806943][ T6842] usb 2-1: Product: syz [ 357.820363][ T6842] usb 2-1: Manufacturer: syz [ 357.832928][ T6842] usb 2-1: SerialNumber: syz [ 357.864409][ T6842] usb 2-1: config 0 descriptor?? [ 357.879121][ T8259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 357.897699][ T6842] hub 2-1:0.0: bad descriptor, ignoring hub [ 357.915535][ T6842] hub: probe of 2-1:0.0 failed with error -5 [ 358.457540][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 358.597835][ T8273] bridge0: port 3(syz_tun) entered blocking state [ 358.604834][ T8273] bridge0: port 3(syz_tun) entered disabled state [ 358.615499][ T8273] syz_tun: entered allmulticast mode [ 358.635255][ T8273] syz_tun: entered promiscuous mode [ 358.645719][ T8273] bridge0: port 3(syz_tun) entered blocking state [ 358.652361][ T8273] bridge0: port 3(syz_tun) entered forwarding state [ 358.671664][ T8259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.714568][ T8259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.540992][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.720506][ T8279] syz.0.711: attempt to access beyond end of device [ 359.720506][ T8279] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 359.733876][ T8279] hfsplus: unable to find HFS+ superblock [ 359.755354][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.995414][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.023697][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.144459][ T8284] bond0: entered promiscuous mode [ 360.157789][ T8284] bond_slave_0: entered promiscuous mode [ 360.165659][ T8284] bond_slave_1: entered promiscuous mode [ 360.686873][ T8284] batadv0: entered promiscuous mode [ 360.697155][ T8284] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 360.714900][ T8284] Cannot create hsr debugfs directory [ 360.752850][ T8284] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 361.133427][ T5891] usb 2-1: USB disconnect, device number 6 [ 364.887636][ T8323] syz.3.724: attempt to access beyond end of device [ 364.887636][ T8323] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 364.901363][ T8323] hfsplus: unable to find HFS+ superblock [ 366.399712][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 368.099434][ T8352] syz.3.734: attempt to access beyond end of device [ 368.099434][ T8352] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 368.112754][ T8352] hfsplus: unable to find HFS+ superblock [ 373.571909][ T8410] syz.3.746: attempt to access beyond end of device [ 373.571909][ T8410] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 373.585626][ T8410] hfsplus: unable to find HFS+ superblock [ 374.057453][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 379.180006][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.186701][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.816739][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 380.251008][ T8466] syz.3.756: attempt to access beyond end of device [ 380.251008][ T8466] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 380.264629][ T8466] hfsplus: unable to find HFS+ superblock [ 381.164334][ T8475] fuse: Bad value for 'fd' [ 381.962690][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 386.701240][ T8513] syz.0.767: attempt to access beyond end of device [ 386.701240][ T8513] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 386.716168][ T8513] hfsplus: unable to find HFS+ superblock [ 390.587627][ T8565] syz.1.779: attempt to access beyond end of device [ 390.587627][ T8565] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 390.600781][ T8565] hfsplus: unable to find HFS+ superblock [ 396.541870][ T8646] blktrace: Concurrent blktraces are not allowed on loop6 [ 397.071940][ T8645] syz.3.797: attempt to access beyond end of device [ 397.071940][ T8645] loop6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 398.315538][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.802'. [ 399.634997][ T8682] fuse: Unknown parameter 'use00000000000000000000' [ 401.509037][ T8705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.813'. [ 401.646477][ T8704] syz.3.811: attempt to access beyond end of device [ 401.646477][ T8704] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 402.304965][ T8697] blktrace: Concurrent blktraces are not allowed on loop6 [ 402.489272][ T8724] fuse: Unknown parameter 'use00000000000000000000' [ 405.414098][ T8759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.823'. [ 405.847004][ T8765] blktrace: Concurrent blktraces are not allowed on loop4 [ 406.031104][ T8761] syz.2.825: attempt to access beyond end of device [ 406.031104][ T8761] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 406.250862][ T8774] fuse: Unknown parameter 'use00000000000000000000' [ 408.773246][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.834'. [ 409.796458][ T8825] syz.1.837: attempt to access beyond