last executing test programs: 16.449116023s ago: executing program 3 (id=134): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xd7, 0x1ff, 0x1000d}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 16.330076335s ago: executing program 3 (id=136): socket$kcm(0x10, 0x400000002, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000140), 0x400, 0x0) (async) r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000180)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="185000000000000000f0ffff010000009500000000000000d45f96a9bc9b42c702b5b965ab1178a18276f4c3d7447941f7d7ec95b4e2fa1bf80aae4d19777862797f575c65e0a50fbdd2d5fcba992167bfff91aab127ba34bb4892c97027084ec570699b897b4d236b6ed205510074fd0dbd47ee16ed12816ec792b374b775e0445ddf92994961a862a24e28e6f722a353dcf547441cee2b7148fbea4735ac6fce2919ca62eb4675a8c214e834d9d2718e891391d2a21fc8ef27ee1e63da498905a4186e7f1e8dabcd08b81c8f9debbecd563340351bc08fee55f5"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="185000000000000000f0ffff010000009500000000000000d45f96a9bc9b42c702b5b965ab1178a18276f4c3d7447941f7d7ec95b4e2fa1bf80aae4d19777862797f575c65e0a50fbdd2d5fcba992167bfff91aab127ba34bb4892c97027084ec570699b897b4d236b6ed205510074fd0dbd47ee16ed12816ec792b374b775e0445ddf92994961a862a24e28e6f722a353dcf547441cee2b7148fbea4735ac6fce2919ca62eb4675a8c214e834d9d2718e891391d2a21fc8ef27ee1e63da498905a4186e7f1e8dabcd08b81c8f9debbecd563340351bc08fee55f5"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 16.32382011s ago: executing program 3 (id=138): timer_create(0x4, &(0x7f0000000240)={0x0, 0x38, 0x0, @thr={&(0x7f0000000340)="e9f924fe0273e06bbe92c6e735dd716a6a45580c6cbb571d98a88bb264dae84036dc80b8baaf738caaac92710c09862314f91fc3749922e251429df5ebdb2deac734642dfbe905da5f4f277e9aec12e5b01c0cafb49cd7f6edcf98b08300ef1415603eeb17fffd96df34960eb516e59b25b79bf5972c5ec31704cfea00f00d528385595d8ba8dbb3", &(0x7f0000000400)="24140fe7262c46f786bf25a2838e08a2327b6512bcc01455705c50f51a7857e653bcb2d21fe1470f00964189"}}, &(0x7f0000000300)) io_setup(0x3ff, &(0x7f00000001c0)=0x0) io_cancel(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0xfffe, 0xffffffffffffffff, 0x0, 0x0, 0x920c, 0x0, 0x1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c000000020603000000000000000000020000001c0007800800064000000001050015000200000008001240000040000500010006000000050005000200000005000400050000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000fcffff000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mount(0x0, &(0x7f0000000140)='./sys_sec/tomoyo/domain_policy\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x0, 0x0) read(r2, &(0x7f0000000200), 0x200) read(r2, &(0x7f0000000200), 0x200) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) 15.526483288s ago: executing program 3 (id=144): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x4008010) r1 = syz_io_uring_setup(0x93d, &(0x7f0000000280)={0x0, 0xd055, 0x100, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0x1, 0x3000000000000500, 0x0, 0x0, r4}]) dup3(r4, r2, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000), &(0x7f0000000800), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x1000000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000020a01030000e6ff00100000020000000900010073797a30"], 0x7c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setresuid(0x0, 0xee00, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) close(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x3) ioctl$sock_SIOCOUTQ(r8, 0x5411, 0x0) timerfd_create(0x8, 0x800) 14.807194605s ago: executing program 3 (id=147): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@array={0x4000000, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) 14.369714773s ago: executing program 3 (id=151): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x400, 0x144, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r3, 0x4007) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x7ff, 0x9, 0x2, 0x7ff}]}) r4 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) io_uring_enter(r4, 0x0, 0x200002, 0xf, &(0x7f0000000000)={[0x0, 0x4]}, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xa068}}, './file0\x00'}) connect$inet(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000002500)={0x0}, 0x1, 0x0, 0x0, 0x4000401}, 0x48d0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000000)={0x89, 0xa5}, 0x2) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x81}}]}, 0x20}, 0x1, 0x0, 0x0, 0x200060c0}, 0x4) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000023c0)="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", 0x11b}], 0x1}, 0x8000) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000cde5ec75022f9be36e95be35f6795cb50a06518d3a86ad27a59a12e030b34a"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 14.334872049s ago: executing program 32 (id=151): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) statx(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x400, 0x144, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r3, 0x4007) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x7ff, 0x9, 0x2, 0x7ff}]}) r4 = io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) io_uring_enter(r4, 0x0, 0x200002, 0xf, &(0x7f0000000000)={[0x0, 0x4]}, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xa068}}, './file0\x00'}) connect$inet(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000002500)={0x0}, 0x1, 0x0, 0x0, 0x4000401}, 0x48d0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000000000)={0x89, 0xa5}, 0x2) sendmsg$NFQNL_MSG_VERDICT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x81}}]}, 0x20}, 0x1, 0x0, 0x0, 0x200060c0}, 0x4) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000023c0)="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", 0x11b}], 0x1}, 0x8000) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000cde5ec75022f9be36e95be35f6795cb50a06518d3a86ad27a59a12e030b34a"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 3.608191154s ago: executing program 4 (id=223): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007500)={0x28, 0x3f, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@typed={0x4, 0x110}, @nested={0xd, 0x1, 0x0, 0x1, [@generic="6d14ff356ee88bd200"]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) open$dir(&(0x7f00000000c0)='./file0\x00', 0x8400, 0x2) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) syz_io_uring_setup(0xf08, &(0x7f0000000540)={0x0, 0x3295, 0x400, 0x20002, 0x1000051}, 0x0, &(0x7f0000000440)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x259a}, 0x1}) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)="480000001400190c09004beafd0d3602028447000b4e230f00000001a2bc5603ca00000f7f89000000200000495101ff0000000309ff5bffff04000000000000005839c97b910000", 0x48}], 0x1) 3.470311162s ago: executing program 4 (id=224): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080), 0x0, 0x3000, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_ADD(r2, 0x0, 0x90) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) fstat(r3, &(0x7f0000000140)) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r4}) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, &(0x7f00000edb40)={0x0, 0x0}) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$sock_SIOCGPGRP(r5, 0x8904, 0x0) 3.029922501s ago: executing program 0 (id=226): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000060c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x426042, 0x0) ioctl$TCSETSF2(r1, 0x40305828, &(0x7f0000000080)={0x4ae, 0x4, 0x80000005, 0x3, 0xb, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x200}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000001d80)={&(0x7f0000003000)={[{&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="9c13c6299b293f9b726838e2543ed4bad6df4bc6af0bd5086373436cbb38dba66700ec21b722c8bca7342687f1253a2b3fdea5592757dc1af35970b14b9f3cf15bfe07e6048d1b963877a5ba14ab85dbb0c8ef7397b772229fd5f3054999eb4f9be48b8ed032d3ee8640c5249d8635a981a85180a6f63795cafe9791c52bcf456e6ce7f91afe5a80690b35ad16de913a76160a38f7760a95690f778ae85f3b", 0x9f}, {&(0x7f0000001cc0)="5e1305ec4abd415105a95aa902ba632a1918e9b8c3d06ee90118ff841a88d1b81a29edcf6cd7cdd6e1904416cbd9499c979eb981eb2483e3d21c774800aa87a41a5fff7359c65f4c83f86c0d74c83b91185bd1a4c018f9b4f92fd39c464f7709849eb0569de834115bddf7fe748d745e5044fa5d98cca2ebb23cc7fcb3121bd50b67ffdd23", 0x85, 0x4}]}, 0x3, 0x1, 0x1}, 0x1) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r3, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000300)={0x0, 'veth1_to_batadv\x00', {0x3}, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) openat$cdrom(0xffffff9c, &(0x7f0000000280), 0x301180, 0x0) 2.390038554s ago: executing program 4 (id=231): mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x2800402, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r0, 0x0, 0x4a) 1.55982621s ago: executing program 4 (id=233): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getpeername$llc(r0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x80000000, 0x0, 'queue0\x00', 0x32a}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffe0}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@deltaction={0x154, 0x31, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x72}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x8004}, 0x4880) io_setup(0x6, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000001c0)="c838d15c0f4c55daae6518c930f2f44f5db30a45e375", 0x16}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r7, 0x4b63, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x10, &(0x7f0000000780)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@ldst={0x2, 0x3, 0x1, 0x7, 0xa, 0xffffffffffffffd4, 0xffffffffffffffff}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.48010755s ago: executing program 1 (id=235): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0xc0, 0x42000) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000800)=""/121) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000340), 0x8, 0x58, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={0xffffffffffffffff, r5, 0x25, 0x5, @val=@target_btf_id=r6}, 0x14) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x5, 0x4) (async) openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2000, 0x0) (async) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x7, 0x2) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r7, 0x107, 0x12, &(0x7f0000000000)=0xe9, 0x4) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5900e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x43, &(0x7f00000002c0)={'IDLETIMER\x00'}, &(0x7f0000000300)=0x1e) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) 1.479812288s ago: executing program 1 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080060d0ffffff000000000000001718110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.479606974s ago: executing program 0 (id=237): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2000000014000105000000000000000023000000010000000500020008000000", 0x20}], 0x1}, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000100)={0x23, 0x10, 0x8}, 0x10) (async) connect$phonet_pipe(r1, &(0x7f0000000140)={0x23, 0x10, 0x8}, 0x10) (async) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'caif0\x00', 0x1}) (async) r4 = socket$packet(0x11, 0x3, 0xf500) bind$packet(r4, &(0x7f0000000200)={0x11, 0xf500, 0x1}, 0x14) (async) write(r2, &(0x7f0000000240)="080800000a10100041010000000000", 0x1d) 1.269566709s ago: executing program 1 (id=238): r0 = syz_clone(0x8800400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="186000000000000000000100d5a70c4c18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x94) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x10002, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48fbafc0cec0f01310f019c09000f01c2", 