last executing test programs: 4.31115922s ago: executing program 3 (id=309): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_dev$dri(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 4.225424469s ago: executing program 1 (id=311): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000380)=""/140) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x1418, 0x1, 0x0, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4008885}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0xe, 0x0, 0x420, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x2}, 0x50) r2 = syz_usb_connect$uac1(0x4, 0xcf, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0xa, 0x10, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x80}, [@mixer_unit={0x8, 0x24, 0x4, 0x6, 0x0, "456eea"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0xc, 0x7, "120b1fc6"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf9, 0x3, 0x1, 0xff, "a5", "01"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x4, 0x6, {0x7, 0x25, 0x1, 0x42, 0x3d, 0x98}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0xf, 0x3, '\\'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0x81, 0x5, "81"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x3, 0x1, 0x5, 0x5, "c9a96505a18c"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x4, 0x9, 0x9, "7da4ed8da80a"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x4, 0x1, 0x67, "92e6a422cc1c172d3c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xea, 0x6, 0x9, {0x7, 0x25, 0x1, 0x0, 0x2e, 0x5}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x80, 0x8, 0x3, 0x10, 0x5}, 0x3a, &(0x7f00000001c0)={0x5, 0xf, 0x3a, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x46, 0x0, 0x0, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x8, 0x7, 0xc2}, @ssp_cap={0x10, 0x10, 0xa, 0x48, 0x1, 0x6, 0xf00, 0xa, [0x0]}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x6, 0xf00, 0xe, [0x3f0f]}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x414}}, {0xb7, &(0x7f0000000300)=@string={0xb7, 0x3, "1def73d809f1cae4ea40ef26d3ec9cd06e57816f20e72f84e8bff899f9c95479f3ff7f5dba32c1e398df88558e634e00f24f9c6ddf19231359f92f474575404dd53ec0f86dbaca8447c4906220beea87cd0450f239ad5cfaf7367300dce41da6aa0bdc972315e173aaa378542285fb31d46513f8a79919db745fb371c873be21eb8f4ffc06d5d1e95ba2789e32734b515d585257599c783c9362d227b5968cdafa7436634b4aa9b6b6384a8a50f6b0664b82380d80"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x408}}]}) syz_usb_control_io$uac1(r2, &(0x7f0000000500)={0xc, &(0x7f0000000480)={0x0, 0x24, 0x35, {0x35, 0xf, "d69d59950ea120242b1e50b2e1cc0b074775473b733921664a0f2e8fcb375b5f3c338b73a072a1d68e009f86c7e6d7b99e692e"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}}, &(0x7f0000000840)={0x24, &(0x7f0000000580)={0x20, 0x12, 0xc5, "60c3248535cafa0e19866cd07fad5275ae9e2a23c5e624fde6398fd7aed4d697ae5566e54d8b8dfee529e2f0240cdae5bc6f3edc6b586798e7b21a4772a541c9d854d96f8ec59dc4697defc9c8e92d346984244c59328f8311aacc851ea23bb9dcc0190a23610591489b203e9c296d8a6a215adea6f2901096018297c48392c25f45f1167a05bdf759d3486db52158cb2ec668ee8ba6dcd691e530ca31fbcb6a1759aca64adf3e6727c24014e10c185c9df28db57ccdb64d13a9e613a332be99825f447439"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000880)={0x20, 0x81, 0x3, "261b71"}, &(0x7f0000000740)={0x20, 0x82, 0x2, "e643"}, &(0x7f0000000700)={0x20, 0x83, 0x2, "751c"}, &(0x7f00000007c0)={0x20, 0x84, 0x4, "0ea3fcae"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "ed00"}}) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x2, 0x3}}, 0x10) bind$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) ioctl$HIDIOCINITREPORT(r3, 0x4805, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1, {[@timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@remote}, {@private}, {@loopback}, {@remote}, {@remote}]}]}}}}}}}, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000780)=0x0) setpriority(0x2, r6, 0x2) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x40440, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) close(0x3) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r5, @ANYRES32=r5, @ANYRESDEC, @ANYRESHEX=r5, @ANYRES32=r5, @ANYRES64=r5], 0x1c}, 0x1, 0x0, 0x0, 0x22040001}, 0x40880) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r8, 0x103, 0x2, &(0x7f0000000000)=0x6dbb, 0x4) 4.206310996s ago: executing program 3 (id=312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) 4.150862592s ago: executing program 3 (id=313): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000005c0), 0x80, 0x143103) (async) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xce0a, 0x10100, 0x0, 0x370, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) (async) syz_clone(0x60005000, &(0x7f0000000280)="950617d7ebfa74d07e70e213f979a87415c7bc5b891cdf9fa7c569b8983bd3b53c3629ecc5e15f7c92f258be7cb987653aecc30b15f0ff18b22a9f73ab08909de192c22e926f66b17cbcd36247f59f3d0ae340ebb18e3e63bf5abf6abf1f608ef662b57455f14f9ebdf437", 0x6b, &(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000480)="541e9852f7b09cc3a133c9d1ef52195dd24e85e85813ba0d4235454a52e8ee46d31a6f26b0a09ce03017948ca703ad349c8d3624082c3b5f1e613163ace060bc20574181a589b1d6d8147e84407e4a8b7ed67ea5297d9f975a5648a040a3fd7bd51052efa9f4d5fadff6f30c2fcdb511deb3212fa9ed6392b1b2c02c06677c23") (async) syz_io_uring_setup(0x3de6, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x0, 0x1bb}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) syz_io_uring_submit(r4, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x8, 0x4004, @fd_index=0x9, 0x9, &(0x7f0000000500)="04d027ec356d605617306188e1e49339a4b267e3983245005104f6c48e2a3620a4915d728349505b70ffd4c8444d5c2ad47650715a4f08c59547acb742a4fd17778cdc760caaeb", 0x47, 0x12, 0x1}) (async) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRESDEC=0x0]) (async, rerun: 64) read$FUSE(r6, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 64) r9 = syz_open_dev$MSR(&(0x7f0000000340), 0xdf4e, 0x0) (async) r10 = socket$inet_udplite(0x2, 0x2, 0x88) kcmp(r8, r8, 0x5, r9, r10) (async) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f}}, 0x50) (async) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$inet6(r11, &(0x7f00000000c0)={&(0x7f00000004c0)={0xa, 0x4e23, 0xae4, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0}, 0x40) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4000000000009, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x591) (async) acct(&(0x7f00000001c0)='./file0\x00') (async) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) acct(&(0x7f0000000240)='./file0\x00') (async) close_range(r12, 0xffffffffffffffff, 0x0) 3.891628799s ago: executing program 3 (id=314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000001801000020786c2500000000902020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6d}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) 3.693488298s ago: executing program 0 (id=315): openat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0/..\x00', 0x430000, 0x61) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000080)=0x10000005, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) write$FUSE_DIRENTPLUS(r3, 0x0, 0xb0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x0, 0x6178, 0x3}, 0x1c) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x60) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setresuid(0xee01, 0xee01, 0x0) dup(r8) 3.600738757s ago: executing program 2 (id=316): mkdir(&(0x7f0000000080)='./bus\x00', 0x3) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x8000, 0x80, 0x2, 0x10, {{0x36, 0x4, 0x0, 0x9, 0xd8, 0x68, 0x0, 0x6c, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x72, 0x1, [{0x0, 0x4, "60b2"}, {0x0, 0x2}, {0x7, 0x12, "b8821385fad771f9b5d3772e7ceda676"}, {0x7, 0xe, "077d1ba5d8c487b2e5b3601f"}, {0x6, 0x2}, {0x5, 0xf, "c9b06295627c9370f54dfc6ec6"}, {0x7, 0x11, "33b1e88c98f70e2ebc4dcf37ee84ca"}, {0x7, 0x12, "fb474557f95156ca5ed11525c45c4cf8"}, {0x1, 0x12, "177e497eb282bbd6cd5af1e620300313"}]}, @timestamp_prespec={0x44, 0x3c, 0x2d, 0x3, 0x6, [{@multicast2, 0x4}, {@local, 0x3670aec9}, {@private=0xa010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xfffffff6}, {@local, 0x100}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x985}, {@loopback, 0x9}]}, @end, @ssrr={0x89, 0xb, 0xdb, [@multicast2, @broadcast]}, @noop, @lsrr={0x83, 0x7, 0xf1, [@broadcast]}]}}}}}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500080050000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pB \x00'}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085000000a000000095"], &(0x7f0000000380)='GPL\x00'}, 0x94) (async, rerun: 64) r7 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async, rerun: 64) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) preadv(r8, &(0x7f0000001480)=[{&(0x7f0000000040)=""/86, 0x56}], 0x1, 0xe, 0x800) (async) r9 = openat$ipvs(0xffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) (async, rerun: 64) r11 = syz_open_dev$vcsa(&(0x7f0000000600), 0x4, 0x200000) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xe, 0x12, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb265, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x5}]}, &(0x7f0000000280)='syzkaller\x00', 0x10001, 0x58, &(0x7f00000002c0)=""/88, 0x40f00, 0x40, '\x00', r3, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xe, 0x1, 0x14}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000640)=[r4, r5, 0x1, r6, r7, 0xffffffffffffffff, r8, r9, r10, r11]}, 0x94) fsetxattr$security_ima(r0, &(0x7f00000000c0), &(0x7f0000000180)=@ng={0x4, 0x10}, 0x2, 0x1) 3.600536335s ago: executing program 2 (id=317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000200)=@ethtool_eeprom={0x43, 0x2f5b, 0x401, 0x29, "5e6b7bf8120c1a4a4fb85a60ad9c01f8b1e12a6e665419fa2ebd4e50c493efaacb2d9034482b768838"}}) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f00000002c0)='0\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 3.541865686s ago: executing program 2 (id=318): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e20000000000004000", [0x8, 0xd91]}}) 3.540598385s ago: executing program 2 (id=319): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004300)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000080)={0x5, "da8019dea5c88d695f73e31c18f0c7c7fdac910ee2000e08b73b53930efb1a00"}) 3.031617445s ago: executing program 3 (id=320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004300)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000080)={0x5, "da8019dea5c88d695f73e31c18f0c7c7fdac910ee2000e08b73b53930efb1a00"}) 2.782066674s ago: executing program 0 (id=321): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000100)="1feebc6d7895f59158b1b8a2c370fd62ee301d72f4d4ec5a24fb9482e7477fa8418de3351d3185e44cdc44ab3cd595794c5a7e52fd58862767b693433e9097b7f39f569ba854891e8d2dd91c4c882bbfb36279a4fd7dfe75cf84ade1a8efe36d85c6045d5e01f802562fddc1a31deac6fdb56de54325bb1d4edd88792144a02a944e5d05f5a6d843a722bf9bc06913b797285940e905e5e9f3c5cddcab68813a6ca78efc623be7bb63e4dbc8fff6d51f14525be1ac6335087a173b96eb388e43fb134d2b1bf4263d667c104ac75d1adc42fd44dc09cd", 0xd6}, {&(0x7f0000000380)="30dd9c2c7643de5063f99cdabcbddd2ff3c3f7a48bedf977d2cccebd8b21b33f80edea50e08e91620cfbb804c6e7ba447ca9eae92a2a319661cbb9870a152ae8e79f5039936215fbb34ad428212932de875ae5f2b0f3098190b346482585e1e098c5b28de0a417e3c77a9381e10eac006ebcec7493d81f55f33263dff2cc5a981ebaa40afc218ba499de309bae2cec692b502facea09d29bbd6a206a56ca12bfdfa845ca4a799ccd2e2e75ef98a410006c15eb71efa380251cf2f99b18ecc245726b313c084f74d76a53f56f07905cbecaa998d231361b8525ba15", 0xdb}, {&(0x7f0000000000)="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", 0xfd}, {&(0x7f0000000200)="fa3b9063365c94e7b8c286eade36c4d64908b2436fe8e04e94ca0634fb648d7be409ad04b14eaf9c5ad1d00442154a8e5a9609246e0dcd026e06eda350efb9e14069cd5f860af900184ab9942c34f4335f877238edb651dbed6af61c1f633ae884acbe0e7eb689b782ef232b270c5238cb2a2aa0b192d86019879ca03bc23ddb9919e57f14c4162b0a46a2831dbf2f7c672cf61bcc4bb15cd6886b7914ccc1309ebe95ddb6d433ef90ab73d16d7d61112ef3985f93a6c6e36deacb0c00ae3d447b5d9143e32c1e60a2585ddffae6859f65efd219da905109b42a407021f5c98a1ba581c8aad44c", 0xe7}, {&(0x7f0000000300)="dd0a4870b7cf92ca0dec07d87f27217b", 0x10}], 0x1fffffffffffff66) 2.781634581s ago: executing program 0 (id=322): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2000000000000, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x94, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x433}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xec3}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000480)=[{0x11, 