end of device [ 409.796458][ T8825] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 409.947614][ T8834] fuse: Unknown parameter 'user_i00000000000000000000' [ 413.299452][ T8866] syz.3.847: attempt to access beyond end of device [ 413.299452][ T8866] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 413.305761][ T8871] blktrace: Concurrent blktraces are not allowed on loop6 [ 413.793402][ T8883] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 416.332893][ T8911] syz.3.861: attempt to access beyond end of device [ 416.332893][ T8911] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 416.377980][ T8913] blktrace: Concurrent blktraces are not allowed on loop6 [ 422.159332][ T8968] blktrace: Concurrent blktraces are not allowed on loop4 [ 422.332412][ T8965] syz.2.874: attempt to access beyond end of device [ 422.332412][ T8965] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 426.180614][ T9028] blktrace: Concurrent blktraces are not allowed on loop2 [ 426.876180][ T9027] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd1": -EINTR [ 431.135428][ T9079] blktrace: Concurrent blktraces are not allowed on loop4 [ 431.616237][ T9078] syz.2.897: attempt to access beyond end of device [ 431.616237][ T9078] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 435.912700][ T9128] fuse: Bad value for 'group_id' [ 437.113578][ T9137] blktrace: Concurrent blktraces are not allowed on loop0 [ 437.754731][ T9134] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd0": -EINTR [ 439.952978][ T9168] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 439.997631][ T9170] fuse: Bad value for 'group_id' [ 441.067985][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.074804][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.205637][ T9179] blktrace: Concurrent blktraces are not allowed on loop6 [ 441.610400][ T9174] syz.3.921: attempt to access beyond end of device [ 441.610400][ T9174] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 444.406992][ T9216] fuse: Bad value for 'group_id' [ 445.737295][ T9230] blktrace: Concurrent blktraces are not allowed on loop4 [ 445.925532][ T9229] syz_tun: entered allmulticast mode [ 445.931296][ T9225] syz.2.932: attempt to access beyond end of device [ 445.931296][ T9225] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 446.046637][ T9228] syz_tun: left allmulticast mode [ 448.598959][ T9272] blktrace: Concurrent blktraces are not allowed on loop4 [ 449.032927][ T9271] syz.2.946: attempt to access beyond end of device [ 449.032927][ T9271] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 452.577452][ T9316] blktrace: Concurrent blktraces are not allowed on loop2 [ 452.720528][ T9310] syz.1.956: attempt to access beyond end of device [ 452.720528][ T9310] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 456.808221][ T9350] blktrace: Concurrent blktraces are not allowed on loop0 [ 457.221838][ T9349] syz.0.967: attempt to access beyond end of device [ 457.221838][ T9349] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 462.754324][ T9387] syz.1.977: attempt to access beyond end of device [ 462.754324][ T9387] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 464.315376][ T9387] blktrace: Concurrent blktraces are not allowed on loop2 [ 468.972179][ T9454] syz.2.990: attempt to access beyond end of device [ 468.972179][ T9454] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 469.084492][ T9462] blktrace: Concurrent blktraces are not allowed on loop4 [ 473.429716][ T9511] blktrace: Concurrent blktraces are not allowed on loop4 [ 473.508824][ T9506] syz.2.1003: attempt to access beyond end of device [ 473.508824][ T9506] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 474.145239][ T9519] fuse: Unknown parameter 'fd0x0000000000000003' [ 475.516925][ T9536] fuse: Unknown parameter 'grou00000000000000000000' [ 477.042305][ T9553] syz.2.1014: attempt to access beyond end of device [ 477.042305][ T9553] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 477.128831][ T9559] blktrace: Concurrent blktraces are not allowed on loop4 [ 478.972852][ T9569] fuse: Unknown parameter 'fd0x0000000000000003' [ 480.487812][ T9583] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1019'. [ 481.966854][ T9602] fuse: Unknown parameter 'grou00000000000000000000' [ 482.959207][ T9616] fuse: Unknown parameter 'fd0x0000000000000003' [ 484.498070][ T9636] blktrace: Concurrent blktraces are not allowed on loop6 [ 484.587504][ T9631] syz.3.1029: attempt to access beyond end of device [ 484.587504][ T9631] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 486.525098][ T9656] fuse: Unknown parameter 'grou00000000000000000000' [ 488.751453][ T9681] syzkaller0: entered promiscuous mode [ 488.757215][ T9681] syzkaller0: entered allmulticast mode [ 489.215112][ T9689] fuse: Unknown parameter 'group_i00000000000000000000' [ 490.519433][ T9699] syz.2.1048: attempt to access beyond end of device [ 490.519433][ T9699] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 490.548620][ T9705] blktrace: Concurrent blktraces are not allowed on loop4 [ 494.719830][ T9723] fuse: Unknown parameter 'group_i00000000000000000000' [ 495.754726][ T9729] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 495.769858][ T9729] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 495.776981][ T9729] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 495.784899][ T9729] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 495.791673][ T9729] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 495.798623][ T9729] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 495.806933][ T9729] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 495.824649][ T9730] netlink: 'syz.1.1057': attribute type 1 has an invalid length. [ 495.833116][ T9730] netlink: 'syz.1.1057': attribute type 2 has an invalid length. [ 495.849151][ T9730] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1057'. [ 495.870310][ T9729] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 495.877663][ T9729] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 495.885779][ T9729] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 495.892800][ T9729] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 495.900175][ T9729] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 495.906932][ T9729] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 495.913982][ T9729] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 495.921264][ T9729] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 495.928780][ T9729] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 495.935665][ T9729] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 495.942948][ T9729] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 495.949964][ T9729] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 495.958016][ T9729] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 495.964744][ T9729] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 495.972899][ T9729] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 495.980081][ T9729] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 495.987332][ T9729] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 495.994271][ T9729] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 496.001038][ T9729] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 498.945055][ T9755] syz.2.1064: attempt to access beyond end of device [ 498.945055][ T9755] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 499.027929][ T9761] blktrace: Concurrent blktraces are not allowed on loop4 [ 499.047514][ T5819] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 499.248237][ T5819] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.265760][ T5819] usb 2-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 499.279856][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 499.299715][ T5819] usb 2-1: Product: syz [ 499.304522][ T5819] usb 2-1: Manufacturer: syz [ 499.344068][ T5819] navman 2-1:1.0: navman converter detected [ 501.368304][ T5819] usb 2-1: navman converter now attached to ttyUSB0 [ 501.458993][ T5819] usb 2-1: USB disconnect, device number 7 [ 501.532901][ T5819] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 501.592483][ T5819] navman 2-1:1.0: device disconnected [ 501.763617][ T9767] fuse: Unknown parameter 'group_i00000000000000000000' [ 502.101938][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.122630][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.318238][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1068'. [ 507.788306][ T9820] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 508.067415][ T9827] syz.3.1081: attempt to access beyond end of device [ 508.067415][ T9827] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 508.224223][ T9827] blktrace: Concurrent blktraces are not allowed on loop6 [ 513.066728][ T9871] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 514.328302][ T9888] syz.3.1097: attempt to access beyond end of device [ 514.328302][ T9888] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 514.369418][ T9895] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20001 [ 516.167347][ T9896] blktrace: Concurrent blktraces are not allowed on loop6 [ 517.395411][ T9910] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 528.975459][ T9997] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1123'. [ 531.193853][T10012] gfs2: not a GFS2 filesystem [ 534.794465][T10028] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1138'. [ 535.077861][T10031] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 535.237461][T10035] tipc: Started in network mode [ 535.254146][T10035] tipc: Node identity 4, cluster identity 4711 [ 535.313571][T10035] tipc: Node number set to 4 [ 