last executing test programs: 52.154755848s ago: executing program 2 (id=2904): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0) r3 = socket$inet(0x2, 0x80000, 0xfffffffe) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="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"/298], 0x130}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r13], 0x34}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855) r14 = socket$netlink(0x10, 0x3, 0x0) writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r15 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r15, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r15, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c) sendto$inet6(r15, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r15, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc) 41.937426244s ago: executing program 2 (id=2904): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0) r3 = socket$inet(0x2, 0x80000, 0xfffffffe) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="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"/298], 0x130}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r13], 0x34}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855) r14 = socket$netlink(0x10, 0x3, 0x0) writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r15 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r15, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r15, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c) sendto$inet6(r15, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r15, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc) 31.547419355s ago: executing program 2 (id=2904): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0) r3 = socket$inet(0x2, 0x80000, 0xfffffffe) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="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"/298], 0x130}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r13], 0x34}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855) r14 = socket$netlink(0x10, 0x3, 0x0) writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r15 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r15, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r15, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c) sendto$inet6(r15, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r15, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc) 21.379045199s ago: executing program 2 (id=2904): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0) r3 = socket$inet(0x2, 0x80000, 0xfffffffe) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="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"/298], 0x130}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r13], 0x34}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855) r14 = socket$netlink(0x10, 0x3, 0x0) writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r15 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r15, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r15, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c) sendto$inet6(r15, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r15, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc) 11.719234959s ago: executing program 2 (id=2904): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0) r3 = socket$inet(0x2, 0x80000, 0xfffffffe) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="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"/298], 0x130}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r13], 0x34}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855) r14 = socket$netlink(0x10, 0x3, 0x0) writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r15 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r15, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r15, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c) sendto$inet6(r15, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r15, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc) 4.57869146s ago: executing program 3 (id=3268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0xa201, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000881, &(0x7f0000000240)={0xa, 0x4e21, 0x4, @local, 0xf}, 0x1c) r4 = getpid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(r4, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000440), 0x3fffffffffffe21, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r5], 0xc63b9e35) sched_setscheduler(0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40184810, 0x0) 3.979953216s ago: executing program 0 (id=3271): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0) r3 = socket$inet(0x2, 0x80000, 0xfffffffe) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="010000000000000000001d0000000c000600010000000100000010012f800800010000000000f0000380080001000300000008000400090000005c0003800c000400000000000000000008000200010000000c0004000203aaaaaaaaaaaa06000300feff000006000100ffff000006000100ffff000008000200010000000800020001000000060003000000000006000100010000006800038008000200020000000c0004000200aaaaaaaaaaaa0c0004000200aaaaaaaaaaaa0c000400001700000000000008000200020000000c0004000202aaaaaaaaaaaa0c0004000203aaaaaaaaaaaa080002000300ff0000050002000000000005000200000000000500020000000000140003800500020000000000080001008100"/298], 0x130}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r13, @ANYBLOB="18003080140003"], 0x34}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855) r14 = socket$netlink(0x10, 0x3, 0x0) writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r15 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r15, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r15, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c) sendto$inet6(r15, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r15, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc) 3.845233832s ago: executing program 1 (id=3272): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003e00), 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) io_setup(0x7ff, &(0x7f0000002080)=0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)='P', 0x1}]) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0x541b, 0x0) syz_usbip_server_init(0x5) r4 = syz_usbip_server_init(0x2) write$usbip_server(r4, &(0x7f0000000600)=ANY=[], 0xf1d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca6", 0x51}], 0x1}}], 0x1, 0x0) ioctl$CAPI_REGISTER(r6, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000791203000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) fgetxattr(r7, &(0x7f0000000040)=@random={'osx.', '&(+[{$[!],}\'\\^\'.