0x6f}], 0x1, 0x7d, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x8, &(0x7f0000000000)=[{0x9, 0x3, 0x7, 0x6}, {0x1, 0xa, 0x0, 0xaf}, {0x2, 0x4, 0x10, 0x6}, {0x3, 0x50, 0xbc, 0x5}, {0xfdb7, 0xff, 0x0, 0x9}, {0xffff, 0x7, 0x0, 0x1}, {0xffff, 0xd, 0xc3, 0x2}, {0xf4ea, 0x7, 0x4b}]}) r4 = getpid() sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x55af) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r6}}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000017c0)={0x2e, 0xa9, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, r6, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001780)=@new_dev={0x1, 0xe31, 0x0, 0x0, 0x1000, 0xffffffff, r4, 0x0, 0x10}}}, &(0x7f0000001840)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FADVISE={0x18, 0x20, 0x0, @fd=r3, 0x1, 0x0, 0x19, 0x0, 0x1, {0x0, r6}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r8, 0x40045402, &(0x7f0000000040)=0x1) readv(r8, &(0x7f0000000200)=[{&(0x7f0000000640)=""/201, 0xc9}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r9, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008811}, 0x48080) kcmp(r0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 988.3445ms ago: executing program 0 (id=240): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@sndinfo={0x1c, 0x84, 0x2, {0x2, 0x41, 0xe8, 0x9}}], 0x1c, 0x8001}], 0x1, 0x40) 985.919142ms ago: executing program 0 (id=241): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@sndinfo={0x1c, 0x84, 0x2, {0x2, 0x41, 0xe8, 0x9}}], 0x1c, 0x8001}], 0x1, 0x40) 946.898344ms ago: executing program 4 (id=242): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, '\x00', "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) 944.610737ms ago: executing program 0 (id=243): r0 = socket$inet6(0xa, 0x802, 0x0) r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000080), 0x101000, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x15, &(0x7f00000000c0)="ef0204005a99aeef539800fff068ab7b180fc6d91f2be82db1996d217e3def", 0x1f) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000410900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a30000000008c000000060a010400000000000000000100000208000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000002080004400000002205000200070000002c0001800c00010062697477697365001c0002800800014000000011080002400000001208000340000000070900010073797a30"], 0x100}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8, 0x0, {}, 0xff}, 0x18) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r6, 0xfdf04a8e0828ded4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x40000) ioctl(r4, 0x8b22, &(0x7f0000000040)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) 880.135473ms ago: executing program 1 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x1) mount$overlay(0xfffffdf9, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2008008, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 879.718445ms ago: executing program 4 (id=245): close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f0000000540)=0xfff) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000005bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000013c0)="fe", 0x1}], 0x1}}], 0x2, 0xc00cc44) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0600000004000f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="2800000020000103000000000000000002000000e7a900001a0000000c000c400000000000000009"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 808.782382ms ago: executing program 1 (id=246): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) lsm_set_self_attr(0x69, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@acquire={0x1ac, 0x17, 0x301, 0x0, 0x0, {{@in=@broadcast}, @in6=@remote, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1}, {{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x2, @in=@empty}]}]}, 0x1ac}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000010001d46c9dea07381dc5a5a5a0104000040000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817da4b5f31a24001280110001006272696467655f736c617665000000000c0005800500040001000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/201, &(0x7f0000000140)=0xc9) 803.079036ms ago: executing program 0 (id=247): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) close(0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x2, 0x9, 0x0, 0xaba}, 0x4, 0x0, 0x3ff, 0x1, 0x9, 0x19, 0x6, 0x1f, 0x5, 0x9, {0x8, 0x400, 0x80, 0x8274, 0x3, 0x15}}}}]}, 0x78}}, 0x20040084) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x888, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfffd, 0xfff3}, {0xfff5}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x858, 0x2, [@TCA_BASIC_POLICE={0x854, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x0, 0x140, 0x9cd0, 0x78e, 0x8, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x1ff, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x0, 0xfffffffe, 0x6, 0x0, 0x2, 0x800, 0x8, 0x2, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000000, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0x81, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0xfeb9, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffb, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x9, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x3, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x9, 0x3fed, 0x2, 0x4, 0x2, 0x101, 0x4, 0x7, 0x240, 0x4, 0x5, 0x1, 0xfffffffb, 0x1, 0x800, 0x7fffffff, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0x101, 0x6, 0x7, 0x7, 0x3, 0x2, 0x3, 0x8, 0x9, 0x0, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e6, 0x54d7, 0x2, 0x3, 0x8, 0x1, 0xf32, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x1, 0x4, 0x7, 0x9, 0x959a, 0x0, 0x7, 0x2, 0x4, 0x7f, 0x2, 0x80000000, 0x10000, 0x10, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0xfffffffc, 0xe6, 0x2, 0xffffffff, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x1000, 0xfff, 0x5, 0xc1, 0x0, 0x7, 0x40, 0x7fffffff, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x2, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0x0, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x10001, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x5, 0x2, 0x9, 0x7, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff7, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0xffffffff, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0x9, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x7, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0xffff, 0x5, 0x19, 0x6c, 0x9, 0x7fffffff, 0xceb6, 0x5, 0x7, 0x53c0, 0x6, 0x4, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x1, 0x6, 0xffffff7b, 0x15ef7157, 0x4, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x3fd1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x5, 0x7f, 0x9, 0x40, 0x9, 0x3, 0x0, 0x9, 0x8, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x78, 0x80, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x0, 0x1, 0x1, 0x59ac, 0xebda, 0x7, 0x10000, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x8d03, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x6, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a8, 0x400, 0x0, 0x4, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x8, 0x6, 0x4d2, 0x2, {0x8, 0x0, 0xa, 0x8, 0x8, 0x9}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 802.615297ms ago: executing program 1 (id=248): readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7dc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x20) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x4c0, 0x1b0, 0x0, 0x148, 0x1b0, 0x148, 0x42c, 0x240, 0x240, 0x42c, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0x400, 0x4}}, @common=@inet=@recent0={{0xf4}, {0x20000000, 0x6, 0x1, 0x1, 'syz1\x00', 0xa}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x258, 0x27c, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0xa, 0x2, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x51c) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000007903000000000000050000001840000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000008510000004000000184a0000f9ffff0000000000000000950000000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x4, 0xe1, &(0x7f00000003c0)=""/225, 0x41100, 0x1f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000540)=[0xffffffffffffffff, r6, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x1, 0xb, 0xd}, {0x3, 0x3, 0x8, 0xc}, {0x1, 0x5, 0x3}, {0x4, 0x2, 0xf, 0x2}, {0x3, 0x1, 0xe, 0x8}, {0x5, 0x4, 0xe, 0x6}, {0x2, 0x1, 0xe, 0x7}, {0x2, 0x4, 0x8, 0xb}, {0x8001, 0x5, 0x1, 0x1}], 0x10, 0x2}, 0x94) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000580)={0x2, 0x0, 0x6, {0xc0020006, 0xe7ffffff, 0x5, 0x54ef}}) r9 = syz_open_dev$ptys(0xc, 0x3, 0x0) close(r9) 802.41831ms ago: executing program 2 (id=249): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x80000) dup(r0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x100000, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 350.282652ms ago: executing program 2 (id=250): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=[@sndinfo={0x1c, 0x84, 0x2, {0x2, 0x41, 0xe8, 0x9}}], 0x1c, 0x8001}], 0x1, 0x40) 262.94661ms ago: executing program 2 (id=251): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@sndinfo={0x1c, 0x84, 0x2, {0x2, 0x41, 0xe8, 0x9}}], 0x1c, 0x8001}], 0x1, 0x40) 150.286969ms ago: executing program 2 (id=252): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x2800402, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r0, 0x0, 0x4a) 89.990599ms ago: executing program 2 (id=253): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000ffffffff0500"/20, @ANYRES32=r0], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0xf8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x20008040) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 0s ago: executing program 2 (id=254): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, '\x00', "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:19346' (ED25519) to the list of known hosts. [ 71.546491][ T5722] cgroup: Unknown subsys name 'net' [ 71.677866][ T5722] cgroup: Unknown subsys name 'cpuset' [ 71.681897][ T5722] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.568407][ T5722] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.959561][ T10] cfg80211: failed to load regulatory.db [ 76.213880][ T5745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.214734][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.216976][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.219031][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.221956][ T5745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.224443][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.226480][ T5745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.228913][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.230375][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.232314][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.232461][ T5746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.232823][ T5746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.234132][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.236056][ T5750] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.236460][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.237146][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.237274][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.238132][ T5749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.239964][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.240975][ T5750] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.730215][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.733333][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.735672][ T5734] bridge_slave_0: entered allmulticast mode [ 76.738373][ T5734] bridge_slave_0: entered promiscuous mode [ 76.744009][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.746726][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.749267][ T5734] bridge_slave_1: entered allmulticast mode [ 76.752109][ T5734] bridge_slave_1: entered promiscuous mode [ 76.799013][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.825127][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.874922][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.878345][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.880487][ T5735] bridge_slave_0: entered allmulticast mode [ 76.883047][ T5735] bridge_slave_0: entered promiscuous mode [ 76.886765][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.889423][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.892003][ T5735] bridge_slave_1: entered allmulticast mode [ 76.894545][ T5735] bridge_slave_1: entered promiscuous mode [ 76.913229][ T5734] team0: Port device team_slave_0 added [ 76.933399][ T5734] team0: Port device team_slave_1 added [ 76.951595][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.982693][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.990766][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.993316][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.001185][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.016540][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.019006][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.021259][ T5737] bridge_slave_0: entered allmulticast mode [ 77.023818][ T5737] bridge_slave_0: entered promiscuous mode [ 77.027546][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.030180][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.038112][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.041703][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.044370][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.046644][ T5736] bridge_slave_0: entered allmulticast mode [ 77.049226][ T5736] bridge_slave_0: entered promiscuous mode [ 77.058981][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.061243][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.063495][ T5736] bridge_slave_1: entered allmulticast mode [ 77.066104][ T5736] bridge_slave_1: entered promiscuous mode [ 77.068496][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.070739][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.072940][ T5737] bridge_slave_1: entered allmulticast mode [ 77.075584][ T5737] bridge_slave_1: entered promiscuous mode [ 77.083020][ T5735] team0: Port device team_slave_0 added [ 77.086083][ T5735] team0: Port device team_slave_1 added [ 77.131005][ T5734] hsr_slave_0: entered promiscuous mode [ 77.133260][ T5734] hsr_slave_1: entered promiscuous mode [ 77.136732][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.140720][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.143771][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.146120][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.153930][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.158264][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.160452][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.168276][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.172819][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.177639][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.228679][ T5737] team0: Port device team_slave_0 added [ 77.240708][ T5736] team0: Port device team_slave_0 added [ 77.245371][ T5735] hsr_slave_0: entered promiscuous mode [ 77.247531][ T5735] hsr_slave_1: entered promiscuous mode [ 77.249518][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 77.251310][ T5735] Cannot create hsr debugfs directory [ 77.253895][ T5737] team0: Port device team_slave_1 added [ 77.259729][ T5736] team0: Port device team_slave_1 added [ 77.296206][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.298410][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.306112][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.314691][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.316987][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.324688][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.328480][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.330924][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.339239][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.355730][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.357944][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.365780][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.429881][ T5737] hsr_slave_0: entered promiscuous mode [ 77.432008][ T5737] hsr_slave_1: entered promiscuous mode [ 77.434045][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 77.435999][ T5737] Cannot create hsr debugfs directory [ 77.444407][ T5736] hsr_slave_0: entered promiscuous mode [ 77.446977][ T5736] hsr_slave_1: entered promiscuous mode [ 77.449272][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 77.451042][ T5736] Cannot create hsr debugfs directory [ 77.539380][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.547208][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.552868][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.558119][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.579695][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.584283][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.587562][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.591619][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.671871][ T5735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.676645][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.680325][ T5735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.684589][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.688627][ T5735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.692633][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.696459][ T5735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.700137][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.746919][ T5736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.753736][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.757532][ T5736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.761427][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.763954][ T5736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.768344][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.774264][ T5736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.778129][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.837058][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.843652][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.848296][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.853354][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.857149][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.862716][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.866062][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.870508][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.877003][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.913701][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.931986][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.934553][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.941372][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.954506][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.957198][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.987176][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.008189][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.010449][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.021607][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.025862][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.028044][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.041077][ T5734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.048914][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.079362][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.086599][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.094686][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.096987][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.105458][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.108063][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.121961][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.124171][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.127859][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.130112][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.277795][ T5743] Bluetooth: hci2: command tx timeout [ 78.278989][ T5750] Bluetooth: hci1: command tx timeout [ 78.285602][ T5750] Bluetooth: hci3: command tx timeout [ 78.285631][ T5743] Bluetooth: hci0: command tx timeout [ 78.302372][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.333181][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.337492][ T5734] veth0_vlan: entered promiscuous mode [ 78.350955][ T5734] veth1_vlan: entered promiscuous mode [ 78.383368][ T5735] veth0_vlan: entered promiscuous mode [ 78.390652][ T5734] veth0_macvtap: entered promiscuous mode [ 78.394088][ T5735] veth1_vlan: entered promiscuous mode [ 78.400602][ T5734] veth1_macvtap: entered promiscuous mode [ 78.406479][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.413984][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.426215][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.437244][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.456533][ T5735] veth0_macvtap: entered promiscuous mode [ 78.466269][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.475107][ T5735] veth1_macvtap: entered promiscuous mode [ 78.480147][ T5736] veth0_vlan: entered promiscuous mode [ 78.490250][ T5736] veth1_vlan: entered promiscuous mode [ 78.513951][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.533711][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.541954][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.545034][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.567616][ T5737] veth0_vlan: entered promiscuous mode [ 78.577952][ T5736] veth0_macvtap: entered promiscuous mode [ 78.582201][ T229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.585491][ T229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.585986][ T5737] veth1_vlan: entered promiscuous mode [ 78.593888][ T5736] veth1_macvtap: entered promiscuous mode [ 78.624597][ T5734] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.627753][ T229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.631479][ T5737] veth0_macvtap: entered promiscuous mode [ 78.633305][ T229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.634838][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.645315][ T5734] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 78.646691][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.655943][ T5737] veth1_macvtap: entered promiscuous mode [ 78.657157][ T5734] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 78.660623][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.663142][ T5734] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 78.673982][ T5734] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 