536.075159][T10039] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1141'. [ 538.840780][T10081] netlink: 'syz.1.1148': attribute type 72 has an invalid length. [ 542.224148][T10098] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1152'. [ 544.966978][T10109] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd3": -EINTR [ 547.900594][T10136] netlink: 'syz.2.1159': attribute type 72 has an invalid length. [ 550.424856][T10153] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1164'. [ 551.011140][T10162] netlink: 'syz.0.1166': attribute type 1 has an invalid length. [ 551.019686][T10162] netlink: 'syz.0.1166': attribute type 2 has an invalid length. [ 551.988229][T10170] netlink: 'syz.1.1169': attribute type 72 has an invalid length. [ 555.151452][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 555.696303][T10208] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1179'. [ 561.062869][T10244] fuse: Bad value for 'fd' [ 562.906683][T10256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1192'. [ 563.499027][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.505425][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.739083][T10256] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 566.824298][T10289] fuse: Bad value for 'fd' [ 567.876010][T10300] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 571.314342][T10329] fuse: Invalid rootmode [ 572.250319][T10336] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 573.832641][T10365] warning: `syz.0.1216' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 575.563794][T10365] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 575.572821][T10365] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 575.598276][T10373] fuse: Invalid rootmode [ 576.821397][T10381] syzkaller0: entered promiscuous mode [ 576.839083][T10381] syzkaller0: entered allmulticast mode [ 578.334707][ T5785] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 579.577212][T10408] fuse: Invalid rootmode [ 579.637774][T10410] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1231'. [ 581.958505][T10447] fuse: Bad value for 'rootmode' [ 583.244091][T10456] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1244'. [ 584.417759][T10475] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 584.731697][T10487] fuse: Bad value for 'rootmode' [ 587.410026][T10508] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 587.964976][T10515] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1261'. [ 590.220068][T10527] fuse: Bad value for 'rootmode' [ 592.792112][T10547] syz.0.1270: attempt to access beyond end of device [ 592.792112][T10547] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 592.806083][T10547] hfsplus: unable to find HFS+ superblock [ 593.374680][T10558] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1273'. [ 593.401046][T10562] fuse: Unknown parameter 'use00000000000000000000' [ 595.844542][T10587] tipc: Started in network mode [ 595.874393][T10587] tipc: Node identity 4, cluster identity 4711 [ 595.886652][T10587] tipc: Node number set to 4 [ 596.203985][T10589] syz.0.1281: attempt to access beyond end of device [ 596.203985][T10589] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 596.217630][T10589] hfsplus: unable to find HFS+ superblock [ 596.309842][T10600] fuse: Unknown parameter 'use00000000000000000000' [ 599.197646][T10634] fuse: Unknown parameter 'use00000000000000000000' [ 599.547770][T10631] syz.1.1294: attempt to access beyond end of device [ 599.547770][T10631] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 599.561140][T10631] hfsplus: unable to find HFS+ superblock [ 602.416133][T10668] tipc: Started in network mode [ 602.456110][T10668] tipc: Node identity 4, cluster identity 4711 [ 602.477490][T10668] tipc: Node number set to 4 [ 602.508910][T10671] fuse: Unknown parameter 'user_i00000000000000000000' [ 603.662097][T10674] syz.0.1306: attempt to access beyond end of device [ 603.662097][T10674] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 603.675364][T10674] hfsplus: unable to find HFS+ superblock [ 605.372102][T10702] fuse: Unknown parameter 'user_i00000000000000000000' [ 606.813513][T10709] syz.2.1319: attempt to access beyond end of device [ 606.813513][T10709] loop5: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 606.827549][T10709] hfsplus: unable to find HFS+ superblock [ 609.975759][T10760] syz.1.1331: attempt to access beyond end of device [ 609.975759][T10760] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 609.989353][T10760] hfsplus: unable to find HFS+ superblock [ 614.577216][T10805] syz.0.1343: attempt to access beyond end of device [ 614.577216][T10805] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 614.591091][T10805] hfsplus: unable to find HFS+ superblock [ 614.771771][T10816] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 616.804577][T10841] syzkaller0: entered promiscuous