\x00\xfb\x95l\x96R1\xa9\xa02u|\x940[je\xd5\xa2\v>\xc6\x99\x82\xf6\xf9\xc9\v\xaa\'\x0f\xd3U\x13-\x1d\x1f\xd2'}, &(0x7f00000001c0)=""/239, 0xef) syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffd, 0x86000) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000100, 0x0) 3.681551952s ago: executing program 0 (id=3273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xf, 0xfffffff8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 3.635320113s ago: executing program 3 (id=3274): ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) syz_emit_vhci(0x0, 0x21) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000a40)={0x0, 0x0, 0x30}, &(0x7f0000000a80)=0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@u, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) socket$alg(0x26, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {0x7}}, './file0\x00'}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @adiantum, 0x10, @desc1}) write$P9_RAUTH(0xffffffffffffffff, &(0x7f00000004c0)={0x14, 0x67, 0x1, {0x2a9309cb0f7786c8, 0x1}}, 0x14) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x1b, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 3.557452453s ago: executing program 0 (id=3275): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x0, {{0x2, 0x4e23, @multicast2}}}, 0x88) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x0, 0x0, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0), 0x10) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x6c, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0xd, 0x0, 0xc}}, {0x4}}]}, @TCA_STAB={0x4}]}, 0x6c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002bbd7000ffdbdf25010000000000000007410000006300180000000462726f6164636173742d6c696e6b0000000000000000000000000000100000000000000000000000f7aa04b01fe5000000000000000000000500"/98], 0x68}}, 0x0) socket$inet6(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getpeername(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000001300)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'batadv0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x4a}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x2}, {0x35}, {0x16}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xf, 0xfffffff8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 3.007284095s ago: executing program 1 (id=3276): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0xa201, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000881, &(0x7f0000000240)={0xa, 0x4e21, 0x4, @local, 0xf}, 0x1c) r4 = getpid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000440), 0x3fffffffffffe21, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r5], 0xc63b9e35) sched_setscheduler(0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40184810, 0x0) 2.658784364s ago: executing program 0 (id=3277): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0x1c6, &(0x7f0000000dc0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd69922ff50190210000000000000000000000fffffffffffffe8000000000000000000000000000aa0000000064afd900"], 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = openat$vmci(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000380)={@local}) r2 = gettid() r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='subflow_check_data_avail\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r2, r3, 0x0, 0x12, &(0x7f0000000180)='/dev/input/event#\x00'}, 0x30) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40104593, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "7f0e279d2e5cf55a61c5c40d6e76943e0347c7cbf6336e676a359b970be7f3f3"}) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002280)=""/4096, 0x1000}], 0x1, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r6, r5, 0x0, 0xfff) 2.578630753s ago: executing program 0 (id=3278): prctl$PR_SCHED_CORE(0x3e, 0x800000000001, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x0, 0x0, 0x4}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='sched_migrate_task\x00'}, 0x76) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x14004080}, 0x80) readv(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='virtio_transport_alloc_pkt\x00'}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) 2.4194318s ago: executing program 3 (id=3279): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r1 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f040, 0x4}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000400)='romfs\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) 2.029771442s ago: executing program 1 (id=3280): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0) r3 = socket$inet(0x2, 0x80000, 0xfffffffe) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="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"/298], 0x130}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r13, @ANYBLOB="18003080140003"], 0x34}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855) r14 = socket$netlink(0x10, 0x3, 0x0) writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r15 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r15, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r15, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c) sendto$inet6(r15, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r15, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc) 1.829795406s ago: executing program 1 (id=3281): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x5, 0x400, 0x9, 0x780, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000de6a0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e358e95cfa567fab0c28cc905cd00c0947085ae6fdf8a3e4dcccaf1cf532bd0b982365fd"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x2000000, 0xe40, 0x60ff, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8860040dffd00139fb7a884bdfc14f48786dd", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket(0x28, 0x5, 0x0) r5 = socket(0x15, 0x5, 0x1) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) fcntl$setstatus(r6, 0x4, 0x40c00) read$FUSE(0xffffffffffffffff, &(0x7f00000080c0)={0x2020}, 0x2020) 1.638732129s ago: executing program 3 (id=3282): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0) r3 = socket$inet(0x2, 0x80000, 0xfffffffe) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="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"/298], 0x130}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r13, @ANYBLOB="18003080140003"], 0x34}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855) r14 = socket$netlink(0x10, 0x3, 0x0) writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r15 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r15, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r15, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c) sendto$inet6(r15, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r15, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc) 1.385187875s ago: executing program 3 (id=3283): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}}, 0x4, 0x2, 0x9, 0x6c85, 0x9}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000400)={r1, 0xe}, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000126000/0x2000)=nil, 0x2000) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="d8bb038f81fe846833559483561eab7f2e02d2e71fd3add13ba9a788d56137b79a0b01abc9ec34f11e80107a41a4607460051a6b9dfa68e5617d4f3742a43c0d58403ace3ca640baf0659c47b59e6950", 