0x0, [0xec, 0x3ff, 0x4, 0x6, 0x3, 0x2, 0x7, 0x7, 0x80, 0x101, 0x72d, 0x0, 0x3, 0x2c, 0x4, 0x3]}, {0x20, 0x0, [0x56, 0x80000001, 0x7, 0xfffffff3, 0x7ff, 0x8, 0xffffffff, 0x80000001, 0xe86c, 0x10, 0xcf2f, 0x10001, 0x4010, 0x1000, 0x80000001, 0x8]}, {0xf, 0x0, [0x5, 0x1, 0xd, 0x10001, 0xfc, 0x2, 0x4, 0x5, 0x2, 0x4, 0x2c53, 0x400, 0x5, 0xa915, 0x0, 0x3]}, {0xa, 0x0, [0x5, 0x5, 0x6, 0x8, 0x2, 0x200, 0x5, 0x9, 0x3, 0x0, 0x5, 0xe, 0x77a, 0x200, 0x3, 0x81]}, {0x2a, 0x0, [0x80000000, 0x71, 0x7, 0x2, 0xf0b, 0x80000001, 0x6574, 0x7fff, 0x0, 0x1000, 0xebb7, 0xaf, 0x1, 0x6, 0x7, 0x7]}, {0x4, 0x0, [0xfffffffa, 0xd6b, 0x6, 0x6, 0x9, 0x9, 0x5, 0x7f, 0x800, 0x3, 0x998c, 0x8, 0x8, 0x42f, 0x5, 0x72b]}, {0x9, 0x0, [0x7f, 0x80, 0x3, 0x4, 0x1, 0x716c, 0x9, 0x0, 0x2636, 0xcb8, 0x3, 0xcf5, 0x54, 0x24, 0x0, 0x3]}, {0xa, 0x0, [0x2, 0x4000000, 0x0, 0x6, 0x1, 0x80000001, 0x8, 0x0, 0x1, 0x9, 0x7fffffff, 0xbcdc, 0x7, 0xd, 0x47, 0x7a]}, {0x10, 0x0, [0x5, 0x8, 0x5, 0x4, 0x4, 0x1000, 0x9, 0x2, 0x9, 0x4, 0x8f4c, 0x4, 0x2, 0x2843129f, 0xfffffffb, 0x5]}], r3, 0x1, 0x1, 0x288}}, 0x20) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000032e000/0x1000)=nil, 0x1000, 0x14) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) 2.490345186s ago: executing program 1 (id=323): r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x4, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0xd0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0x5, 0x0, &(0x7f0000000100)) r6 = gettid() r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) 1.871866659s ago: executing program 0 (id=324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) write(r2, &(0x7f0000000500), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d6974"], 0xd8}}, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000d40)={{{@in6=@remote, @in6=@private2}}, {{@in=@dev}, 0x0, @in6=@private2}}, &(0x7f0000000e40)=0xe4) fstat(r1, &(0x7f0000000e80)) openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000f00), 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r6], 0x50}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r10], 0x50}}, 0x2) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.541963286s ago: executing program 1 (id=325): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x4000006, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x8000000}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x8000000}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x8001, @remote, 0x9}, @in6={0xa, 0x4e23, 0x3ff, @empty, 0x3302}, @in6={0xa, 0x4e23, 0x2, @local}, @in6={0xa, 0x4e23, 0x24, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0x42, @mcast1, 0x402}], 0x9c) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) ioprio_set$pid(0x2, 0x0, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x40, 0x20, 0x7f, 0x7fffffff}, {0x9, 0x1, 0xd, 0x3}, {0x101, 0x4, 0x9, 0x3}, {0x3, 0x80, 0x9, 0x3}, {0x3, 0x1, 0x6, 0x6}]}, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) socket$netlink(0x10, 0x3, 0xe) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x00') sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.231875015s ago: executing program 0 (id=326): r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000300)={0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000140)={0x1, r4, 0x0, 0xf, 0x20000, 0x9b41}) r5 = syz_io_uring_complete(0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000080)=0x8, 0x4) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r10, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010000104040002000500000000000000", @ANYRES32=0x0, @ANYBLOB="040000c9000000004800000000000000613d3cfb01800800030000100000e5ff06007f69ffff000108000700"/60, @ANYRES32=r10], 0x6c}, 0x1, 0x0, 0x0, 0x20004885}, 0x20004094) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r8}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@bridge_getneigh={0x60, 0x1e, 0x300, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r9, 0x20000, 0x14400}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x9c93}, @IFLA_IFNAME={0x14, 0x3, 'syzkaller1\x00'}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_batadv\x00'}, @IFLA_MTU={0x8, 0x4, 0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048090}, 0x80) read$char_usb(r2, 0x0, 0x0) 903.496749ms ago: executing program 2 (id=327): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x9) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001440)=""/117, 0xd7, 0x41) 895.371573ms ago: executing program 2 (id=328): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x2000) 671.758514ms ago: executing program 1 (id=329): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r4}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x8, 0x8, 0x28}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmmsg$inet(r2, &(0x7f0000000380)=[{{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x0) 670.92926ms ago: executing program 1 (id=330): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) io_setup(0x4, &(0x7f0000000040)) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000008c0)}], 0x1}}], 0x2, 0x4048884) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @private1, 0x1}, 0x1c) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0x0, 0x100}}) socket$kcm(0x21, 0x2, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050ff850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="12fd0000000079040d8ddc1fe821", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="12fd0000000079040d8ddc1fe821", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 371.857761ms ago: executing program 1 (id=331): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x24, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x93}, @generic={0x1, 0x7, 0x9, 0x5, 0x2004d7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xb, 0x6, 0x4, 0xfffffffffffffff8}, @generic={0x2, 0x9, 0xe, 0x7, 0xa2}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfb}, @ldst={0x3, 0x2, 0x6, 0xb, 0x6, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f00000000c0)={0x4000000, 0x71, 0x8000000009}) r4 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x2, r4, 0x0}]) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x6, 0x10001, 0x34324152, 0x0, 0xb, [{0xbe2e}, {0x10}, {0x2}, {0x40, 0x101}, {0x0, 0xffffffff}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pread64(r3, 0x0, 0x0, 0xce2) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 371.554845ms ago: executing program 0 (id=332): r0 = socket(0x10, 0x803, 0xfffffffe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000004140)="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", 0x2000, &(0x7f0000001280)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0xffffffff, 0x8010, 0x0, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x3) syz_fuse_handle_req(r2, &(0x7f0000001780)="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", 0x2000, &(0x7f00000011c0)={&(0x7f00000003c0)={0x50, 0x0, 0x1, {0x7, 0x2b, 0xee, 0x1e0081, 0x4793, 0x20, 0x4, 0x7, 0x0, 0x0, 0x8, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96}, 0x28) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{}, [], {0x95, 0x0, 0x0, 0x97ff}}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x2, 0x0, 0x0, 0x20}, 0x80) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1c, 0x4, 0x0, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 0s ago: executing program 3 (id=333): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r3, 0x20, &(0x7f0000000040)={&(0x7f00000005c0)=""/193, 0xc1, 0x0, &(0x7f00000006c0)=""/150, 0x96}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x0, 0x0, 0x0, 0x4, 0x87, &(0x7f0000000380)=""/135, 0x41100, 0x10, '\x00', 0x0, @fallback=0x15, r3, 0x8, &(0x7f0000000440)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x10000004, 0x101}, 0x10, r4, r3, 0x0, &(0x7f00000004c0), 0x0, 0x10, 0x2000009}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x22, 0x0, &(0x7f0000000a00)="f6f40bdd78bb3fb7dbfc8180000095ccfda2e49966752c300eac73974a3e54c4a803", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)='!\n', 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mknod$loop(0x0, 0xfff, 0x0) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x18d100, 0x0) ioctl$DVD_READ_STRUCT(r7, 0x5392, &(0x7f0000000880)=@bca={0x3, 0xbc, "768323b1acef51901b37cd723278c2edd29c07f26588a526bf847df6785991fb5705a6cc300645f7c024a60cc017ca87386f158978eaecc89cb7e969651ae8b168403770d6cdd28978b6485d1c478e2e27ee5efe13acbc21141752719fa4244fdc7eb9d3c8af7f593472e13129c1269ab9731a41922050ff09780736f90e372b03822d6ad70cbaf1d02040cd32abade98ba495166bf71ba8211885cf3d8d97aff8e22be59609813473af5e1c5602c15ea4f77fb5beda9ba442b33d59"}) syz_open_procfs(0xffffffffffffffff, 0x0) r8 = io_uring_setup(0x294d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}) io_uring_register$IORING_UNREGISTER_RING_FDS(r8, 0x15, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='net/packet\x00') ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r6, 0x8949, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:5923' (ED25519) to the list of known hosts. [ 40.753875][ T5953] cgroup: Unknown subsys name 'net' [ 40.876350][ T5953] cgroup: Unknown subsys name 'cpuset' [ 40.879453][ T5953] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.646232][ T5953] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.242151][ T5975] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.243398][ T5977] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.245527][ T5981] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.247569][ T5977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.249674][ T5981] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.252274][ T5977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.254707][ T5981] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.255265][ T5984] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.255365][ T5984] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.255455][ T5982] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.255934][ T5984] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.256013][ T5982] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.256272][ T5982] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.256347][ T5982] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.257110][ T5335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.259127][ T5981] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.269107][ T5335] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.271363][ T5981] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.283050][ T5335] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.285175][ T5981] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.358660][ T5983] chnl_net:caif_netlink_parms(): no params data found [ 44.397365][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 44.435991][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.439042][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.442162][ T5983] bridge_slave_0: entered allmulticast mode [ 44.445797][ T5983] bridge_slave_0: entered promiscuous mode [ 44.450279][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.453095][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.456359][ T5983] bridge_slave_1: entered allmulticast mode [ 44.459556][ T5983] bridge_slave_1: entered promiscuous mode [ 44.489240][ T5983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.507681][ T5978] chnl_net:caif_netlink_parms(): no params data found [ 44.511228][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.513482][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.516183][ T5970] bridge_slave_0: entered allmulticast mode [ 44.518463][ T5970] bridge_slave_0: entered promiscuous mode [ 44.526423][ T5983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.546331][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.548686][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.550971][ T5970] bridge_slave_1: entered allmulticast mode [ 44.553350][ T5970] bridge_slave_1: entered promiscuous mode [ 44.577704][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.581698][ T5983] team0: Port device team_slave_0 added [ 44.585413][ T5983] team0: Port device team_slave_1 added [ 44.598278][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.627780][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.629985][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.638255][ T5983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.653511][ T5970] team0: Port device team_slave_0 added [ 44.655658][ T5971] chnl_net:caif_netlink_parms(): no params data found [ 44.659142][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.661318][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.669844][ T5983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.682049][ T5970] team0: Port device team_slave_1 added [ 44.709485][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.711734][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.714138][ T5978] bridge_slave_0: entered allmulticast mode [ 44.716502][ T5978] bridge_slave_0: entered promiscuous mode [ 44.719145][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.721405][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.723677][ T5978] bridge_slave_1: entered allmulticast mode [ 44.726170][ T5978] bridge_slave_1: entered promiscuous mode [ 44.739621][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.741785][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.750870][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.772667][ T5978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.783797][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.786178][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.794210][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.803145][ T5978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.817749][ T5983] hsr_slave_0: entered promiscuous mode [ 44.820651][ T5983] hsr_slave_1: entered promiscuous mode [ 44.867869][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.870251][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.872526][ T5971] bridge_slave_0: entered allmulticast mode [ 44.874969][ T5971] bridge_slave_0: entered promiscuous mode [ 44.878118][ T5978] team0: Port device team_slave_0 added [ 44.899782][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.902073][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.904602][ T5971] bridge_slave_1: entered allmulticast mode [ 44.907044][ T5971] bridge_slave_1: entered promiscuous mode [ 44.909664][ T5978] team0: Port device team_slave_1 added [ 44.920657][ T5970] hsr_slave_0: entered promiscuous mode [ 44.923278][ T5970] hsr_slave_1: entered promiscuous mode [ 44.925579][ T5970] debugfs: 'hsr0' already exists in 'hsr' [ 44.927412][ T5970] Cannot create hsr debugfs directory [ 44.980210][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.982881][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.992140][ T5978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.999085][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.002195][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.013016][ T5978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.027165][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.036802][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.086175][ T5978] hsr_slave_0: entered promiscuous mode [ 45.088345][ T5978] hsr_slave_1: entered promiscuous mode [ 45.090269][ T5978] debugfs: 'hsr0' already exists in 'hsr' [ 45.092082][ T5978] Cannot create hsr debugfs directory [ 45.095200][ T5971] team0: Port device team_slave_0 added [ 45.099801][ T5971] team0: Port device team_slave_1 added [ 45.149334][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.151543][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.159931][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.165138][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.167354][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.175328][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.206188][ T5971] hsr_slave_0: entered promiscuous mode [ 45.208283][ T5971] hsr_slave_1: entered promiscuous mode [ 45.210263][ T5971] debugfs: 'hsr0' already exists in 'hsr' [ 45.212078][ T5971] Cannot create hsr debugfs directory [ 45.250293][ T5983] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.255292][ T5983] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.259957][ T5983] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.267689][ T5983] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.298620][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.300908][ T5983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.303214][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.305488][ T5983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.310579][ T5970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.314532][ T5970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.323763][ T5970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.327610][ T5970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.346834][ T5978] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.353920][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.356253][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.358654][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.361067][ T5970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.366670][ T5978] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.370738][ T5978] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.374722][ T5978] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.381491][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.385560][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.389212][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.392281][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.409778][ T5971] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.413129][ T5971] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.420235][ T5971] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.423605][ T5971] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.432636][ T5983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.450862][ T5983] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.465676][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.468940][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.471322][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.474552][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.476811][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.498251][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.504623][ T5983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.513773][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.516400][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.524591][ T5978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.531078][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.534099][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.548942][ T5978] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.561993][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.571850][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.574143][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.578551][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.580807][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.585212][ T5970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.597417][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.606351][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.609444][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.625480][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.627853][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.640573][ T5983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.652655][ T5971] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.656131][ T5971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.668226][ T5983] veth0_vlan: entered promiscuous mode [ 45.675415][ T5983] veth1_vlan: entered promiscuous mode [ 45.683774][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.698835][ T5983] veth0_macvtap: entered promiscuous mode [ 45.705852][ T5983] veth1_macvtap: entered promiscuous mode [ 45.709912][ T5970] veth0_vlan: entered promiscuous mode [ 45.715796][ T5970] veth1_vlan: entered promiscuous mode [ 45.718781][ T5978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.726484][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.732125][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.741183][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.744665][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.750665][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.760192][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.769695][ T5978] veth0_vlan: entered promiscuous mode [ 45.775236][ T5970] veth0_macvtap: entered promiscuous mode [ 45.781075][ T5978] veth1_vlan: entered promiscuous mode [ 45.784405][ T5970] veth1_macvtap: entered promiscuous mode [ 45.792112][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.792889][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.796819][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.798074][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.808354][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.821595][ T1143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.826054][ T1143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.829747][ T1143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.833230][ T1143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.837283][ T5978] veth0_macvtap: entered promiscuous mode [ 45.840340][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.843181][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.844598][ T5978] veth1_macvtap: entered promiscuous mode [ 45.864639][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.869167][ T5983] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 45.874455][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.877021][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.879106][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.888795][ T5971] veth0_vlan: entered promiscuous mode [ 45.893329][ T1143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.903053][ T1143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.906146][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.910545][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.911396][ T5971] veth1_vlan: entered promiscuous mode [ 45.913105][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.919079][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.925821][ T6057] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 45.939611][ T5971] veth0_macvtap: entered promiscuous mode [ 45.948369][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.948455][ T5971] veth1_macvtap: entered promiscuous mode [ 45.951117][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.966678][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.971938][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.972948][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.974648][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.980358][ T46] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.983208][ T46] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.988258][ T46] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.991020][ T46] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.018614][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.021111][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.026264][ T6062] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 46.031054][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.033663][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.073011][ T6072] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.097976][ T6076] kvm: Disabled LAPIC found during irq injection [ 46.100446][ T6072] Zero length message leads to an empty skb [ 46.102130][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 46.107035][ T6076] dlm: plock device version mismatch: kernel (1.2.0), user (4207673345.1574799195.3139252685) [ 46.112455][ T6078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 46.124814][ T6076] netlink: 'syz.2.7': attribute type 1 has an invalid length. [ 46.216666][ T6085] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 46.304278][ T6088] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.334076][ T63] Bluetooth: hci1: command tx timeout [ 46.336317][ T5979] Bluetooth: hci0: command tx timeout [ 46.336327][ T63] Bluetooth: hci2: command tx timeout [ 46.351486][ T63] Bluetooth: hci3: command tx timeout [ 46.783183][ T63] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 46.789095][ T63] CPU: 1 UID: 0 PID: 63 Comm: kworker/u33:0 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 46.789123][ T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 46.789132][ T63] Workqueue: hci3 hci_rx_work [ 46.789150][ T63] Call Trace: [ 46.789154][ T63] [ 46.789159][ T63] dump_stack_lvl+0x16c/0x1f0 [ 46.789174][ T63] sysfs_warn_dup+0x7f/0xa0 [ 46.789188][ T63] sysfs_create_dir_ns+0x24b/0x2b0 [ 46.789200][ T63] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 46.789214][ T63] ? kobject_add_internal+0x25b/0x9b0 [ 46.789234][ T63] ? lock_release+0x201/0x2f0 [ 46.789248][ T63] ? do_raw_spin_unlock+0x172/0x230 [ 46.789265][ T63] kobject_add_internal+0x2c4/0x9b0 [ 46.789281][ T63] kobject_add+0x16e/0x240 [ 46.789296][ T63] ? __pfx_kobject_add+0x10/0x10 [ 46.789312][ T63] ? lock_release+0x201/0x2f0 [ 46.789326][ T63] ? do_raw_spin_unlock+0x172/0x230 [ 46.789342][ T63] ? kobject_put+0xab/0x5a0 [ 46.789359][ T63] device_add+0x288/0x1aa0 [ 46.789369][ T63] ? __pfx_dev_set_name+0x10/0x10 [ 46.789380][ T63] ? __pfx_device_add+0x10/0x10 [ 46.789389][ T63] ? mgmt_send_event_skb+0x2fb/0x460 [ 46.789402][ T63] hci_conn_add_sysfs+0x17e/0x230 [ 46.789414][ T63] le_conn_complete_evt+0x1075/0x1d70 [ 46.789425][ T63] ? preempt_count_sub+0xd0/0x160 [ 46.789437][ T63] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 46.789447][ T63] ? rcu_is_watching+0x12/0xc0 [ 46.789457][ T63] ? lock_release+0x201/0x2f0 [ 46.789472][ T63] hci_le_conn_complete_evt+0x23c/0x370 [ 46.789484][ T63] hci_le_meta_evt+0x354/0x5e0 [ 46.789495][ T63] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 46.789507][ T63] hci_event_packet+0x685/0x11c0 [ 46.789517][ T63] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 46.789529][ T63] ? __pfx_hci_event_packet+0x10/0x10 [ 46.789539][ T63] ? kcov_remote_start+0x36a/0x6d0 [ 46.789554][ T63] ? rcu_watching_snap_stopped_since+0x60/0x110 [ 46.789566][ T63] ? rcu_is_watching+0x12/0xc0 [ 46.789578][ T63] hci_rx_work+0x2c5/0x16b0 [ 46.789590][ T63] ? rcu_is_watching+0x12/0xc0 [ 46.789601][ T63] process_one_work+0x9cc/0x1b70 [ 46.789619][ T63] ? __pfx_hci_tx_work+0x10/0x10 [ 46.789631][ T63] ? __pfx_process_one_work+0x10/0x10 [ 46.789649][ T63] ? assign_work+0x1a0/0x250 [ 46.789664][ T63] worker_thread+0x6c8/0xf10 [ 46.789676][ T63] ? __pfx_worker_thread+0x10/0x10 [ 46.789692][ T63] kthread+0x3c2/0x780 [ 46.789706][ T63] ? __pfx_kthread+0x10/0x10 [ 46.789722][ T63] ? rcu_is_watching+0x12/0xc0 [ 46.789732][ T63] ? __pfx_kthread+0x10/0x10 [ 46.789747][ T63] ret_from_fork+0x5d4/0x6f0 [ 46.789764][ T63] ? __pfx_kthread+0x10/0x10 [ 46.789779][ T63] ret_from_fork_asm+0x1a/0x30 [ 46.789795][ T63] [ 46.789845][ T63] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 46.891087][ T63] Bluetooth: hci3: failed to register connection device [ 47.043050][ T6101] netlink: 'syz.0.13': attribute type 3 has an invalid length. [ 47.102806][ T6105] Bluetooth: MGMT ver 1.23 [ 47.444396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 47.450739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.454717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.464130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 47.614154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.684265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.814163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 47.990722][ T6127] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 48.024225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.027269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.030287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.414212][ T5979] Bluetooth: hci1: command tx timeout [ 48.424190][ T5979] Bluetooth: hci0: command tx timeout [ 48.424408][ T5981] Bluetooth: hci3: command tx timeout [ 48.426931][ T5979] Bluetooth: hci2: command tx timeout [ 50.024178][ T5979] Bluetooth: hci4: command 0x1003 tx timeout [ 50.024267][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 50.041723][ T6174] netlink: 'syz.0.31': attribute type 3 has an invalid length. [ 50.096615][ T6176] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 50.396302][ T6188] cgroup: fork rejected by pids controller in /syz1 [ 50.494462][ T5979] Bluetooth: hci2: command tx timeout [ 50.496232][ T5979] Bluetooth: hci1: command tx timeout [ 50.504037][ T63] Bluetooth: hci3: command tx timeout [ 50.505781][ T63] Bluetooth: hci0: command tx timeout [ 50.803060][ T6227] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 50.805211][ T6227] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 50.808175][ T6227] vhci_hcd vhci_hcd.0: Device attached [ 50.828284][ T6231] netlink: 84 bytes leftover after parsing attributes in process `syz.2.39'. [ 51.074101][ T59] usb 44-1: SetAddress Request (2) to port 0 [ 51.074174][ T59] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 51.226911][ T6245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 51.361484][ T6228] vhci_hcd: connection reset by peer [ 51.365060][ T1143] vhci_hcd: stop threads [ 51.366427][ T1143] vhci_hcd: release socket [ 51.372854][ T1143] vhci_hcd: disconnect device [ 51.450747][ T6251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.42'. [ 51.996772][ T6259] netlink: 'syz.0.48': attribute type 3 has an invalid length. [ 52.102119][ T6266] netlink: 'syz.1.50': attribute type 3 has an invalid length. [ 52.201194][ T40] audit: type=1326 audit(1755541428.101:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.49" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 52.209322][ T40] audit: type=1326 audit(1755541428.101:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.49" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 52.220922][ T40] audit: type=1326 audit(1755541428.111:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.49" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 52.228374][ T40] audit: type=1326 audit(1755541428.111:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.49" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 52.235436][ T40] audit: type=1326 audit(1755541428.111:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.49" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 52.243335][ T40] audit: type=1326 audit(1755541428.111:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.49" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 52.274920][ T40] audit: type=1326 audit(1755541428.111:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.49" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 52.282257][ T40] audit: type=1326 audit(1755541428.111:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.49" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 52.291522][ T40] audit: type=1326 audit(1755541428.111:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.49" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 52.307850][ T40] audit: type=1326 audit(1755541428.111:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6263 comm="syz.3.49" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 52.588731][ T5981] Bluetooth: hci1: command tx timeout [ 52.590470][ T5981] Bluetooth: hci2: command tx timeout [ 52.592195][ T5335] Bluetooth: hci3: command tx timeout [ 52.593917][ T5979] Bluetooth: hci0: command tx timeout [ 52.652550][ T6281] netlink: 48 bytes leftover after parsing attributes in process `syz.1.52'. [ 52.894541][ T60] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 53.057869][ T60] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 53.755965][ T60] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 53.863367][ T60] usb 6-1: config 0 interface 0 has no altsetting 0 [ 53.875280][ T60] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 53.878812][ T60] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 53.882047][ T60] usb 6-1: Product: syz [ 53.883724][ T60] usb 6-1: Manufacturer: syz [ 53.885653][ T60] usb 6-1: SerialNumber: syz [ 53.888499][ T60] usb 6-1: config 0 descriptor?? [ 53.891367][ T60] hub 6-1:0.0: bad descriptor, ignoring hub [ 53.893680][ T60] hub 6-1:0.0: probe with driver hub failed with error -5 [ 53.897819][ T60] usb 6-1: selecting invalid altsetting 0 [ 54.634328][ T6297] Process accounting resumed [ 54.654069][ T63] Bluetooth: hci3: command 0x0406 tx timeout [ 54.682831][ T6304] tipc: Started in network mode [ 54.684736][ T6304] tipc: Node identity 9e35e99e717b, cluster identity 4711 [ 54.687269][ T6304] tipc: Enabled bearer , priority 0 [ 54.690465][ T6303] tipc: Resetting bearer [ 54.717647][ T6303] tipc: Disabling bearer [ 55.152176][ T63] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 55.694215][ T6296] usb 6-1: USB disconnect, device number 2 [ 55.803189][ T6325] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 55.805979][ T6325] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 55.809739][ T6325] vhci_hcd vhci_hcd.0: Device attached [ 55.829379][ T6325] batadv1: entered allmulticast mode [ 55.836807][ T6325] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 55.895756][ T6336] netlink: 'syz.2.66': attribute type 3 has an invalid length. [ 55.898853][ T6336] netlink: 'syz.2.66': attribute type 3 has an invalid length. [ 56.054294][ T843] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 56.574642][ T6326] vhci_hcd: connection reset by peer [ 56.577583][ T61] vhci_hcd: stop threads [ 56.579105][ T61] vhci_hcd: release socket [ 56.582262][ T61] vhci_hcd: disconnect device [ 56.635355][ T59] usb 44-1: device descriptor read/8, error -110 [ 56.970549][ T6351] netlink: 'syz.3.70': attribute type 27 has an invalid length. [ 56.986362][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.989213][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.024160][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.029158][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.071439][ T6360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.075817][ T6360] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.084932][ T6360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.091804][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.094748][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.098948][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.102058][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.154263][ T6367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.74'. [ 57.162800][ T6367] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 57.167702][ T6367] bond0: (slave lo): Error: Device can not be enslaved while up [ 57.238131][ T59] usb usb44-port1: attempt power cycle [ 57.359375][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 57.725927][ T6372] netlink: 72 bytes leftover after parsing attributes in process `syz.3.75'. [ 57.838059][ T59] usb usb44-port1: unable to enumerate USB device [ 58.189702][ T6393] binder: 6391:6393 ioctl c0306201 0 returned -14 [ 58.193796][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 58.196755][ T6393] binder: 6391:6393 ioctl c0306201 0 returned -14 [ 58.197625][ T6393] binder: 6391:6393 ioctl c0306201 0 returned -14 [ 58.554556][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 58.750390][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 58.767553][ T9] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 58.770544][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.805942][ T9] usb 6-1: config 0 descriptor?? [ 58.829853][ T6398] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 59.143286][ T6404] capability: warning: `syz.3.87' uses deprecated v2 capabilities in a way that may be insecure [ 59.244671][ T9] elan 0003:04F3:0755.0002: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 59.250099][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 59.260566][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 59.283505][ T6411] hsr_slave_1 (unregistering): left promiscuous mode [ 59.943243][ T6416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 59.976513][ T6418] netlink: 'syz.0.93': attribute type 3 has an invalid length. [ 60.309382][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.311869][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.332447][ T5979] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 60.336844][ T5979] CPU: 0 UID: 0 PID: 5979 Comm: kworker/u33:4 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 60.336872][ T5979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.336886][ T5979] Workqueue: hci0 hci_rx_work [ 60.336912][ T5979] Call Trace: [ 60.336918][ T5979] [ 60.336925][ T5979] dump_stack_lvl+0x16c/0x1f0 [ 60.336951][ T5979] sysfs_warn_dup+0x7f/0xa0 [ 60.336974][ T5979] sysfs_create_dir_ns+0x24b/0x2b0 [ 60.337012][ T5979] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 60.337036][ T5979] ? kobject_add_internal+0x25b/0x9b0 [ 60.337062][ T5979] ? lock_release+0x201/0x2f0 [ 60.337086][ T5979] ? do_raw_spin_unlock+0x172/0x230 [ 60.337115][ T5979] kobject_add_internal+0x2c4/0x9b0 [ 60.337146][ T5979] kobject_add+0x16e/0x240 [ 60.337171][ T5979] ? __pfx_kobject_add+0x10/0x10 [ 60.337192][ T5979] ? lock_release+0x201/0x2f0 [ 60.337212][ T5979] ? do_raw_spin_unlock+0x172/0x230 [ 60.337234][ T5979] ? kobject_put+0xab/0x5a0 [ 60.337258][ T5979] device_add+0x288/0x1aa0 [ 60.337273][ T5979] ? __pfx_dev_set_name+0x10/0x10 [ 60.337289][ T5979] ? __pfx_device_add+0x10/0x10 [ 60.337304][ T5979] ? mgmt_send_event_skb+0x2fb/0x460 [ 60.337327][ T5979] hci_conn_add_sysfs+0x17e/0x230 [ 60.337349][ T5979] le_conn_complete_evt+0x1075/0x1d70 [ 60.337365][ T5979] ? preempt_count_sub+0xd0/0x160 [ 60.337382][ T5979] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 60.337396][ T5979] ? rcu_is_watching+0x12/0xc0 [ 60.337408][ T5979] ? lock_release+0x201/0x2f0 [ 60.337423][ T5979] hci_le_conn_complete_evt+0x23c/0x370 [ 60.337435][ T5979] hci_le_meta_evt+0x354/0x5e0 [ 60.337447][ T5979] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 60.337459][ T5979] hci_event_packet+0x685/0x11c0 [ 60.337469][ T5979] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 60.337481][ T5979] ? __pfx_hci_event_packet+0x10/0x10 [ 60.337491][ T5979] ? hci_send_to_monitor+0x28/0x4c0 [ 60.337505][ T5979] hci_rx_work+0x2c5/0x16b0 [ 60.337517][ T5979] ? rcu_is_watching+0x12/0xc0 [ 60.337531][ T5979] process_one_work+0x9cc/0x1b70 [ 60.337549][ T5979] ? __pfx_rxrpc_peer_keepalive_worker+0x10/0x10 [ 60.337567][ T5979] ? __pfx_process_one_work+0x10/0x10 [ 60.337585][ T5979] ? assign_work+0x1a0/0x250 [ 60.337600][ T5979] worker_thread+0x6c8/0xf10 [ 60.337612][ T5979] ? __pfx_worker_thread+0x10/0x10 [ 60.337627][ T5979] kthread+0x3c2/0x780 [ 60.337642][ T5979] ? __pfx_kthread+0x10/0x10 [ 60.337656][ T5979] ? ret_from_fork+0x25/0x6f0 [ 60.337672][ T5979] ? rcu_is_watching+0x12/0xc0 [ 60.337683][ T5979] ? rcu_is_watching+0x12/0xc0 [ 60.337693][ T5979] ? __pfx_kthread+0x10/0x10 [ 60.337707][ T5979] ret_from_fork+0x5d4/0x6f0 [ 60.337723][ T5979] ? __pfx_kthread+0x10/0x10 [ 60.337738][ T5979] ret_from_fork_asm+0x1a/0x30 [ 60.337754][ T5979] [ 60.337783][ T5979] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 60.447021][ T5979] Bluetooth: hci0: failed to register connection device [ 61.005180][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 61.053112][ T6441] netfs: Couldn't get user pages (rc=-14) [ 61.076901][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 61.204168][ T843] vhci_hcd: vhci_device speed not set [ 61.294258][ T53] usb 6-1: USB disconnect, device number 3 [ 61.426145][ T6466] input: syz1 as /devices/virtual/input/input7 [ 61.473757][ T6469] netlink: 'syz.2.104': attribute type 1 has an invalid length. [ 61.561491][ T6467] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 61.563850][ T6467] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 61.567134][ T6467] vhci_hcd vhci_hcd.0: Device attached [ 61.734975][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 61.815009][ T6322] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 61.934946][ T6475] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 62.113731][ T6498] binder: 6497:6498 ioctl c0306201 0 returned -14 [ 62.117628][ T6498] binder: 6497:6498 ioctl c0306201 0 returned -14 [ 62.120102][ T6498] binder: 6497:6498 ioctl c0306201 0 returned -14 [ 62.324537][ T5979] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 62.334244][ T5979] CPU: 2 UID: 0 PID: 5979 Comm: kworker/u33:4 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 62.334273][ T5979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.334293][ T5979] Workqueue: hci2 hci_rx_work [ 62.334319][ T5979] Call Trace: [ 62.334325][ T5979] [ 62.334333][ T5979] dump_stack_lvl+0x16c/0x1f0 [ 62.334358][ T5979] sysfs_warn_dup+0x7f/0xa0 [ 62.334380][ T5979] sysfs_create_dir_ns+0x24b/0x2b0 [ 62.334416][ T5979] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 62.334439][ T5979] ? kobject_add_internal+0x25b/0x9b0 [ 62.334466][ T5979] ? lock_release+0x201/0x2f0 [ 62.334490][ T5979] ? do_raw_spin_unlock+0x172/0x230 [ 62.334515][ T5979] kobject_add_internal+0x2c4/0x9b0 [ 62.334539][ T5979] kobject_add+0x16e/0x240 [ 62.334576][ T5979] ? __pfx_kobject_add+0x10/0x10 [ 62.334599][ T5979] ? lock_release+0x201/0x2f0 [ 62.334621][ T5979] ? do_raw_spin_unlock+0x172/0x230 [ 62.334643][ T5979] ? kobject_put+0xab/0x5a0 [ 62.334660][ T5979] device_add+0x288/0x1aa0 [ 62.334671][ T5979] ? __pfx_dev_set_name+0x10/0x10 [ 62.334682][ T5979] ? __pfx_device_add+0x10/0x10 [ 62.334691][ T5979] ? mgmt_send_event_skb+0x2fb/0x460 [ 62.334704][ T5979] hci_conn_add_sysfs+0x17e/0x230 [ 62.334718][ T5979] le_conn_complete_evt+0x1075/0x1d70 [ 62.334728][ T5979] ? preempt_count_sub+0xd0/0x160 [ 62.334746][ T5979] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 62.334760][ T5979] ? rcu_is_watching+0x12/0xc0 [ 62.334776][ T5979] ? lock_release+0x201/0x2f0 [ 62.334801][ T5979] hci_le_conn_complete_evt+0x23c/0x370 [ 62.334821][ T5979] hci_le_meta_evt+0x354/0x5e0 [ 62.334839][ T5979] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 62.334883][ T5979] hci_event_packet+0x685/0x11c0 [ 62.334901][ T5979] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 62.334923][ T5979] ? __pfx_hci_event_packet+0x10/0x10 [ 62.334942][ T5979] ? kcov_remote_start+0x36a/0x6d0 [ 62.334969][ T5979] ? rcu_watching_snap_stopped_since+0x60/0x110 [ 62.334991][ T5979] ? rcu_is_watching+0x12/0xc0 [ 62.335013][ T5979] hci_rx_work+0x2c5/0x16b0 [ 62.335033][ T5979] ? rcu_is_watching+0x12/0xc0 [ 62.335051][ T5979] process_one_work+0x9cc/0x1b70 [ 62.335081][ T5979] ? __pfx_process_pending_rx+0x10/0x10 [ 62.335099][ T5979] ? __pfx_process_one_work+0x10/0x10 [ 62.335128][ T5979] ? assign_work+0x1a0/0x250 [ 62.335154][ T5979] worker_thread+0x6c8/0xf10 [ 62.335175][ T5979] ? __pfx_worker_thread+0x10/0x10 [ 62.335202][ T5979] kthread+0x3c2/0x780 [ 62.335239][ T5979] ? __pfx_kthread+0x10/0x10 [ 62.335264][ T5979] ? ret_from_fork+0x25/0x6f0 [ 62.335301][ T5979] ? rcu_is_watching+0x12/0xc0 [ 62.335320][ T5979] ? rcu_is_watching+0x12/0xc0 [ 62.335338][ T5979] ? __pfx_kthread+0x10/0x10 [ 62.335364][ T5979] ret_from_fork+0x5d4/0x6f0 [ 62.335391][ T5979] ? __pfx_kthread+0x10/0x10 [ 62.335417][ T5979] ret_from_fork_asm+0x1a/0x30 [ 62.335443][ T5979] [ 62.335548][ T5979] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 62.494082][ T5979] Bluetooth: hci2: failed to register connection device [ 62.591029][ T6504] overlayfs: missing 'lowerdir' [ 62.775046][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'. [ 62.786466][ T6507] ubi0: attaching mtd0 [ 62.788627][ T6507] ubi0: scanning is finished [ 62.790374][ T6507] ubi0: empty MTD device detected [ 62.851231][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 62.884719][ T6507] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 62.889382][ T6507] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 62.891676][ T6507] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 62.894253][ T6507] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 62.896728][ T6507] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 62.899503][ T6507] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 62.902954][ T6507] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2292159468 [ 62.906179][ T6507] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 62.910038][ T6510] ubi0: background thread "ubi_bgt0d" started, PID 6510 [ 62.912405][ T6509] ubi0: detaching mtd0 [ 62.914964][ T6509] ubi0: mtd0 is detached [ 62.965153][ T6471] vhci_hcd: connection reset by peer [ 62.967144][ T1144] vhci_hcd: stop threads [ 62.968609][ T1144] vhci_hcd: release socket [ 62.970164][ T1144] vhci_hcd: disconnect device [ 63.045542][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 63.049120][ T9] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 63.052069][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.072640][ T9] usb 5-1: config 0 descriptor?? [ 63.078250][ T6499] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.510358][ T9] elan 0003:04F3:0755.0003: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 64.907471][ T6541] FAULT_INJECTION: forcing a failure. [ 64.907471][ T6541] name failslab, interval 1, probability 0, space 0, times 1 [ 64.911792][ T6541] CPU: 0 UID: 0 PID: 6541 Comm: syz.3.121 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 64.911807][ T6541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.911814][ T6541] Call Trace: [ 64.911817][ T6541] [ 64.911821][ T6541] dump_stack_lvl+0x16c/0x1f0 [ 64.911838][ T6541] should_fail_ex+0x512/0x640 [ 64.911855][ T6541] ? tomoyo_encode2+0x100/0x3e0 [ 64.911875][ T6541] should_failslab+0xc2/0x120 [ 64.911910][ T6541] __kmalloc_noprof+0xd2/0x510 [ 64.911931][ T6541] tomoyo_encode2+0x100/0x3e0 [ 64.911951][ T6541] tomoyo_encode+0x29/0x50 [ 64.911973][ T6541] tomoyo_realpath_from_path+0x18f/0x6e0 [ 64.911998][ T6541] ? tomoyo_profile+0x47/0x60 [ 64.912013][ T6541] tomoyo_path_number_perm+0x245/0x580 [ 64.912031][ T6541] ? tomoyo_path_number_perm+0x237/0x580 [ 64.912045][ T6541] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 64.912060][ T6541] ? preempt_count_add+0x76/0x150 [ 64.912083][ T6541] ? rcu_is_watching+0x12/0xc0 [ 64.912094][ T6541] ? __fget_files+0x204/0x3c0 [ 64.912106][ T6541] ? hook_file_ioctl_common+0x145/0x410 [ 64.912120][ T6541] ? lock_release+0x201/0x2f0 [ 64.912135][ T6541] ? __fget_files+0x20e/0x3c0 [ 64.912147][ T6541] security_file_ioctl_compat+0x9b/0x240 [ 64.912161][ T6541] __ia32_compat_sys_ioctl+0xc3/0x370 [ 64.912179][ T6541] __do_fast_syscall_32+0x7c/0x3a0 [ 64.912195][ T6541] do_fast_syscall_32+0x32/0x80 [ 64.912209][ T6541] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.912223][ T6541] RIP: 0023:0xf7fa6579 [ 64.912232][ T6541] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 64.912242][ T6541] RSP: 002b:00000000f54a555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 64.912253][ T6541] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000004140aecd [ 64.912259][ T6541] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.912265][ T6541] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.912272][ T6541] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 64.912278][ T6541] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.912287][ T6541] [ 64.912336][ T6541] ERROR: Out of memory at tomoyo_realpath_from_path. [ 65.096243][ T6543] netlink: 'syz.2.122': attribute type 3 has an invalid length. [ 65.494497][ T59] usb 5-1: USB disconnect, device number 2 [ 66.086476][ T6600] vivid-000: disconnect [ 66.090523][ T6600] vivid-000: reconnect [ 66.242144][ T6600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.804096][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 66.954183][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 66.958297][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.961652][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.964721][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 66.968887][ T24] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 66.972474][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.976868][ T24] usb 8-1: config 0 descriptor?? [ 67.074132][ T6322] vhci_hcd: vhci_device speed not set [ 67.134534][ T5979] Bluetooth: hci0: command 0x0406 tx timeout [ 67.171857][ T6621] debugfs: 'ttyS3' already exists in 'caif_serial' [ 67.386663][ T24] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 67.390067][ T24] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 67.392107][ T24] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 67.394203][ T24] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 67.400054][ T24] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 67.409522][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 67.424040][ T24] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 67.429158][ T24] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 67.590449][ T6613] random: crng reseeded on system resumption [ 67.595426][ T9] usb 8-1: USB disconnect, device number 2 [ 67.595463][ T53] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 67.602576][ T53] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 67.612404][ T53] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 67.616938][ T53] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 67.945565][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.136'. [ 67.997985][ T6658] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.260127][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 68.567842][ T6684] evm: overlay not supported [ 68.705096][ T6691] debugfs: 'ttyS3' already exists in 'caif_serial' [ 69.144027][ T5975] Bluetooth: hci2: command 0x0406 tx timeout [ 69.533320][ T6725] netlink: 32 bytes leftover after parsing attributes in process `syz.2.149'. [ 70.314813][ T6760] FAULT_INJECTION: forcing a failure. [ 70.314813][ T6760] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.319166][ T6760] CPU: 3 UID: 0 PID: 6760 Comm: syz.2.157 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 70.319193][ T6760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.319200][ T6760] Call Trace: [ 70.319204][ T6760] [ 70.319208][ T6760] dump_stack_lvl+0x16c/0x1f0 [ 70.319225][ T6760] should_fail_ex+0x512/0x640 [ 70.319244][ T6760] _copy_from_user+0x2e/0xd0 [ 70.319262][ T6760] memdup_user+0x6b/0xe0 [ 70.319275][ T6760] kvm_arch_vcpu_ioctl+0x1fb2/0x52d0 [ 70.319289][ T6760] ? is_bpf_text_address+0x94/0x1a0 [ 70.319304][ T6760] ? kernel_text_address+0x8d/0x100 [ 70.319315][ T6760] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 70.319329][ T6760] ? stack_trace_save+0x8e/0xc0 [ 70.319342][ T6760] ? __pfx_stack_trace_save+0x10/0x10 [ 70.319354][ T6760] ? stack_depot_save_flags+0x29/0x9c0 [ 70.319370][ T6760] ? kasan_save_stack+0x42/0x60 [ 70.319383][ T6760] ? kasan_save_stack+0x33/0x60 [ 70.319394][ T6760] ? kasan_save_track+0x14/0x30 [ 70.319406][ T6760] ? kasan_save_free_info+0x3b/0x60 [ 70.319423][ T6760] ? __mutex_trylock_common+0xe9/0x250 [ 70.319438][ T6760] ? __pfx___mutex_trylock_common+0x10/0x10 [ 70.319453][ T6760] ? __pfx___might_resched+0x10/0x10 [ 70.319464][ T6760] ? rcu_is_watching+0x12/0xc0 [ 70.319475][ T6760] ? trace_contention_end+0xdd/0x130 [ 70.319489][ T6760] ? __mutex_lock+0x1c5/0x1060 [ 70.319505][ T6760] ? __pfx___mutex_lock+0x10/0x10 [ 70.319520][ T6760] ? rcu_is_watching+0x12/0xc0 [ 70.319532][ T6760] ? kvm_vcpu_ioctl+0x1236/0x1690 [ 70.319545][ T6760] kvm_vcpu_ioctl+0x1236/0x1690 [ 70.319560][ T6760] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 70.319578][ T6760] ? tomoyo_path_number_perm+0x18d/0x580 [ 70.319598][ T6760] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 70.319614][ T6760] ? update_curr+0x1bd/0x550 [ 70.319638][ T6760] ? __schedule+0x3fef/0x5de0 [ 70.319655][ T6760] ? rcu_is_watching+0x12/0xc0 [ 70.319673][ T6760] ? trace_sched_exit_tp+0xd1/0x120 [ 70.319700][ T6760] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.319723][ T6760] ? do_vfs_ioctl+0x128/0x14f0 [ 70.319746][ T6760] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 70.319772][ T6760] ? rcu_is_watching+0x12/0xc0 [ 70.319789][ T6760] kvm_vcpu_compat_ioctl+0x20f/0x3d0 [ 70.319812][ T6760] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 70.319860][ T6760] ? __fget_files+0x20e/0x3c0 [ 70.319880][ T6760] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 70.319902][ T6760] __ia32_compat_sys_ioctl+0x242/0x370 [ 70.319931][ T6760] __do_fast_syscall_32+0x7c/0x3a0 [ 70.319955][ T6760] do_fast_syscall_32+0x32/0x80 [ 70.319977][ T6760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 70.320004][ T6760] RIP: 0023:0xf7f53579 [ 70.320019][ T6760] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 70.320035][ T6760] RSP: 002b:00000000f545555c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 70.320050][ T6760] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000004140aecd [ 70.320059][ T6760] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 70.320068][ T6760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 70.320077][ T6760] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 70.320085][ T6760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 70.320100][ T6760] [ 70.895067][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.897483][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.192935][ T6775] netlink: 'syz.1.162': attribute type 4 has an invalid length. [ 71.198971][ T6775] netlink: 'syz.1.162': attribute type 4 has an invalid length. [ 81.134625][ T1337] cfg80211: failed to load regulatory.db [ 102.437059][ T6807] can0: slcan on pty20. [ 103.245436][ T6801] can0 (unregistered): slcan off pty20. [ 103.533840][ T6841] ======================================================= [ 103.533840][ T6841] WARNING: The mand mount option has been deprecated and [ 103.533840][ T6841] and is ignored by this kernel. Remove the mand [ 103.533840][ T6841] option from the mount to silence this warning. [ 103.533840][ T6841] ======================================================= [ 103.576341][ T6840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'. [ 103.591532][ T6840] vlan2: entered promiscuous mode [ 103.605201][ T6840] vlan2: entered allmulticast mode [ 103.607513][ T6840] hsr_slave_1: entered allmulticast mode [ 103.651931][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'. [ 103.855944][ T6843] netlink: 'syz.0.170': attribute type 6 has an invalid length. [ 104.251479][ T6848] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 104.531861][ T6858] netlink: 'syz.2.176': attribute type 3 has an invalid length. [ 105.579615][ T6868] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 105.583599][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'. [ 105.635088][ T6870] netlink: 272 bytes leftover after parsing attributes in process `syz.1.179'. [ 105.782031][ T6875] netlink: 'syz.1.181': attribute type 2 has an invalid length. [ 105.785769][ T6875] netlink: 'syz.1.181': attribute type 1 has an invalid length. [ 106.504164][ T5979] Bluetooth: hci3: command 0x0406 tx timeout [ 106.559084][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 106.625765][ T6882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 107.970882][ T6905] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.144141][ T5975] Bluetooth: hci3: command 0x0406 tx timeout [ 109.171326][ T6915] syz.0.192 (6915) used greatest stack depth: 19960 bytes left [ 109.334803][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 109.338823][ T6926] netlink: 48 bytes leftover after parsing attributes in process `syz.2.195'. [ 109.352892][ T6926] geneve2: entered promiscuous mode [ 109.355895][ T6926] geneve2: entered allmulticast mode [ 109.383348][ T6935] fuse: Bad value for 'group_id' [ 109.383483][ T6936] fuse: Bad value for 'group_id' [ 109.385241][ T6935] fuse: Bad value for 'group_id' [ 109.389644][ T6936] fuse: Bad value for 'group_id' [ 109.720939][ T6946] binder: 6945:6946 ioctl c0306201 0 returned -14 [ 109.723666][ T6946] binder: 6945:6946 ioctl c0306201 0 returned -14 [ 109.726180][ T6946] binder: 6945:6946 ioctl c0306201 0 returned -14 [ 110.014165][ T24] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 110.169363][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 110.174065][ T24] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 110.177966][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.183558][ T24] usb 8-1: config 0 descriptor?? [ 110.193897][ T6947] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 110.672607][ T24] elan 0003:04F3:0755.0005: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 111.477170][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 111.477208][ T40] audit: type=1326 audit(1755541487.391:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53598 code=0x7ffc0000 [ 111.486812][ T40] audit: type=1326 audit(1755541487.391:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53598 code=0x7ffc0000 [ 111.493496][ T40] audit: type=1326 audit(1755541487.391:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53598 code=0x7ffc0000 [ 111.500969][ T40] audit: type=1326 audit(1755541487.391:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53598 code=0x7ffc0000 [ 111.509852][ T40] audit: type=1326 audit(1755541487.391:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53598 code=0x7ffc0000 [ 111.517555][ T40] audit: type=1326 audit(1755541487.391:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 111.524352][ T40] audit: type=1326 audit(1755541487.391:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7ffc0000 [ 111.531959][ T40] audit: type=1326 audit(1755541487.391:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53598 code=0x7ffc0000 [ 111.538996][ T40] audit: type=1326 audit(1755541487.391:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53598 code=0x7ffc0000 [ 111.546484][ T40] audit: type=1326 audit(1755541487.391:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.2.205" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53598 code=0x7ffc0000 [ 112.386814][ T6975] debugfs: 'ttyS3' already exists in 'caif_serial' [ 112.474578][ T59] usb 8-1: USB disconnect, device number 3 [ 112.950212][ T7005] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 113.265577][ T7021] binder: 7020:7021 ioctl c0306201 0 returned -14 [ 113.269112][ T7021] binder: 7020:7021 ioctl c0306201 0 returned -14 [ 113.271993][ T7021] binder: 7020:7021 ioctl c0306201 0 returned -14 [ 113.404979][ T7032] debugfs: 'ttyS3' already exists in 'caif_serial' [ 113.574107][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 114.015904][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 114.019888][ T9] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 114.022786][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.039048][ T9] usb 5-1: config 0 descriptor?? [ 114.075231][ T7029] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.242746][ T7059] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.305853][ T7057] mmap: syz.1.219 (7057) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.488200][ T9] elan 0003:04F3:0755.0006: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 114.524186][ T6296] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 114.674115][ T6296] usb 7-1: Using ep0 maxpacket: 32 [ 114.677514][ T6296] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 114.683621][ T6296] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 114.687882][ T6296] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 114.691235][ T6296] usb 7-1: Product: syz [ 114.693267][ T6296] usb 7-1: Manufacturer: syz [ 114.695328][ T6296] usb 7-1: SerialNumber: syz [ 114.698533][ T6296] usb 7-1: config 0 descriptor?? [ 114.703742][ T7061] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 114.706876][ T6296] hub 7-1:0.0: bad descriptor, ignoring hub [ 114.708912][ T6296] hub 7-1:0.0: probe with driver hub failed with error -5 [ 115.032160][ T9] usb 7-1: USB disconnect, device number 2 [ 115.220207][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 115.223217][ T7068] bridge_slave_1: left allmulticast mode [ 115.225355][ T7068] bridge_slave_1: left promiscuous mode [ 115.227541][ T7068] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.232440][ T7068] bridge_slave_0: left allmulticast mode [ 115.234821][ T7068] bridge_slave_0: left promiscuous mode [ 115.236887][ T7068] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.327873][ T7070] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 116.385201][ T840] usb 5-1: USB disconnect, device number 3 [ 116.567564][ T7092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.228'. [ 116.644014][ T843] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 116.774084][ T843] usb 8-1: device descriptor read/64, error -71 [ 117.024022][ T843] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 117.164041][ T843] usb 8-1: device descriptor read/64, error -71 [ 117.205350][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'. [ 117.217216][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 117.228678][ T7108] hsr_slave_1 (unregistering): left promiscuous mode [ 117.288938][ T843] usb usb8-port1: attempt power cycle [ 117.624047][ T843] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 117.644435][ T843] usb 8-1: device descriptor read/8, error -71 [ 117.845742][ T7116] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 117.848715][ T7116] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 117.852020][ T7116] vhci_hcd vhci_hcd.0: Device attached [ 117.907875][ T7117] vhci_hcd: connection closed [ 117.932928][ T46] vhci_hcd: stop threads [ 117.936115][ T46] vhci_hcd: release socket [ 117.937696][ T46] vhci_hcd: disconnect device [ 117.984545][ T843] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 118.005155][ T843] usb 8-1: device descriptor read/8, error -71 [ 118.119313][ T843] usb usb8-port1: unable to enumerate USB device [ 118.267519][ T7139] netlink: 'syz.0.243': attribute type 1 has an invalid length. [ 118.551829][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 118.625626][ T7161] netlink: 20 bytes leftover after parsing attributes in process `syz.2.246'. [ 118.629758][ T5979] Bluetooth: hci3: unexpected event for opcode 0x041b [ 119.616231][ T7202] tipc: Started in network mode [ 119.617907][ T7202] tipc: Node identity , cluster identity 4711 [ 119.620453][ T7202] tipc: Failed to obtain node identity [ 119.622212][ T7202] tipc: Enabling of bearer rejected, failed to enable media [ 119.625587][ T7202] syzkaller0: entered promiscuous mode [ 119.627325][ T7202] syzkaller0: entered allmulticast mode [ 119.726425][ T7212] sg_write: process 228 (syz.1.255) changed security contexts after opening file descriptor, this is not allowed. [ 119.769569][ T7219] netlink: 'syz.1.257': attribute type 1 has an invalid length. [ 119.806640][ T7220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.253'. [ 119.875977][ T5979] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 120.012033][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 120.386275][ T7228] hub 2-0:1.0: USB hub found [ 120.390090][ T7228] hub 2-0:1.0: 2 ports detected [ 120.702221][ T7241] overlayfs: failed to resolve './file1': -2 [ 120.907647][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.262'. [ 120.910925][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.262'. [ 121.855330][ T7264] netlink: 'syz.2.270': attribute type 3 has an invalid length. [ 121.975007][ T7262] batman_adv: batadv0: Adding interface: gretap1 [ 121.978020][ T7262] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.987097][ T7262] batman_adv: batadv0: Interface activated: gretap1 [ 122.139067][ T7271] overlayfs: failed to resolve './file1': -2 [ 122.952173][ T7288] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 123.039011][ T7289] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.509073][ T7303] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 123.517244][ T7303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.525146][ T7303] vlan2: entered promiscuous mode [ 123.526897][ T7303] bond1: entered promiscuous mode [ 123.528698][ T7303] vlan2: entered allmulticast mode [ 123.530542][ T7303] bond1: entered allmulticast mode [ 124.064763][ T7321] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 124.067233][ T7321] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 124.069966][ T7318] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(16) [ 124.072121][ T7318] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 124.077571][ T7318] vhci_hcd vhci_hcd.0: Device attached [ 124.084305][ T7321] vhci_hcd vhci_hcd.0: Device attached [ 124.406830][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.1.286'. [ 124.441668][ T59] usb 42-1: SetAddress Request (2) to port 0 [ 124.443836][ T59] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 124.532955][ T7333] binder: 7330:7333 ioctl c018620c 80000380 returned -22 [ 124.749234][ T7336] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.767451][ T7336] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.796989][ T7336] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.802434][ T7336] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 124.818134][ T7336] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.865364][ T7336] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.894642][ T7336] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.929679][ T7336] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.934118][ T7336] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.984975][ T7336] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.016465][ T7322] vhci_hcd: connection closed [ 125.016630][ T7324] vhci_hcd: connection closed [ 125.019586][ T1217] vhci_hcd: stop threads [ 125.019898][ T7336] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.021838][ T1217] vhci_hcd: release socket [ 125.022814][ T1217] vhci_hcd: disconnect device [ 125.030711][ T1217] vhci_hcd: stop threads [ 125.033163][ T1217] vhci_hcd: release socket [ 125.036137][ T1217] vhci_hcd: disconnect device [ 125.184039][ T59] usb 42-1: enqueue for inactive port 0 [ 125.604936][ T59] usb usb42-port1: attempt power cycle [ 125.732033][ T7336] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.735029][ T7336] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 125.739278][ T7336] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 125.742130][ T7336] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 125.785259][ T7354] overlay: Unknown parameter 'fsmagic' [ 125.793012][ T7354] AppArmor: change_hat: Invalid input '0x0020000000000§' [ 125.816360][ T7355] tipc: Started in network mode [ 125.822165][ T7355] tipc: Node identity 3a8ada14d71e, cluster identity 4711 [ 125.825897][ T7355] tipc: Enabled bearer , priority 0 [ 125.829405][ T7353] tipc: Resetting bearer [ 125.867118][ T7353] tipc: Disabling bearer [ 125.869736][ T7359] futex_wake_op: syz.0.296 tries to shift op by 144; fix this program [ 126.296851][ T59] usb usb42-port1: unable to enumerate USB device [ 126.734112][ T5979] Bluetooth: hci0: command 0x0406 tx timeout [ 126.837672][ T7375] netlink: 'syz.2.299': attribute type 1 has an invalid length. [ 126.894075][ T5979] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.974140][ T5979] Bluetooth: hci2: command 0x0406 tx timeout [ 127.036531][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'. [ 127.291844][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'. [ 127.295691][ T7397] openvswitch: netlink: nsh attr 8385 is out of range max 3 [ 127.298046][ T7397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.774111][ T5979] Bluetooth: hci3: command 0x0406 tx timeout [ 128.390557][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 128.614129][ T59] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 128.785310][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.788788][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.791788][ T59] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.795962][ T59] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.799036][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.802469][ T59] usb 6-1: config 0 descriptor?? [ 128.824192][ T5979] Bluetooth: hci0: command 0x0406 tx timeout [ 128.974081][ T5979] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.054050][ T5979] Bluetooth: hci2: command 0x0406 tx timeout [ 129.063113][ T7436] binder: 7435:7436 ioctl c0306201 0 returned -14 [ 129.067146][ T7436] binder: 7435:7436 ioctl c0306201 0 returned -14 [ 129.070752][ T7436] binder: 7435:7436 ioctl c0306201 0 returned -14 [ 129.219752][ T59] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 129.384048][ T1337] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 129.535130][ T34] usb 6-1: USB disconnect, device number 4 [ 129.543333][ T1337] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 129.552783][ T1337] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 129.556849][ T1337] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.562611][ T1337] usb 7-1: config 0 descriptor?? [ 129.566821][ T7437] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 129.588076][ T7442] binder: 7441:7442 ioctl c0306201 0 returned -14 [ 129.593330][ T7442] binder: 7441:7442 ioctl c0306201 0 returned -14 [ 129.596231][ T7442] binder: 7441:7442 ioctl c0306201 0 returned -14 [ 129.854064][ T5979] Bluetooth: hci3: command 0x0406 tx timeout [ 129.904048][ T843] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 129.919912][ T40] kauditd_printk_skb: 4142 callbacks suppressed [ 129.919957][ T40] audit: type=1326 audit(1755541505.831:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.0.322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 129.928760][ T40] audit: type=1326 audit(1755541505.831:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.0.322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 129.937265][ T40] audit: type=1326 audit(1755541505.841:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.0.322" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 129.945616][ T40] audit: type=1326 audit(1755541505.841:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.0.322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 129.954030][ T40] audit: type=1326 audit(1755541505.841:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.0.322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 129.962396][ T40] audit: type=1326 audit(1755541505.841:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.0.322" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 129.970747][ T40] audit: type=1326 audit(1755541505.841:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.0.322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 129.979278][ T40] audit: type=1326 audit(1755541505.841:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.0.322" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 129.986049][ T40] audit: type=1326 audit(1755541505.841:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.0.322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 129.994573][ T40] audit: type=1326 audit(1755541505.841:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.0.322" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 130.056917][ T843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 130.061313][ T843] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 130.066811][ T843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.071234][ T843] usb 8-1: config 0 descriptor?? [ 130.071453][ T1337] elan 0003:04F3:0755.0008: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 130.074122][ T7443] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.643393][ T843] elan 0003:04F3:0755.0009: hidraw2: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 130.749994][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.324'. [ 130.894099][ T5979] Bluetooth: hci0: command 0x0406 tx timeout [ 131.054106][ T5979] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.134167][ T5979] Bluetooth: hci2: command 0x0406 tx timeout [ 131.490183][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.326'. [ 131.843446][ T7475] debugfs: 'ttyS3' already exists in 'caif_serial' [ 131.920460][ T7481] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 131.944027][ T5979] Bluetooth: hci3: command 0x0406 tx timeout [ 131.996661][ T6296] usb 7-1: USB disconnect, device number 3 [ 132.335517][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.338251][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.812321][ T840] usb 8-1: USB disconnect, device number 8 [ 132.976357][ T1422] ================================================================== [ 132.978812][ T1422] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630 [ 132.981039][ T1422] Read of size 1 at addr ffff8880275be490 by task aoe_tx0/1422 [ 132.984991][ T1422] [ 132.986615][ T1422] CPU: 3 UID: 0 PID: 1422 Comm: aoe_tx0 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 132.986633][ T1422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.986640][ T1422] Call Trace: [ 132.986645][ T1422] [ 132.986651][ T1422] dump_stack_lvl+0x116/0x1f0 [ 132.986673][ T1422] print_report+0xcd/0x630 [ 132.986689][ T1422] ? __virt_addr_valid+0x81/0x610 [ 132.986704][ T1422] ? __phys_addr+0xe8/0x180 [ 132.986717][ T1422] ? handle_tx+0x5dc/0x630 [ 132.986729][ T1422] kasan_report+0xe0/0x110 [ 132.986743][ T1422] ? handle_tx+0x5dc/0x630 [ 132.986755][ T1422] handle_tx+0x5dc/0x630 [ 132.986767][ T1422] dev_hard_start_xmit+0x97/0x740 [ 132.986782][ T1422] __dev_queue_xmit+0xa46/0x4490 [ 132.986795][ T1422] ? finish_task_switch.isra.0+0x221/0xc10 [ 132.986808][ T1422] ? rcu_is_watching+0x12/0xc0 [ 132.986821][ T1422] ? __pfx___dev_queue_xmit+0x10/0x10 [ 132.986832][ T1422] ? __schedule+0x11a3/0x5de0 [ 132.986845][ T1422] ? __smp_call_single_queue+0x161/0x2f0 [ 132.986859][ T1422] ? tg_unthrottle_up+0xfd0/0x10b0 [ 132.986875][ T1422] ? ref_tracker_free+0x37c/0x830 [ 132.986893][ T1422] ? do_raw_spin_lock+0x12c/0x2b0 [ 132.986912][ T1422] ? rcu_is_watching+0x12/0xc0 [ 132.986923][ T1422] ? rcu_is_watching+0x12/0xc0 [ 132.986935][ T1422] tx+0xcc/0x190 [ 132.986951][ T1422] ? __pfx_tx+0x10/0x10 [ 132.986964][ T1422] kthread+0x1e1/0x3e0 [ 132.986976][ T1422] ? __pfx_kthread+0x10/0x10 [ 132.986988][ T1422] ? __pfx_default_wake_function+0x10/0x10 [ 132.987000][ T1422] ? __kthread_parkme+0x19e/0x250 [ 132.987014][ T1422] ? __pfx_kthread+0x10/0x10 [ 132.987026][ T1422] kthread+0x3c2/0x780 [ 132.987042][ T1422] ? __pfx_kthread+0x10/0x10 [ 132.987057][ T1422] ? ret_from_fork+0x25/0x6f0 [ 132.987074][ T1422] ? rcu_is_watching+0x12/0xc0 [ 132.987085][ T1422] ? __pfx_kthread+0x10/0x10 [ 132.987100][ T1422] ret_from_fork+0x5d4/0x6f0 [ 132.987117][ T1422] ? __pfx_kthread+0x10/0x10 [ 132.987132][ T1422] ret_from_fork_asm+0x1a/0x30 [ 132.987150][ T1422] [ 132.987154][ T1422] [ 133.024011][ T5979] Bluetooth: hci0: command 0x0406 tx timeout [ 133.024207][ T1422] Allocated by task 7475: [ 133.052028][ T1422] kasan_save_stack+0x33/0x60 [ 133.053519][ T1422] kasan_save_track+0x14/0x30 [ 133.055000][ T1422] __kasan_kmalloc+0xaa/0xb0 [ 133.056417][ T1422] alloc_tty_struct+0x96/0x8c0 [ 133.057910][ T1422] tty_init_dev.part.0+0x1e/0x500 [ 133.059449][ T1422] tty_open+0xa50/0xf90 [ 133.060775][ T1422] chrdev_open+0x234/0x6a0 [ 133.062192][ T1422] do_dentry_open+0x982/0x1530 [ 133.063725][ T1422] vfs_open+0x82/0x3f0 [ 133.065073][ T1422] path_openat+0x1de4/0x2cb0 [ 133.066613][ T1422] do_filp_open+0x20b/0x470 [ 133.068263][ T1422] do_sys_openat2+0x11b/0x1d0 [ 133.069936][ T1422] __ia32_compat_sys_openat+0x16d/0x210 [ 133.071811][ T1422] __do_fast_syscall_32+0x7c/0x3a0 [ 133.073416][ T1422] do_fast_syscall_32+0x32/0x80 [ 133.074960][ T1422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.076982][ T1422] [ 133.077756][ T1422] Freed by task 9: [ 133.078952][ T1422] kasan_save_stack+0x33/0x60 [ 133.080443][ T1422] kasan_save_track+0x14/0x30 [ 133.081920][ T1422] kasan_save_free_info+0x3b/0x60 [ 133.083526][ T1422] __kasan_slab_free+0x60/0x70 [ 133.085036][ T1422] kfree+0x2b4/0x4d0 [ 133.086260][ T1422] process_one_work+0x9cc/0x1b70 [ 133.087830][ T1422] worker_thread+0x6c8/0xf10 [ 133.089301][ T1422] kthread+0x3c2/0x780 [ 133.090619][ T1422] ret_from_fork+0x5d4/0x6f0 [ 133.092093][ T1422] ret_from_fork_asm+0x1a/0x30 [ 133.093651][ T1422] [ 133.094440][ T1422] Last potentially related work creation: [ 133.096233][ T1422] kasan_save_stack+0x33/0x60 [ 133.097812][ T1422] kasan_record_aux_stack+0xa7/0xc0 [ 133.099546][ T1422] insert_work+0x36/0x230 [ 133.101006][ T1422] __queue_work+0x97e/0x1160 [ 133.102523][ T1422] queue_work_on+0x1a4/0x1f0 [ 133.104084][ T1422] release_tty+0x4de/0x5d0 [ 133.105492][ T1422] tty_release_struct+0xb7/0xe0 [ 133.107048][ T1422] tty_release+0xe2d/0x1430 [ 133.108468][ T1422] __fput+0x402/0xb70 [ 133.109673][ T1422] task_work_run+0x150/0x240 [ 133.111156][ T1422] exit_to_user_mode_loop+0xeb/0x110 [ 133.112833][ T1422] __do_fast_syscall_32+0x2ac/0x3a0 [ 133.114491][ T1422] do_fast_syscall_32+0x32/0x80 [ 133.116046][ T1422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.118071][ T1422] [ 133.118852][ T1422] The buggy address belongs to the object at ffff8880275be000 [ 133.118852][ T1422] which belongs to the cache kmalloc-cg-2k of size 2048 [ 133.123241][ T1422] The buggy address is located 1168 bytes inside of [ 133.123241][ T1422] freed 2048-byte region [ffff8880275be000, ffff8880275be800) [ 133.127518][ T1422] [ 133.128294][ T1422] The buggy address belongs to the physical page: [ 133.130300][ T1422] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880275bf000 pfn:0x275b8 [ 133.133398][ T1422] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 133.136012][ T1422] memcg:ffff88802462cb01 [ 133.137377][ T1422] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 133.139757][ T1422] page_type: f5(slab) [ 133.141054][ T1422] raw: 00fff00000000040 ffff88801b84c140 ffffea00004f1600 dead000000000002 [ 133.143723][ T1422] raw: ffff8880275bf000 0000000000080006 00000000f5000000 ffff88802462cb01 [ 133.146359][ T1422] head: 00fff00000000040 ffff88801b84c140 ffffea00004f1600 dead000000000002 [ 133.148966][ T1422] head: ffff8880275bf000 0000000000080006 00000000f5000000 ffff88802462cb01 [ 133.151594][ T1422] head: 00fff00000000003 ffffea00009d6e01 00000000ffffffff 00000000ffffffff [ 133.154301][ T1422] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 133.157018][ T1422] page dumped because: kasan: bad access detected [ 133.159024][ T1422] page_owner tracks the page as allocated [ 133.160817][ T1422] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7094, tgid 7083 (syz.1.227), ts 116910503622, free_ts 116857734348 [ 133.167427][ T1422] post_alloc_hook+0x1c0/0x230 [ 133.168943][ T1422] get_page_from_freelist+0x132b/0x38e0 [ 133.170671][ T1422] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 133.172510][ T1422] alloc_pages_mpol+0x1fb/0x550 [ 133.174036][ T1422] new_slab+0x247/0x330 [ 133.175352][ T1422] ___slab_alloc+0xcf2/0x1740 [ 133.176833][ T1422] __slab_alloc.constprop.0+0x56/0xb0 [ 133.178553][ T1422] __kmalloc_cache_noprof+0xfb/0x3e0 [ 133.180214][ T1422] copy_verifier_state+0xbad/0xfb0 [ 133.181817][ T1422] push_stack+0x1ca/0x370 [ 133.183152][ T1422] check_cond_jmp_op+0xaf1/0x72d0 [ 133.184719][ T1422] do_check_common+0xa13e/0xb410 [ 133.186279][ T1422] bpf_check+0x8763/0xc4d0 [ 133.187708][ T1422] bpf_prog_load+0xe41/0x2490 [ 133.189193][ T1422] __sys_bpf+0x4a3f/0x4de0 [ 133.190612][ T1422] __ia32_sys_bpf+0x76/0xe0 [ 133.192040][ T1422] page last free pid 7094 tgid 7083 stack trace: [ 133.194003][ T1422] __free_frozen_pages+0x7d5/0x10f0 [ 133.195625][ T1422] __put_partials+0x165/0x1c0 [ 133.197076][ T1422] qlist_free_all+0x4d/0x120 [ 133.198581][ T1422] kasan_quarantine_reduce+0x195/0x1e0 [ 133.200297][ T1422] __kasan_krealloc+0x14a/0x1a0 [ 133.201819][ T1422] krealloc_noprof+0x19f/0x3a0 [ 133.203330][ T1422] push_jmp_history+0x2fa/0x790 [ 133.204811][ T1422] do_check_common+0xc52/0xb410 [ 133.206343][ T1422] bpf_check+0x8763/0xc4d0 [ 133.207780][ T1422] bpf_prog_load+0xe41/0x2490 [ 133.209260][ T1422] __sys_bpf+0x4a3f/0x4de0 [ 133.210671][ T1422] __ia32_sys_bpf+0x76/0xe0 [ 133.212101][ T1422] __do_fast_syscall_32+0x7c/0x3a0 [ 133.213715][ T1422] do_fast_syscall_32+0x32/0x80 [ 133.215252][ T1422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.217255][ T1422] [ 133.218020][ T1422] Memory state around the buggy address: [ 133.219904][ T1422] ffff8880275be380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.222421][ T1422] ffff8880275be400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.225062][ T1422] >ffff8880275be480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.227833][ T1422] ^ [ 133.229443][ T1422] ffff8880275be500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.232129][ T1422] ffff8880275be580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.234622][ T1422] ================================================================== [ 133.237194][ T1422] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 133.239461][ T1422] CPU: 3 UID: 0 PID: 1422 Comm: aoe_tx0 Not tainted 6.17.0-rc2-syzkaller #0 PREEMPT(full) [ 133.242525][ T1422] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 133.245843][ T1422] Call Trace: [ 133.246947][ T1422] [ 133.247885][ T1422] dump_stack_lvl+0x3d/0x1f0 [ 133.249351][ T1422] vpanic+0x6e8/0x7a0 [ 133.250623][ T1422] ? __pfx_vpanic+0x10/0x10 [ 133.252060][ T1422] ? __pfx_vprintk_emit+0x10/0x10 [ 133.253639][ T1422] ? handle_tx+0x5dc/0x630 [ 133.255037][ T1422] panic+0xca/0xd0 [ 133.256231][ T1422] ? __pfx_panic+0x10/0x10 [ 133.257661][ T1422] ? check_panic_on_warn+0x1f/0xb0 [ 133.259297][ T1422] check_panic_on_warn+0xab/0xb0 [ 133.260857][ T1422] end_report+0x107/0x170 [ 133.262225][ T1422] kasan_report+0xee/0x110 [ 133.263633][ T1422] ? handle_tx+0x5dc/0x630 [ 133.265137][ T1422] handle_tx+0x5dc/0x630 [ 133.266501][ T1422] dev_hard_start_xmit+0x97/0x740 [ 133.268120][ T1422] __dev_queue_xmit+0xa46/0x4490 [ 133.269667][ T1422] ? finish_task_switch.isra.0+0x221/0xc10 [ 133.271505][ T1422] ? rcu_is_watching+0x12/0xc0 [ 133.273025][ T1422] ? __pfx___dev_queue_xmit+0x10/0x10 [ 133.274744][ T1422] ? __schedule+0x11a3/0x5de0 [ 133.276247][ T1422] ? __smp_call_single_queue+0x161/0x2f0 [ 133.278407][ T1422] ? tg_unthrottle_up+0xfd0/0x10b0 [ 133.280154][ T1422] ? ref_tracker_free+0x37c/0x830 [ 133.281804][ T1422] ? do_raw_spin_lock+0x12c/0x2b0 [ 133.283418][ T1422] ? rcu_is_watching+0x12/0xc0 [ 133.284942][ T1422] ? rcu_is_watching+0x12/0xc0 [ 133.286459][ T1422] tx+0xcc/0x190 [ 133.287648][ T1422] ? __pfx_tx+0x10/0x10 [ 133.288935][ T1422] kthread+0x1e1/0x3e0 [ 133.290304][ T1422] ? __pfx_kthread+0x10/0x10 [ 133.291789][ T1422] ? __pfx_default_wake_function+0x10/0x10 [ 133.293650][ T1422] ? __kthread_parkme+0x19e/0x250 [ 133.295224][ T1422] ? __pfx_kthread+0x10/0x10 [ 133.296619][ T1422] kthread+0x3c2/0x780 [ 133.297944][ T1422] ? __pfx_kthread+0x10/0x10 [ 133.299453][ T1422] ? ret_from_fork+0x25/0x6f0 [ 133.301017][ T1422] ? rcu_is_watching+0x12/0xc0 [ 133.302593][ T1422] ? __pfx_kthread+0x10/0x10 [ 133.304085][ T1422] ret_from_fork+0x5d4/0x6f0 [ 133.305575][ T1422] ? __pfx_kthread+0x10/0x10 [ 133.307180][ T1422] ret_from_fork_asm+0x1a/0x30 [ 133.308733][ T1422] [ 133.310541][ T1422] Kernel Offset: disabled [ 133.311925][ T1422] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:25:09 Registers: info registers vcpu 0 CPU#0 RAX=000000000005e282 RBX=000000000005e283 RCX=ffffffff822c22d3 RDX=0000000000006283 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc90006e7f748 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000003 R11=0000000000007b9c R12=ffff8880411ec8a0 R13=0000000000000001 R14=0000000000000000 R15=0000000000006283 RIP=ffffffff81bb0800 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c45602e CR3=000000006dee1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1d423d1e3ba9d9a0 6f451a80e12ed8bf ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3b3d734bc5d29599 5aff4fbff8d14e5c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 35db8722c43b9c87 011de3a8cd3b2930 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f5484da488ba29e 058c5f4da27f16e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000094c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6236099e1b3fe294 a0e5ae785179feec ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e0000007cac4e0e be00000002000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec0000008617099f 516a1e9c51623094 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 51afda3e000686c4 b4000000df6f0d9d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b8311beca29cdfa5 2d2ffadd35488f6f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8bc9062c7f2e5988 df39b6bc58c2f796 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff81c2f30f RDX=ffff888023ae4880 RSI=ffffffff816a0d21 RDI=ffffffff816a0cf7 RBP=ffff88801e74b540 RSP=ffffc9000361f6a8 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff90ab7297 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b33b3c0 R15=ffffed1003ce96a8 RIP=ffffffff8b90575f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000321ffffc CR3=000000006dee1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=fffff940002e8ce0 RBX=fffff940002e8ce1 RCX=ffffffff81f5de1f RDX=fffff940002e8ce1 RSI=0000000000000008 RDI=ffffea0001746700 RBP=fffff940002e8ce0 RSP=ffffc900070e7510 R8 =0000000000000000 R9 =fffff940002e8ce0 R10=ffffea0001746707 R11=0000000000007b9c R12=ffffea0001746700 R13=dffffc0000000000 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff822065cc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080202018 CR3=000000004d068000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7484ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85614a45 RDI=ffffffff9b0f8680 RBP=ffffffff9b0f8640 RSP=ffffc9000725f458 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000032343154 R12=0000000000000000 R13=000000000000005d R14=ffffffff9b0f8640 R15=ffffffff856149e0 RIP=ffffffff85614a6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c35bddf CR3=0000000027ad2000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000