78.696544][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.703080][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.706483][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.706716][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.713435][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.721926][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.765630][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.786681][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.791100][ T5844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.807037][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.813033][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.840126][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.848398][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.872224][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.875565][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.892766][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.896637][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.899794][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.902647][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.945439][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.953065][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.959630][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.966265][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.972020][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.981994][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.984832][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.029065][ T5897] tracefs: Unknown parameter '' [ 79.295290][ T50] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 79.455298][ T50] usb 8-1: Using ep0 maxpacket: 8 [ 79.659222][ T50] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.227589][ T50] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.235284][ T50] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 80.245996][ T50] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.328473][ T50] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.352884][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.356721][ T5743] Bluetooth: hci0: command tx timeout [ 80.358675][ T5089] Bluetooth: hci3: command tx timeout [ 80.358704][ T5745] Bluetooth: hci1: command tx timeout [ 80.360980][ T5750] Bluetooth: hci2: command tx timeout [ 80.613258][ T50] usb 8-1: GET_CAPABILITIES returned 0 [ 80.615100][ T50] usbtmc 8-1:16.0: can't read capabilities [ 80.757960][ T5920] Invalid ELF header magic: != ELF [ 80.944694][ T5898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.972940][ T5898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.019319][ T5898] syzkaller0: entered promiscuous mode [ 81.021063][ T5898] syzkaller0: entered allmulticast mode [ 81.039483][ T5923] lo: entered allmulticast mode [ 81.043109][ T5923] bond0: entered allmulticast mode [ 81.046495][ T5923] dummy0: entered allmulticast mode [ 81.049642][ T5923] eql: entered allmulticast mode [ 81.051350][ T5923] ifb0: entered allmulticast mode [ 81.054621][ T5923] ifb1: entered allmulticast mode [ 81.059815][ T5923] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 81.068173][ T5923] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 81.072497][ T5923] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 81.075017][ T5923] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 81.078330][ T5923] hwsim0: entered allmulticast mode [ 81.080089][ T5923] ieee802154 phy0 wpan0: entered allmulticast mode [ 81.082348][ T5923] ieee802154 phy1 wpan1: entered allmulticast mode [ 81.084604][ T5923] teql0: entered allmulticast mode [ 81.086751][ T5923] tunl0: entered allmulticast mode [ 81.088451][ T5923] gre0: entered allmulticast mode [ 81.090388][ T5923] gretap0: entered allmulticast mode [ 81.093182][ T5923] erspan0: entered allmulticast mode [ 81.095191][ T5923] ip_vti0: entered allmulticast mode [ 81.097064][ T5923] ip6_vti0: entered allmulticast mode [ 81.099400][ T5923] sit0: entered allmulticast mode [ 81.101122][ T5923] ip6tnl0: entered allmulticast mode [ 81.102927][ T5923] ip6gre0: entered allmulticast mode [ 81.104748][ T5923] lapb0: entered allmulticast mode [ 81.108018][ T5923] lapb1: entered allmulticast mode [ 81.109805][ T5923] lapb2: entered allmulticast mode [ 81.111637][ T5923] lapb3: entered allmulticast mode [ 81.113467][ T5923] lapb4: entered allmulticast mode [ 81.115302][ T5923] lapb5: entered allmulticast mode [ 81.115737][ T3258] usb 8-1: USB disconnect, device number 2 [ 81.117181][ T5923] lapb6: entered allmulticast mode [ 81.121256][ T5923] lowpan0: entered allmulticast mode [ 81.780960][ T5933] tmpfs: Bad value for 'huge' [ 81.785170][ T5933] Zero length message leads to an empty skb [ 81.787879][ T5933] binder: Unknown parameter 'staZs' [ 81.803796][ T5929] program syz.2.13 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.530855][ T5750] Bluetooth: hci2: command tx timeout [ 82.532882][ T5750] Bluetooth: hci0: command tx timeout [ 82.534762][ T5750] Bluetooth: hci3: command tx timeout [ 82.537132][ T5750] Bluetooth: hci1: command tx timeout [ 82.614885][ T5750] Bluetooth: hci2: connection err: -111 [ 82.628331][ T5949] syzkaller0: entered promiscuous mode [ 82.630169][ T5949] syzkaller0: entered allmulticast mode [ 82.801195][ T5951] netlink: 40 bytes leftover after parsing attributes in process `syz.3.20'. [ 83.149299][ T5966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24'. [ 83.153435][ T5966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'. [ 83.306904][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 83.363602][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'. [ 83.455342][ T5488] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.857182][ T5968] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 83.860407][ T5968] block device autoloading is deprecated and will be removed. [ 83.871591][ T5488] usb 5-1: unable to get BOS descriptor or descriptor too short [ 83.874295][ T5488] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 83.877712][ T5488] usb 5-1: no configurations [ 83.879340][ T5488] usb 5-1: can't read configurations, error -22 [ 84.464780][ T5984] overlayfs: statfs failed on './file0' [ 84.605473][ T5743] Bluetooth: hci0: command tx timeout [ 84.605517][ T5089] Bluetooth: hci3: command tx timeout [ 84.607778][ T5750] Bluetooth: hci1: command tx timeout [ 84.608922][ T5745] Bluetooth: hci2: command tx timeout [ 84.935315][ T5488] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 85.095314][ T5488] usb 5-1: Using ep0 maxpacket: 8 [ 85.111449][ T5488] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 85.127940][ T5488] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.135943][ T5488] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 85.143802][ T5488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.169397][ T5488] usb 5-1: config 0 descriptor?? [ 85.286903][ T6013] jffs2: notice: (6013) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 85.305323][ T41] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 85.370288][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 85.434992][ T6018] loop8: detected capacity change from 0 to 7 [ 85.441488][ T6018] Dev loop8: unable to read RDB block 7 [ 85.443313][ T6018] loop8: unable to read partition table [ 85.445662][ T6018] loop8: partition table beyond EOD, truncated [ 85.447665][ T6018] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 85.466208][ T41] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 85.471837][ T41] usb 7-1: config 0 has no interfaces? [ 85.473558][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.483106][ T41] usb 7-1: config 0 descriptor?? [ 85.488970][ T5999] Set syz1 is full, maxelem 6117 reached [ 85.519730][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 85.532494][ T41] usb 5-1: USB disconnect, device number 3 [ 85.737660][ T41] usb 7-1: USB disconnect, device number 2 [ 86.124648][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 86.514755][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41'. [ 86.532261][ T6030] macvtap1: entered promiscuous mode [ 86.533989][ T6030] bridge0: entered promiscuous mode [ 86.537656][ T6030] bridge0: port 3(macvtap1) entered blocking state [ 86.539735][ T6030] bridge0: port 3(macvtap1) entered disabled state [ 86.541961][ T6030] macvtap1: entered allmulticast mode [ 86.543609][ T6030] bridge0: entered allmulticast mode [ 86.547676][ T6030] macvtap1: left allmulticast mode [ 86.549517][ T6030] bridge0: left allmulticast mode [ 86.568392][ T34] bridge0: left promiscuous mode [ 86.801133][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 87.853165][ T6068] __nla_validate_parse: 3 callbacks suppressed [ 87.853176][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 88.531506][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 88.740447][ T6084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.60'. [ 88.744750][ T6084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.60'. [ 88.965224][ T6097] [U]  [ 89.005277][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 89.015872][ T6100] netlink: 212 bytes leftover after parsing attributes in process `syz.2.67'. [ 89.019129][ T6100] netlink: 212 bytes leftover after parsing attributes in process `syz.2.67'. [ 89.073884][ T6104] scsi_nl_rcv_msg: discarding partial skb [ 89.119899][ T6106] evm: overlay not supported [ 89.177720][ T6106] cifs: Unknown parameter './bus' [ 89.228073][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 89.419802][ T6119] loop0: detected capacity change from 0 to 16384 [ 89.489286][ T6119] loop0: p1 [ 89.504757][ T6122] netlink: 72 bytes leftover after parsing attributes in process `syz.0.77'. [ 89.535900][ T5741] udevd[5741]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 89.618918][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 89.662985][ T6136] FAULT_INJECTION: forcing a failure. [ 89.662985][ T6136] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.668063][ T6136] CPU: 3 UID: 0 PID: 6136 Comm: syz.1.84 Not tainted syzkaller #0 PREEMPT(full) [ 89.668078][ T6136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.668084][ T6136] Call Trace: [ 89.668088][ T6136] [ 89.668092][ T6136] dump_stack_lvl+0x100/0x190 [ 89.668110][ T6136] should_fail_ex.cold+0x5/0xa [ 89.668122][ T6136] _copy_to_user+0x32/0xd0 [ 89.668140][ T6136] simple_read_from_buffer+0xcb/0x170 [ 89.668157][ T6136] proc_fail_nth_read+0x1af/0x230 [ 89.668172][ T6136] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.668187][ T6136] ? rw_verify_area+0xce/0x6d0 [ 89.668200][ T6136] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.668214][ T6136] vfs_read+0x1e4/0xb40 [ 89.668229][ T6136] ? __pfx_vfs_read+0x10/0x10 [ 89.668242][ T6136] ? find_held_lock+0x2b/0x80 [ 89.668258][ T6136] ? __fget_files+0x215/0x3d0 [ 89.668276][ T6136] ? __fget_files+0x21f/0x3d0 [ 89.668294][ T6136] ksys_read+0x12a/0x250 [ 89.668308][ T6136] ? __pfx_ksys_read+0x10/0x10 [ 89.668325][ T6136] do_int80_emulation+0x166/0x650 [ 89.668337][ T6136] asm_int80_emulation+0x1a/0x20 [ 89.668348][ T6136] RIP: 0023:0xf71374eb [ 89.668357][ T6136] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 89.668367][ T6136] RSP: 002b:00000000f53ed4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 89.668377][ T6136] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53ed5d0 [ 89.668384][ T6136] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 89.668390][ T6136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 89.668395][ T6136] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 89.668401][ T6136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.668414][ T6136] [ 90.030067][ T6166] netlink: 'syz.0.96': attribute type 1 has an invalid length. [ 90.051967][ T6166] bond1 (unregistering): Released all slaves [ 90.165339][ T41] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 90.335377][ T41] usb 6-1: Using ep0 maxpacket: 32 [ 90.338320][ T41] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 90.343082][ T41] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 90.346312][ T41] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 90.350784][ T41] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 90.356095][ T41] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 90.361389][ T41] usb 6-1: config 0 interface 0 has no altsetting 0 [ 90.366070][ T41] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 90.369132][ T41] usb 6-1: Product: syz [ 90.370643][ T41] usb 6-1: Manufacturer: syz [ 90.372278][ T41] usb 6-1: SerialNumber: syz [ 90.376347][ T41] usb 6-1: config 0 descriptor?? [ 90.380749][ T41] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 90.388890][ T41] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 90.648236][ T6158] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 90.651400][ T24] usb 6-1: USB disconnect, device number 2 [ 90.651558][ C3] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 90.665812][ T24] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 91.109543][ T6189] fuse: Bad value for 'fd' [ 91.130694][ T6189] block nbd0: NBD_DISCONNECT [ 91.875371][ T5842] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.892365][ T6209] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.025713][ T5842] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 92.029753][ T5842] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 92.032442][ T5842] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 92.035579][ T5842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 92.038386][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 92.041712][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 92.048187][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 92.050956][ T5842] usb 5-1: Product: syz [ 92.052393][ T5842] usb 5-1: Manufacturer: syz [ 92.063209][ T5842] cdc_wdm 5-1:1.0: skipping garbage [ 92.065040][ T5842] cdc_wdm 5-1:1.0: skipping garbage [ 92.074303][ T5842] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 92.076478][ T5842] cdc_wdm 5-1:1.0: Unknown control protocol [ 92.184927][ T6216] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.305530][ T6216] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.390030][ T6216] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.495583][ T6232] jffs2: notice: (6232) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 92.532134][ T6216] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.695436][ T5844] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.700305][ T5844] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.707260][ T5844] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.711625][ T6236] mmap: syz.0.108 (6236) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.716120][ T5844] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.883125][ T6228] futex_wake_op: syz.0.108 tries to shift op by 144; fix this program [ 92.887110][ T6228] futex_wake_op: syz.0.108 tries to shift op by 144; fix this program [ 93.134043][ T6238] __nla_validate_parse: 2 callbacks suppressed [ 93.134059][ T6238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 93.300581][ T6241] syzkaller0: entered promiscuous mode [ 93.301917][ T6230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.302327][ T6241] syzkaller0: entered allmulticast mode [ 93.306098][ T6230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.414610][ T6241] syz.2.118 (6241) used greatest stack depth: 19672 bytes left [ 93.535427][ T5833] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 93.686427][ T5833] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.691245][ T5833] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.695905][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 93.699705][ T5833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 93.703571][ T5833] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.707970][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.712630][ T5833] usb 6-1: config 0 descriptor?? [ 93.716034][ T6231] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 93.925170][ T5833] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 93.928182][ T5833] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 93.931107][ T5833] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 93.933867][ T5833] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 93.936512][ T5833] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 93.951027][ T5833] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 94.063153][ T6249] Illegal XDP return value 4294967274 on prog (id 33) dev N/A, expect packet loss! [ 94.218876][ T5842] usb 6-1: USB disconnect, device number 3 [ 94.499968][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'. [ 94.658882][ T5842] usb 5-1: USB disconnect, device number 4 [ 95.389093][ T6285] bochs-drm 0000:00:01.0: [drm] Unknown color mode 6; guessing buffer size. [ 95.458689][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 95.817497][ T10] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 95.985873][ T10] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 95.992833][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.998981][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 96.005162][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 96.017079][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.021516][ T10] usb 6-1: Product: syz [ 96.027136][ T10] usb 6-1: Manufacturer: syz [ 96.032129][ T10] usb 6-1: SerialNumber: syz [ 96.087377][ T10] usb 6-1: config 0 descriptor?? [ 96.093407][ T6303] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.121688][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 96.145271][ T10] rc_core: IR keymap rc-streamzap not found [ 96.147050][ T10] Registered IR keymap rc-empty [ 96.150054][ T10] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 96.154470][ T10] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input6 [ 96.695152][ T6322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.144'. [ 96.916742][ T5833] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 97.065758][ T5833] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.070577][ T5833] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 97.074330][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 97.079050][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 97.082599][ T5833] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.086720][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.090645][ T5833] usb 7-1: config 0 descriptor?? [ 97.092739][ T6326] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 97.331844][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.375358][ T50] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 97.408243][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.478654][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.525960][ T50] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 97.532613][ T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.538612][ T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.542623][ T50] usb 5-1: config 0 descriptor?? [ 97.557704][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.583619][ T5745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.587143][ T5745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.590302][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.593602][ T5745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.597973][ T5745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.673936][ T5833] usbhid 7-1:0.0: can't add hid device: -71 [ 97.681137][ T5833] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 97.698761][ T5833] usb 7-1: USB disconnect, device number 3 [ 97.742089][ T13] bridge_slave_1: left allmulticast mode [ 97.743945][ T13] bridge_slave_1: left promiscuous mode [ 97.746924][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.752541][ T50] usbhid 5-1:0.0: can't add hid device: -71 [ 97.754470][ T50] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 97.758231][ T13] bridge_slave_0: left allmulticast mode [ 97.760442][ T13] bridge_slave_0: left promiscuous mode [ 97.762220][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.769030][ T50] usb 5-1: USB disconnect, device number 5 [ 97.909195][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.914513][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.918302][ T13] bond0 (unregistering): Released all slaves [ 98.195397][ T851] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 98.204876][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 98.251761][ T13] hsr_slave_0: left promiscuous mode [ 98.255692][ T13] hsr_slave_1: left promiscuous mode [ 98.258609][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.261143][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.268586][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.271186][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.287914][ T13] veth1_macvtap: left promiscuous mode [ 98.289721][ T13] veth0_macvtap: left promiscuous mode [ 98.291450][ T13] veth1_vlan: left promiscuous mode [ 98.293083][ T13] veth0_vlan: left promiscuous mode [ 98.372987][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'. [ 98.375742][ T851] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.376688][ T851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.382369][ T851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.387633][ T851] usb 5-1: config 0 descriptor?? [ 98.498129][ T13] team0 (unregistering): Port device team_slave_1 removed [ 98.498472][ T6375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 98.507181][ T13] team0 (unregistering): Port device team_slave_0 removed [ 98.659200][ T24] usb 6-1: USB disconnect, device number 4 [ 98.740120][ T6373] hsr_slave_1 (unregistering): left promiscuous mode [ 98.749877][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 98.774561][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.154'. [ 98.846839][ T6343] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.849058][ T851] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 98.853521][ T6343] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.856799][ T6343] bridge_slave_0: entered allmulticast mode [ 98.860270][ T851] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0926:3333.0003/input/input7 [ 98.860752][ T6343] bridge_slave_0: entered promiscuous mode [ 98.868512][ T6343] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.871623][ T6343] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.874274][ T6343] bridge_slave_1: entered allmulticast mode [ 98.877958][ T6343] bridge_slave_1: entered promiscuous mode [ 98.893650][ T6343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.898262][ T6343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.920587][ T6343] team0: Port device team_slave_0 added [ 98.925644][ T6343] team0: Port device team_slave_1 added [ 99.018294][ T851] keytouch 0003:0926:3333.0003: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 99.024716][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.029421][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.047463][ T6343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.064876][ T6343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.067323][ T6343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.075368][ T6343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.109550][ T6343] hsr_slave_0: entered promiscuous mode [ 99.111979][ T6343] hsr_slave_1: entered promiscuous mode [ 99.114686][ T6343] debugfs: 'hsr0' already exists in 'hsr' [ 99.116910][ T6343] Cannot create hsr debugfs directory [ 99.261633][ T24] usb 5-1: USB disconnect, device number 6 [ 99.303524][ T6343] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.320590][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.325670][ T6343] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.334443][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.338597][ T6343] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.368790][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.371746][ T6343] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.389908][ T6343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.416241][ T6390] fido_id[6390]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/report_descriptor': No such file or directory [ 99.452065][ T6343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.461765][ T6343] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.471581][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.474124][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.485622][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.488359][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.578520][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 99.645599][ T5750] Bluetooth: hci3: command tx timeout [ 99.886209][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 [ 99.909256][ T6343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.065807][ T5842] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 100.071923][ T6343] veth0_vlan: entered promiscuous mode [ 100.081314][ T6343] veth1_vlan: entered promiscuous mode [ 100.113879][ T6343] veth0_macvtap: entered promiscuous mode [ 100.118830][ T6343] veth1_macvtap: entered promiscuous mode [ 100.127657][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.136290][ T6343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.155878][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.160674][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.206417][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.208994][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.215927][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.216316][ T5842] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 100.224728][ T5842] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 100.228164][ T5842] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 100.233080][ T5842] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 100.235469][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.235746][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.237516][ T5842] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.243758][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.248374][ T5842] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 100.254897][ T5842] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 100.259248][ T5842] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 100.263841][ T5842] usb 6-1: config 168 interface 0 has no altsetting 0 [ 100.267579][ T5842] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 100.269995][ T5842] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 100.273387][ T5842] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 100.278457][ T5842] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.283396][ T5842] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 100.288369][ T5842] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 100.293000][ T5842] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 100.298782][ T5842] usb 6-1: config 168 interface 0 has no altsetting 0 [ 100.301753][ T5842] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 100.304688][ T5842] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 100.312473][ T5842] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 100.316835][ T5842] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.320509][ T5842] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 100.324386][ T5842] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 100.328897][ T5842] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 100.333157][ T5842] usb 6-1: config 168 interface 0 has no altsetting 0 [ 100.339009][ T5842] usb 6-1: string descriptor 0 read error: -22 [ 100.341054][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.363574][ T5842] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 100.541681][ T6447] syz.4.161 uses obsolete (PF_INET,SOCK_PACKET) [ 100.664620][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 100.671258][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 100.763582][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.163'. [ 101.725755][ T5750] Bluetooth: hci3: command tx timeout [ 101.898289][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 101.903522][ T6475] netlink: 40 bytes leftover after parsing attributes in process `syz.4.170'. [ 101.994140][ T6478] random: crng reseeded on system resumption [ 102.003475][ T6477] binder: 6476:6477 ioctl c0306201 80000640 returned -22 [ 102.058127][ T6478] 9p: Bad value for 'rfdno' [ 102.361719][ T6480] warning: `syz.2.172' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.714871][ T6482] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 102.717451][ T6482] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 102.723192][ T6482] vhci_hcd vhci_hcd.0: Device attached [ 102.811053][ T5488] usb 6-1: USB disconnect, device number 5 [ 102.965713][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 103.124619][ T6503] netlink: 'syz.0.180': attribute type 5 has an invalid length. [ 103.125388][ T29] usb 42-1: SetAddress Request (2) to port 0 [ 103.444221][ T29] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 103.575800][ T6483] vhci_hcd: connection reset by peer [ 103.580405][ T5844] vhci_hcd vhci_hcd.2: stop threads [ 103.582531][ T5844] vhci_hcd vhci_hcd.2: release socket [ 103.586109][ T5844] vhci_hcd vhci_hcd.2: disconnect device [ 103.805382][ T5750] Bluetooth: hci3: command tx timeout [ 103.835733][ T6513] binder: 6512:6513 ioctl c0306201 80000480 returned -14 [ 103.842806][ T6513] comedi comedi1: Minor 4 specified more than once! [ 103.932924][ T6519] capability: warning: `syz.4.187' uses deprecated v2 capabilities in a way that may be insecure [ 104.067948][ T6527] overlayfs: missing 'lowerdir' [ 105.150769][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 105.875283][ T5750] Bluetooth: hci3: command tx timeout [ 105.991745][ T6561] netlink: 'syz.1.199': attribute type 10 has an invalid length. [ 105.994689][ T6561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.199'. [ 105.998423][ T6561] dummy0: entered promiscuous mode [ 106.223501][ T6565] PKCS7: Unknown OID: [98] 1.2.10824.113549.1.1.1 [ 106.225831][ T6565] Unsupported pkey algo: 106 [ 106.266704][ T6567] netdevsim netdevsim3 eth2: entered allmulticast mode [ 106.270759][ T6567] netdevsim netdevsim3 eth3: entered allmulticast mode [ 106.273667][ T6567] netdevsim netdevsim3 eth4: entered allmulticast mode [ 106.278581][ T6567] netdevsim netdevsim3 eth5: entered allmulticast mode [ 106.281092][ T6567] ieee802154 phy0 wpan2: entered allmulticast mode [ 106.444785][ T6576] ======================================================= [ 106.444785][ T6576] WARNING: The mand mount option has been deprecated and [ 106.444785][ T6576] and is ignored by this kernel. Remove the mand [ 106.444785][ T6576] option from the mount to silence this warning. [ 106.444785][ T6576] ======================================================= [ 106.586701][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 107.516142][ T5488] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 107.665528][ T5488] usb 5-1: Using ep0 maxpacket: 32 [ 107.668557][ T5488] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 107.673313][ T5488] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 107.677021][ T5488] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 107.681248][ T5488] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 107.685745][ T5488] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 107.690894][ T5488] usb 5-1: config 0 interface 0 has no altsetting 0 [ 107.695833][ T5488] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 107.699150][ T5488] usb 5-1: Product: syz [ 107.700804][ T5488] usb 5-1: Manufacturer: syz [ 107.702654][ T5488] usb 5-1: SerialNumber: syz [ 107.708415][ T5488] usb 5-1: config 0 descriptor?? [ 107.713113][ T5488] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 107.721851][ T5488] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 107.879154][ T6610] team0: Device vlan2 is already an upper device of the team interface [ 107.920213][ T6378] usb 5-1: USB disconnect, device number 7 [ 107.926394][ T6378] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 108.025571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 108.159254][ T6620] netlink: 'syz.2.221': attribute type 10 has an invalid length. [ 108.185260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 108.194566][ T6620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.207009][ T6620] team0: Port device bond0 added [ 108.238475][ T6625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.414655][ T6620] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 108.515635][ T29] usb 42-1: device descriptor read/8, error -110 [ 108.635926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 108.655657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 108.785579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 108.928259][ T6635] fuse: Unknown parameter '0xffffffffffffffff0xffffffffffffffff00000000000000000000€Ú®RŠ Ï+ëŸC  ò' [ 108.998018][ T29] usb usb42-port1: attempt power cycle [ 109.132482][ T6641] netlink: 40 bytes leftover after parsing attributes in process `syz.2.229'. [ 109.136136][ T6644] loop0: detected capacity change from 0 to 3904 [ 109.399542][ T6644] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 109.424278][ T6644] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 109.428425][ T6644] loop0: [ 109.657003][ T29] usb usb42-port1: unable to enumerate USB device [ 109.985482][ T6633] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.988345][ T6633] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.027449][ T6633] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 110.085801][ T6633] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.088360][ T6633] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.159857][ T6633] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 110.202500][ T6633] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 110.204921][ T6633] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.219178][ T6633] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 110.230298][ T6633] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 110.235619][ T6633] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.280639][ T6633] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.465586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 111.014261][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'. [ 111.020552][ T6723] netlink: 56 bytes leftover after parsing attributes in process `syz.1.246'. [ 111.155329][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.255279][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 111.406718][ T29] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 111.412639][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.418585][ T29] usb 5-1: config 0 descriptor?? [ 111.652801][ T6727] syz.1.248 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 111.656956][ T6727] CPU: 1 UID: 0 PID: 6727 Comm: syz.1.248 Not tainted syzkaller #0 PREEMPT(full) [ 111.656972][ T6727] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.656979][ T6727] Call Trace: [ 111.656983][ T6727] [ 111.656988][ T6727] dump_stack_lvl+0x100/0x190 [ 111.657008][ T6727] dump_header+0xfb/0x606 [ 111.657034][ T6727] oom_kill_process.cold+0xd/0x380 [ 111.657050][ T6727] out_of_memory+0x340/0x14f0 [ 111.657065][ T6727] ? __pfx_out_of_memory+0x10/0x10 [ 111.657081][ T6727] mem_cgroup_out_of_memory+0xc6/0x130 [ 111.657098][ T6727] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 111.657114][ T6727] ? find_held_lock+0x2b/0x80 [ 111.657133][ T6727] ? do_raw_spin_unlock+0x145/0x1e0 [ 111.657148][ T6727] ? _raw_spin_unlock+0x28/0x50 [ 111.657164][ T6727] try_charge_memcg+0x6e1/0xdf0 [ 111.657180][ T6727] ? __pfx_try_charge_memcg+0x10/0x10 [ 111.657191][ T6727] ? find_held_lock+0x2b/0x80 [ 111.657207][ T6727] ? rcu_read_unlock+0x17/0x60 [ 111.657219][ T6727] ? rcu_read_unlock+0x17/0x60 [ 111.657232][ T6727] ? find_held_lock+0x2b/0x80 [ 111.657248][ T6727] ? rcu_read_unlock+0x17/0x60 [ 111.657264][ T6727] charge_memcg+0x1ae/0x210 [ 111.657277][ T6727] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 111.657293][ T6727] swap_cache_alloc_folio+0x548/0xc50 [ 111.657312][ T6727] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 111.657327][ T6727] ? swap_cache_get_folio+0x28d/0x360 [ 111.657342][ T6727] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 111.657357][ T6727] ? __pfx___xa_erase+0x10/0x10 [ 111.657371][ T6727] swap_cache_read_folio+0x47/0x140 [ 111.657388][ T6727] swap_cluster_readahead+0x441/0x5a0 [ 111.657406][ T6727] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 111.657428][ T6727] ? __lock_acquire+0x4c5/0x1ec0 [ 111.657444][ T6727] swapin_readahead+0x159/0x11b0 [ 111.657463][ T6727] ? __pfx_swapin_readahead+0x10/0x10 [ 111.657482][ T6727] ? swap_table_get+0x10d/0x2c0 [ 111.657497][ T6727] ? swap_cache_get_folio+0x28d/0x360 [ 111.657512][ T6727] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 111.657526][ T6727] ? __pfx_softleaf_type+0x10/0x10 [ 111.657543][ T6727] ? do_swap_page+0xf72/0x5580 [ 111.657555][ T6727] do_swap_page+0xf72/0x5580 [ 111.657570][ T6727] ? trace_sched_exit_tp+0x120/0x160 [ 111.657589][ T6727] ? __pfx_do_swap_page+0x10/0x10 [ 111.657607][ T6727] ? rcu_is_watching+0x13/0xc0 [ 111.657623][ T6727] ? __pte_offset_map+0x179/0x310 [ 111.657641][ T6727] __handle_mm_fault+0x15bd/0x2f60 [ 111.657657][ T6727] ? __pfx___handle_mm_fault+0x10/0x10 [ 111.657669][ T6727] ? __pfx_mt_find+0x10/0x10 [ 111.657695][ T6727] ? find_vma+0xbf/0x140 [ 111.657712][ T6727] ? __pfx_find_vma+0x10/0x10 [ 111.657731][ T6727] handle_mm_fault+0x37b/0xa30 [ 111.657748][ T6727] do_user_addr_fault+0x745/0x12f0 [ 111.657771][ T6727] exc_page_fault+0x6f/0xd0 [ 111.657788][ T6727] asm_exc_page_fault+0x26/0x30 [ 111.657799][ T6727] RIP: 0010:_copy_to_user+0x9f/0xd0 [ 111.657816][ T6727] Code: 89 ee 48 89 ef e8 21 35 e7 fc 4d 85 ff 75 26 e8 37 3b e7 fc 89 de 4c 89 e7 e8 0d 19 59 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb e8 11 3b e7 fc 48 89 d8 5b 5d 41 [ 111.657826][ T6727] RSP: 0000:ffffc9000620fc28 EFLAGS: 00050246 [ 111.657836][ T6727] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000000008 [ 111.657842][ T6727] RDX: 0000000000000001 RSI: ffffc9000620fc90 RDI: 000000008001c000 [ 111.657850][ T6727] RBP: 000000008001c000 R08: 0000000000000000 R09: fffff52000c41f92 [ 111.657857][ T6727] R10: ffffc9000620fc97 R11: 0000000000000000 R12: ffffc9000620fc90 [ 111.657863][ T6727] R13: 000000008001c008 R14: 00007ffffffff000 R15: 0000000000000000 [ 111.657877][ T6727] ? _copy_to_user+0x93/0xd0 [ 111.657897][ T6727] msr_read+0x144/0x240 [ 111.657910][ T6727] ? __pfx_msr_read+0x10/0x10 [ 111.657922][ T6727] ? bpf_lsm_file_permission+0x9/0x10 [ 111.657934][ T6727] ? security_file_permission+0x76/0x210 [ 111.657949][ T6727] ? rw_verify_area+0xce/0x6d0 [ 111.657962][ T6727] ? __pfx_msr_read+0x10/0x10 [ 111.657974][ T6727] vfs_read+0x1e4/0xb40 [ 111.657990][ T6727] ? __pfx_vfs_read+0x10/0x10 [ 111.658003][ T6727] ? find_held_lock+0x2b/0x80 [ 111.658020][ T6727] ? __fget_files+0x215/0x3d0 [ 111.658035][ T6727] ? __fget_files+0x215/0x3d0 [ 111.658052][ T6727] ? __fget_files+0x21f/0x3d0 [ 111.658072][ T6727] ksys_read+0x12a/0x250 [ 111.658086][ T6727] ? __pfx_ksys_read+0x10/0x10 [ 111.658099][ T6727] ? ksys_write+0x1ac/0x250 [ 111.658117][ T6727] __do_fast_syscall_32+0x13a/0x8b0 [ 111.658150][ T6727] ? lockdep_hardirqs_on+0x7d/0x110 [ 111.658169][ T6727] do_fast_syscall_32+0x32/0x70 [ 111.658179][ T6727] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 111.658193][ T6727] RIP: 0023:0xf6ffefec [ 111.658207][ T6727] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 111.658212][ T6727] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 111.658222][ T6727] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080019680 [ 111.658229][ T6727] RDX: 0000000000018ff8 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.658235][ T6727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 111.658241][ T6727] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 111.658247][ T6727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 111.658260][ T6727] [ 111.658355][ T6727] memory: usage 96kB, limit 96kB, failcnt 3353 [ 111.827349][ T6727] memory+swap: usage 12388kB, limit 9007199254740988kB, failcnt 0 [ 111.829778][ T6727] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 111.831938][ T6727] Memory cgroup stats for /syz1/test: [ 111.832323][ T6727] cache 0 [ 111.835002][ T6727] rss 16384 [ 111.836082][ T6727] rss_huge 0 [ 111.837156][ T6727] shmem 0 [ 111.838119][ T6727] mapped_file 0 [ 111.839264][ T6727] dirty 0 [ 111.840227][ T6727] writeback 0 [ 111.841306][ T6727] workingset_refault_anon 3 [ 111.842759][ T6727] workingset_refault_file 0 [ 111.844219][ T6727] swap 12570624 [ 111.845349][ T6727] swapcached 12582912 [ 111.846763][ T6727] pgpgin 3076 [ 111.847852][ T6727] pgpgout 3072 [ 111.848962][ T6727] pgfault 3077 [ 111.850075][ T6727] pgmajfault 3 [ 111.851216][ T6727] inactive_anon 4096 [ 111.852449][ T6727] active_anon 0 [ 111.853575][ T6727] inactive_file 0 [ 111.854778][ T6727] active_file 0 [ 111.856019][ T6727] unevictable 0 [ 111.857164][ T6727] hierarchical_memory_limit 98304 [ 111.858763][ T6727] hierarchical_memsw_limit 9223372036854771712 [ 111.860680][ T6727] total_cache 0 [ 111.861818][ T6727] total_rss 16384 [ 111.863009][ T6727] total_rss_huge 0 [ 111.864216][ T6727] total_shmem 0 [ 111.865464][ T6727] total_mapped_file 0 [ 111.867030][ T6727] total_dirty 0 [ 111.868166][ T6727] total_writeback 0 [ 111.869394][ T6727] total_workingset_refault_anon 3 [ 111.870969][ T6727] total_workingset_refault_file 0 [ 111.872555][ T6727] total_swap 12570624 [ 111.873847][ T6727] total_swapcached 12582912 [ 111.875359][ T6727] total_pgpgin 3076 [ 111.876611][ T6727] total_pgpgout 3072 [ 111.877862][ T6727] total_pgfault 3077 [ 111.879143][ T6727] total_pgmajfault 3 [ 111.880395][ T6727] total_inactive_anon 4096 [ 111.881820][ T6727] total_active_anon 0 [ 111.883104][ T6727] total_inactive_file 0 [ 111.884429][ T6727] total_active_file 0 [ 111.885745][ T6727] total_unevictable 0 [ 111.887100][ T6727] anon_cost 0 [ 111.888205][ T6727] file_cost 0 [ 111.889303][ T6727] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.248,pid=6726,uid=0 [ 111.895003][ T6727] Memory cgroup out of memory: Killed process 6726 (syz.1.248) total-vm:102156kB, anon-rss:1292kB, file-rss:22952kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 111.901943][ T6735] debugfs: out of free dentries, can not create file 'mmu_flooded' [ 111.953627][ T6724] batman_adv: batadv0: Adding interface: macvtap1 [ 111.956065][ T6724] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.966838][ T6724] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 112.110810][ T6744] ================================================================== [ 112.113291][ T6744] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 112.115689][ T6744] Read of size 8 at addr ffff88802149e818 by task syz.2.254/6744 [ 112.118995][ T6744] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 112.120299][ T6744] CPU: 3 UID: 0 PID: 6744 Comm: syz.2.254 Not tainted syzkaller #0 PREEMPT(full) [ 112.120314][ T6744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.120321][ T6744] Call Trace: [ 112.120326][ T6744] [ 112.120330][ T6744] dump_stack_lvl+0x100/0x190 [ 112.120347][ T6744] print_report+0x13d/0x4b0 [ 112.120363][ T6744] ? __virt_addr_valid+0x239/0x430 [ 112.120379][ T6744] ? dvb_device_open+0x33f/0x3b0 [ 112.120394][ T6744] kasan_report+0xdf/0x1c0 [ 112.120405][ T6744] ? dvb_device_open+0x33f/0x3b0 [ 112.120418][ T6744] ? __pfx_dvb_device_open+0x10/0x10 [ 112.120432][ T6744] dvb_device_open+0x33f/0x3b0 [ 112.120446][ T6744] ? __pfx_dvb_device_open+0x10/0x10 [ 112.120458][ T6744] chrdev_open+0x234/0x6a0 [ 112.120473][ T6744] ? __pfx_apparmor_file_open+0x10/0x10 [ 112.120486][ T6744] ? __pfx_chrdev_open+0x10/0x10 [ 112.120501][ T6744] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 112.120514][ T6744] do_dentry_open+0x6ab/0x14d0 [ 112.120528][ T6744] ? __pfx_chrdev_open+0x10/0x10 [ 112.120544][ T6744] vfs_open+0x82/0x3f0 [ 112.120555][ T6744] path_openat+0x19fa/0x2440 [ 112.120572][ T6744] ? __pfx_path_openat+0x10/0x10 [ 112.120590][ T6744] do_file_open+0x20e/0x430 [ 112.120608][ T6744] ? __pfx_do_file_open+0x10/0x10 [ 112.120627][ T6744] ? _raw_spin_unlock+0x28/0x50 [ 112.120642][ T6744] ? alloc_fd+0x471/0x7a0 [ 112.120659][ T6744] do_sys_openat2+0x10f/0x1e0 [ 112.120670][ T6744] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.120682][ T6744] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 112.120696][ T6744] __ia32_compat_sys_openat+0x12d/0x210 [ 112.120709][ T6744] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 112.120724][ T6744] do_int80_emulation+0x166/0x650 [ 112.120736][ T6744] asm_int80_emulation+0x1a/0x20 [ 112.120746][ T6744] RIP: 0023:0xf71474eb [ 112.120755][ T6744] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 112.120765][ T6744] RSP: 002b:00000000f540603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 112.120776][ T6744] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5406100 [ 112.120783][ T6744] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.120789][ T6744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.120795][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.120801][ T6744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.120810][ T6744] [ 112.120814][ T6744] [ 112.202373][ T6744] Allocated by task 1: [ 112.203997][ T6744] kasan_save_stack+0x30/0x50 [ 112.205873][ T6744] kasan_save_track+0x14/0x30 [ 112.207765][ T6744] __kasan_kmalloc+0xaa/0xb0 [ 112.209588][ T6744] __kmalloc_cache_noprof+0x2e7/0x6b0 [ 112.211676][ T6744] dvb_register_device+0x1d6/0x1e20 [ 112.213721][ T6744] dvb_register_frontend+0x552/0x820 [ 112.215778][ T6744] vidtv_bridge_probe+0x44b/0xa30 [ 112.217766][ T6744] platform_probe+0x106/0x1d0 [ 112.219625][ T6744] really_probe+0x241/0xa60 [ 112.221410][ T6744] __driver_probe_device+0x210/0x460 [ 112.223474][ T6744] driver_probe_device+0x4a/0x140 [ 112.225432][ T6744] __driver_attach+0x21f/0x5b0 [ 112.227334][ T6744] bus_for_each_dev+0x13e/0x1d0 [ 112.229249][ T6744] bus_add_driver+0x305/0x5b0 [ 112.231104][ T6744] driver_register+0x1e2/0x360 [ 112.232970][ T6744] vidtv_bridge_init+0x52/0x80 [ 112.234870][ T6744] do_one_initcall+0x11c/0x6f0 [ 112.236778][ T6744] kernel_init_freeable+0x6ea/0x7b0 [ 112.238720][ T6744] kernel_init+0x21/0x1e0 [ 112.240419][ T6744] ret_from_fork+0x730/0xd60 [ 112.242250][ T6744] ret_from_fork_asm+0x1a/0x30 [ 112.244125][ T6744] [ 112.245078][ T6744] Freed by task 6712: [ 112.246664][ T6744] kasan_save_stack+0x30/0x50 [ 112.248517][ T6744] kasan_save_track+0x14/0x30 [ 112.250371][ T6744] kasan_save_free_info+0x3b/0x70 [ 112.252360][ T6744] __kasan_slab_free+0x5f/0x80 [ 112.254245][ T6744] kfree+0x22b/0x6c0 [ 112.255780][ T6744] dvb_device_put.part.0+0x57/0x90 [ 112.257775][ T6744] dvb_device_open+0x2ba/0x3b0 [ 112.259666][ T6744] chrdev_open+0x234/0x6a0 [ 112.261418][ T6744] do_dentry_open+0x6ab/0x14d0 [ 112.263316][ T6744] vfs_open+0x82/0x3f0 [ 112.264951][ T6744] path_openat+0x19fa/0x2440 [ 112.266779][ T6744] do_file_open+0x20e/0x430 [ 112.268549][ T6744] do_sys_openat2+0x10f/0x1e0 [ 112.270403][ T6744] __ia32_compat_sys_openat+0x12d/0x210 [ 112.272670][ T6744] do_int80_emulation+0x166/0x650 [ 112.274654][ T6744] asm_int80_emulation+0x1a/0x20 [ 112.276597][ T6744] [ 112.277543][ T6744] The buggy address belongs to the object at ffff88802149e800 [ 112.277543][ T6744] which belongs to the cache kmalloc-256 of size 256 [ 112.282892][ T6744] The buggy address is located 24 bytes inside of [ 112.282892][ T6744] freed 256-byte region [ffff88802149e800, ffff88802149e900) [ 112.288096][ T6744] [ 112.289054][ T6744] The buggy address belongs to the physical page: [ 112.291523][ T6744] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802149e800 pfn:0x2149e [ 112.295388][ T6744] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 112.298660][ T6744] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 112.301910][ T6744] page_type: f5(slab) [ 112.303489][ T6744] raw: 00fff00000000240 ffff88801c042b40 ffff88801c040708 ffffea0000a53610 [ 112.306809][ T6744] raw: ffff88802149e800 000000080010000f 00000000f5000000 0000000000000000 [ 112.310116][ T6744] head: 00fff00000000240 ffff88801c042b40 ffff88801c040708 ffffea0000a53610 [ 112.313482][ T6744] head: ffff88802149e800 000000080010000f 00000000f5000000 0000000000000000 [ 112.316813][ T6744] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 112.320161][ T6744] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 112.323449][ T6744] page dumped because: kasan: bad access detected [ 112.326004][ T6744] page_owner tracks the page as allocated [ 112.328235][ T6744] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 11871234395 [ 112.335397][ T6744] post_alloc_hook+0xfd/0x120 [ 112.337251][ T6744] get_page_from_freelist+0x110d/0x35b0 [ 112.339412][ T6744] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 112.341707][ T6744] new_slab+0xa5/0x640 [ 112.343316][ T6744] refill_objects+0xe3/0x410 [ 112.345163][ T6744] __pcs_replace_empty_main+0x372/0x680 [ 112.347350][ T6744] __kmalloc_cache_noprof+0x47b/0x6b0 [ 112.349437][ T6744] bus_add_driver+0x92/0x5b0 [ 112.351258][ T6744] driver_register+0x1e2/0x360 [ 112.353107][ T6744] i2c_register_driver+0xd9/0x1f0 [ 112.355142][ T6744] do_one_initcall+0x11c/0x6f0 [ 112.357121][ T6744] kernel_init_freeable+0x6ea/0x7b0 [ 112.359168][ T6744] kernel_init+0x21/0x1e0 [ 112.360854][ T6744] ret_from_fork+0x730/0xd60 [ 112.362671][ T6744] ret_from_fork_asm+0x1a/0x30 [ 112.364534][ T6744] page last free pid 10 tgid 10 ts 10145617175 stack trace: [ 112.367380][ T6744] free_pages_prepare+0x586/0xe00 [ 112.369347][ T6744] __free_contig_range_common+0x14f/0x250 [ 112.371558][ T6744] free_pages_bulk+0x12a/0x200 [ 112.373439][ T6744] vm_area_free_pages+0xad/0x2b0 [ 112.375393][ T6744] vfree+0x108/0x730 [ 112.376969][ T6744] delayed_vfree_work+0x56/0x80 [ 112.378874][ T6744] process_one_work+0xac7/0x1b10 [ 112.380796][ T6744] worker_thread+0x5ef/0xe50 [ 112.382588][ T6744] kthread+0x373/0x450 [ 112.384182][ T6744] ret_from_fork+0x730/0xd60 [ 112.385993][ T6744] ret_from_fork_asm+0x1a/0x30 [ 112.387874][ T6744] [ 112.388822][ T6744] Memory state around the buggy address: [ 112.390995][ T6744] ffff88802149e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 112.394073][ T6744] ffff88802149e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 112.397151][ T6744] >ffff88802149e800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.400219][ T6744] ^ [ 112.402116][ T6744] ffff88802149e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 112.405245][ T6744] ffff88802149e900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 112.408337][ T6744] ================================================================== [ 112.411568][ T5750] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.411628][ T5745] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.413477][ T5750] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.425666][ T6744] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 112.428695][ T6744] CPU: 2 UID: 0 PID: 6744 Comm: syz.2.254 Not tainted syzkaller #0 PREEMPT(full) [ 112.432505][ T6744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 112.436725][ T6744] Call Trace: [ 112.438188][ T6744] [ 112.439472][ T6744] dump_stack_lvl+0x100/0x190 [ 112.441494][ T6744] vpanic+0x553/0x970 [ 112.443199][ T6744] ? __pfx_vpanic+0x10/0x10 [ 112.445101][ T6744] ? dvb_device_open+0x33f/0x3b0 [ 112.447153][ T6744] panic+0xd1/0xe0 [ 112.448716][ T6744] ? __pfx_panic+0x10/0x10 [ 112.450588][ T6744] ? dvb_device_open+0x33f/0x3b0 [ 112.452662][ T6744] ? preempt_schedule_common+0x3c/0xb0 [ 112.454918][ T6744] check_panic_on_warn.cold+0x19/0x34 [ 112.456651][ T6744] end_report.part.0+0x3a/0x90 [ 112.458184][ T6744] kasan_report.cold+0xe/0x18 [ 112.459648][ T6744] ? dvb_device_open+0x33f/0x3b0 [ 112.461184][ T6744] ? __pfx_dvb_device_open+0x10/0x10 [ 112.462896][ T6744] dvb_device_open+0x33f/0x3b0 [ 112.464877][ T6744] ? __pfx_dvb_device_open+0x10/0x10 [ 112.467127][ T6744] chrdev_open+0x234/0x6a0 [ 112.468999][ T6744] ? __pfx_apparmor_file_open+0x10/0x10 [ 112.471285][ T6744] ? __pfx_chrdev_open+0x10/0x10 [ 112.473343][ T6744] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 112.475971][ T6744] do_dentry_open+0x6ab/0x14d0 [ 112.477964][ T6744] ? __pfx_chrdev_open+0x10/0x10 [ 112.480023][ T6744] vfs_open+0x82/0x3f0 [ 112.481713][ T6744] path_openat+0x19fa/0x2440 [ 112.483670][ T6744] ? __pfx_path_openat+0x10/0x10 [ 112.485751][ T6744] do_file_open+0x20e/0x430 [ 112.487669][ T6744] ? __pfx_do_file_open+0x10/0x10 [ 112.489780][ T6744] ? _raw_spin_unlock+0x28/0x50 [ 112.491844][ T6744] ? alloc_fd+0x471/0x7a0 [ 112.493371][ T6744] do_sys_openat2+0x10f/0x1e0 [ 112.494873][ T6744] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.496666][ T6744] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 112.499276][ T6744] __ia32_compat_sys_openat+0x12d/0x210 [ 112.501319][ T6744] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 112.503202][ T6744] do_int80_emulation+0x166/0x650 [ 112.504756][ T6744] asm_int80_emulation+0x1a/0x20 [ 112.506359][ T6744] RIP: 0023:0xf71474eb [ 112.507710][ T6744] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 112.513703][ T6744] RSP: 002b:00000000f540603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 112.516438][ T6744] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5406100 [ 112.518963][ T6744] RDX: 0000000000040002 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.521400][ T6744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.523857][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.526350][ T6744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.529271][ T6744] [ 112.531296][ T6744] Kernel Offset: disabled [ 112.533122][ T6744] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:03:57 Registers: info registers vcpu 0 CPU#0 RAX=00000000000000d7 RBX=ffff8880228456a8 RCX=0000000000000000 RDX=0000000000000007 RSI=ffff888022845720 RDI=0000000000000000 RBP=ffff888022845748 RSP=ffffc90004d3f570 R8 =0000000000000000 R9 =0000000000000004 R10=0000000000000004 R11=0000000000000001 R12=ffff888022844b00 R13=0000000000000000 R14=0000000000000005 R15=0000000000000001 RIP=ffffffff81e5c052 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809698f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000332e6ff8 CR3=00000000505e8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c11dae1a59303602 78476614ae7086fc ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 47fb21960a26ee8c 08ea1ade04cd45d9 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c73cf8c32a29bc87 51c2d664b5c6edf4 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 77cc4b56a6b2942c b1b784e973ed64ba ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec27d06ca08ad9d8 aafa03615402170c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f0a1084877f9b2d4 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 239882396685f3d0 5797a0ba5bab5d2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9bdecb4d00000000 de927465884dc2c9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae84b3dce9a84c0b 5b85d8416d7c7a35 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7aab6ddfed3eba1f f9a2feea07008276 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffff88801cb4a580 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81f759af RDI=fffffbfff372d639 RBP=ffffffff9b96b1c8 RSP=ffffc90000590e40 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000002 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e5dd1a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a8f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055bbe2ff2950 CR3=000000004c475000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffe00000 Opmask01=000000000000001c Opmask02=000000000000001f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99f3323b20 00007f99f3323b20 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000075676f008685 898884828183873a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffff0f0e0d0c0b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99f3323b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99f31ead48 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055bbe2ff3890 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65722f6574617473 2d6b6f6f682f6463 706368642f6e7572 2f7261762f3d6663 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 006c6c347670692e 346874652e666e6f 632e766c6f736572 2f65746174732d6b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 524e584f01828700 00000084004e585e 5c5b4f5849535400 870058505c535b54 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000f 00000000873d7373 6e64725f77656e01 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffff88804b736ce8 RBX=0000000000000001 RCX=ffffffff81e63468 RDX=1ffff110096e6d9d RSI=0000000000000000 RDI=ffff88806b4fd8a0 RBP=ffffc9000d21f298 RSP=ffffc9000d21f170 R8 =0000000000000001 R9 =fffff52001a43e1c R10=0000000000000003 R11=0000000000000000 R12=dffffc0000000000 R13=ffff888052ce6000 R14=ffff88804b736ce8 R15=ffff888052ce7000 RIP=ffffffff852d704d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096b8f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f16ec0 CR3=0000000046293000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85a92010 RDI=ffffffff9bc26ca0 RBP=ffffffff9bc26c60 RSP=ffffc90006667300 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000034373654 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3784de6 R15=dffffc0000000000 RIP=ffffffff85a92037 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096c8f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5200008 CR3=0000000051493000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000