mode [ 616.841485][T10841] syzkaller0: entered allmulticast mode [ 617.403583][T10856] syz.0.1355: attempt to access beyond end of device [ 617.403583][T10856] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 617.416962][T10856] hfsplus: unable to find HFS+ superblock [ 618.855801][T10878] netlink: 'syz.3.1362': attribute type 2 has an invalid length. [ 619.079860][T10878] ------------[ cut here ]------------ [ 619.085431][T10878] kernel BUG at net/phonet/socket.c:213! [ 619.098471][T10878] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 619.104769][T10878] CPU: 0 PID: 10878 Comm: syz.3.1362 Not tainted syzkaller #0 [ 619.112550][T10878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 619.122661][T10878] RIP: 0010:pn_socket_sendmsg+0x235/0x240 [ 619.123887][T10889] syzkaller0: entered promiscuous mode [ 619.128654][T10878] Code: 41 5f 5d c3 e8 3c e8 ca 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 b5 05 1e f8 e9 02 ff ff ff e8 6b 88 c5 f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 [ 619.134600][T10889] syzkaller0: entered allmulticast mode [ 619.153787][T10878] RSP: 0018:ffffc90003357960 EFLAGS: 00010283 [ 619.153873][T10878] RAX: ffffffff89c1ec65 RBX: 0000000000000000 RCX: 0000000000080000 [ 619.153887][T10878] RDX: ffffc9000ceab000 RSI: 0000000000000051 RDI: 0000000000000052 [ 619.153899][T10878] RBP: ffffc90003357a10 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 619.153912][T10878] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: dffffc0000000000 [ 619.153925][T10878] R13: ffff88805f38c800 R14: ffff888075160c80 R15: 1ffff9200066af30 [ 619.153939][T10878] FS: 00007f2bd99e86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 619.153956][T10878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 619.221541][T10878] CR2: 00007fc0257eb158 CR3: 000000002c620000 CR4: 00000000003526f0 [ 619.229707][T10878] Call Trace: [ 619.233048][T10878] [ 619.236040][T10878] ? pn_socket_ioctl+0x350/0x350 [ 619.241071][T10878] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 619.246412][T10878] ? security_socket_sendmsg+0x80/0xa0 [ 619.251928][T10878] ? pn_socket_ioctl+0x350/0x350 [ 619.256875][T10878] ____sys_sendmsg+0x61b/0x980 [ 619.261715][T10878] ? __asan_memset+0x22/0x40 [ 619.266363][T10878] ? __sys_sendmsg_sock+0x30/0x30 [ 619.271481][T10878] ? __import_iovec+0x5f2/0x850 [ 619.276380][T10878] ? import_iovec+0x73/0xa0 [ 619.280911][T10878] ___sys_sendmsg+0x2a6/0x360 [ 619.285600][T10878] ? __sys_sendmsg+0x2b0/0x2b0 [ 619.290475][T10878] __se_sys_sendmsg+0x1d0/0x2c0 [ 619.295331][T10878] ? __x64_sys_sendmsg+0x80/0x80 [ 619.300366][T10878] ? lockdep_hardirqs_on+0x98/0x150 [ 619.305648][T10878] do_syscall_64+0x55/0xb0 [ 619.310076][T10878] ? clear_bhb_loop+0x40/0x90 [ 619.314833][T10878] ? clear_bhb_loop+0x40/0x90 [ 619.319518][T10878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.325502][T10878] RIP: 0033:0x7f2bd8b9de99 [ 619.329925][T10878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.349536][T10878] RSP: 002b:00007f2bd99e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.358132][T10878] RAX: ffffffffffffffda RBX: 00007f2bd8e25fa0 RCX: 00007f2bd8b9de99 [ 619.366200][T10878] RDX: 0000000000000004 RSI: 0000200000000540 RDI: 000000000000000a [ 619.374276][T10878] RBP: 00007f2bd8c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 619.382255][T10878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.390232][T10878] R13: 00007f2bd8e26038 R14: 00007f2bd8e25fa0 R15: 00007fff47e34a68 [ 619.398234][T10878] [ 619.401278][T10878] Modules linked in: [ 619.405309][ C0] vkms_vblank_simulate: vblank timer overrun [ 619.415495][T10878] ---[ end trace 0000000000000000 ]--- [ 619.433556][T10878] RIP: 0010:pn_socket_sendmsg+0x235/0x240 [ 619.450239][T10878] Code: 41 5f 5d c3 e8 3c e8 ca 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 b5 05 1e f8 e9 02 ff ff ff e8 6b 88 c5 f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 [ 619.474380][T10878] RSP: 0018:ffffc90003357960 EFLAGS: 00010283 [ 619.480711][T10878] RAX: ffffffff89c1ec65 RBX: 0000000000000000 RCX: 0000000000080000 [ 619.490182][T10878] RDX: ffffc9000ceab000 RSI: 0000000000000051 RDI: 0000000000000052 [ 619.511229][T10878] RBP: ffffc90003357a10 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 619.522911][T10878] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: dffffc0000000000 [ 619.532636][T10878] R13: ffff88805f38c800 R14: ffff888075160c80 R15: 1ffff9200066af30 [ 619.565926][T10878] FS: 00007f2bd99e86c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 619.575662][T10878] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 619.582512][T10878] CR2: 0000000000000000 CR3: 000000002c620000 CR4: 00000000003526f0 [ 619.591101][T10878] Kernel panic - not syncing: Fatal exception [ 619.597818][T10878] Kernel Offset: disabled [ 619.602321][T10878] Rebooting in 86400 seconds..