0x50}, {&(0x7f00000000c0)="56cc4fd2c67539f23cf34603c8f2a13ea1e9f926d1757179b026bb8e2d0c06393f1a9a9dc19cd087c6db3882bba15cde7f73a7cc97f54faf980f99743337d496f2ca91979ec1d132c8d7002baaf17c0afc52e5e95300457d969eefcd70b98e9d79c7c22b96b1ead5a71b9b1cbddf13c0aa8749027c5a5e3cf3d5f33d4cd7caf69fa812e556883687488348f067dabce17689", 0x92}, {&(0x7f0000000180)="a7ebbcce3fd10c78fc83271444ab674c6a69bf04280b5e7efd3b9b940c001f45a512082dc262a3b5275219f4e7f80f7193a20e45c7b2011aa171eebd6c774e1084b589e61f787d23c64911b2fa7e0b9727a001e39c03ef2aa52dbbf604124fc50d03423c5690382382df1232375f16d09286205ba99456df2934c8594acf286759bb72a348703be6e748ff230984c624698437c14d1799793cc078c239ee4a8c6358da58251b0a49edc7d8bd528d6d586914dcbd0ac8b21117c693bd8f1feac88f3f5ac68bce37e9e75c1bf16a5afd8aa27cd9f3dcd8cddd7676c231f51f49", 0xdf}], 0x3}, 0x10004080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$MAP_LOOKUP_BATCH(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) openat$proc_capi20(0xffffff9c, &(0x7f0000000440), 0x200000, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='configfs\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x20074b1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "32f49e45aa030ede", "2319ff0a8d16c3e350730988a76caae5", "939434aa", "271f1e5d8adee054"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000900)=0x2, 0x4) sendto$inet6(r2, &(0x7f0000000500)="d1391b80a3cd6132792e4a21f40b430e", 0xfffffffffffffede, 0x8000, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1.119866997s ago: executing program 1 (id=3284): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003e00), 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, 0x0, 0x0, 0x0) io_setup(0x7ff, &(0x7f0000002080)=0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)='P', 0x1}]) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0x541b, 0x0) syz_usbip_server_init(0x5) r4 = syz_usbip_server_init(0x2) write$usbip_server(r4, &(0x7f0000000600)=ANY=[], 0xf1d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca6", 0x51}], 0x1}}], 0x1, 0x0) ioctl$CAPI_REGISTER(r6, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000791203000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) fgetxattr(r7, &(0x7f0000000040)=@random={'osx.', '&(+[{$[!],}\'\\^\'.\x00\xfb\x95l\x96R1\xa9\xa02u|\x940[je\xd5\xa2\v>\xc6\x99\x82\xf6\xf9\xc9\v\xaa\'\x0f\xd3U\x13-\x1d\x1f\xd2'}, &(0x7f00000001c0)=""/239, 0xef) syz_open_dev$evdev(&(0x7f0000000100), 0xfffffffffffffffd, 0x86000) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000100, 0x0) 1.044386102s ago: executing program 2 (id=2904): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0) r3 = socket$inet(0x2, 0x80000, 0xfffffffe) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="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"/298], 0x130}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r13], 0x34}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855) r14 = socket$netlink(0x10, 0x3, 0x0) writev(r14, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r15 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r15, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r15, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c) sendto$inet6(r15, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r15, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) writev(r14, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc) 1.06237ms ago: executing program 0 (id=3285): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getown(r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x5, 0x400, 0x9, 0x780, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000de6a0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e358e95cfa567fab0c28cc905cd00c0947085ae6fdf8a3e4dcccaf1cf532bd0b982365fd"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x2000000, 0xe40, 0x60ff, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8860040dffd00139fb7a884bdfc14f48786dd", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket(0x28, 0x5, 0x0) r5 = socket(0x15, 0x5, 0x1) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) r7 = dup2(r6, r6) read$FUSE(r7, &(0x7f00000080c0)={0x2020}, 0x2020) 259.882µs ago: executing program 1 (id=3286): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x8ec3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8d}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)='~', 0x1) readv(r2, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) write$binfmt_elf64(r1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=3287): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x0, 0x36fc3a0033702d2a, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast}}}}) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x9}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000004a00010000000000", @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="023572b459430e07"], 0x24}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) ioctl$sock_bt_hci(r3, 0x400448e1, &(0x7f0000000040)="cd5eda934a41f56269fa92d608a92020cfc1e456d3a30755d9810ea2925c8e361b534ca50c8e17e1f998f9d12ccb123e7a4924817dc1bb36229290bcec48c9398956f6bcccdac248e41d424a20d5aad072d046f666bbeab753b222c808430d0d592a12c85c0b65939302e7f8f9ff7eda9b1c4f7ddb0fb7b009772ffaf62b7f8b00ee4696de01a384b78b219c53374cf7044942235ea45d2855fc84959bd8f8a159752125098686945e59f080aa153763e23bdfbf99d734b131b83c692745623dfd22666eaed334dc8dc979dac3acbf6614754cc931a613adff338c36e464314473") kernel console output (not intermixed with test programs): ce attached [ 611.127614][T14880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.132366][T16845] usbip_core: unknown command [ 611.139328][T16845] vhci_hcd: unknown pdu 0 [ 611.141383][T16845] usbip_core: unknown command [ 611.144423][T16842] vhci_hcd: connection closed [ 611.145916][ T64] vhci_hcd: stop threads [ 611.149536][ T64] vhci_hcd: release socket [ 611.151346][ T64] vhci_hcd: disconnect device [ 611.153380][ T64] vhci_hcd: stop threads [ 611.156347][ T64] vhci_hcd: release socket [ 611.158107][ T64] vhci_hcd: disconnect device [ 611.165439][T14880] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.168353][T14880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.196968][T16680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 611.239120][T16850] virtio-fs: tag <(null)> not found [ 611.248338][T16850] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 611.251128][T16850] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 611.256998][T16850] vhci_hcd vhci_hcd.0: Device attached [ 611.274555][T16851] vhci_hcd: connection closed [ 611.274805][ T1130] vhci_hcd: stop threads [ 611.278714][ T1130] vhci_hcd: release socket [ 611.280555][ T1130] vhci_hcd: disconnect device [ 611.366434][T16680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.410489][T16680] veth0_vlan: entered promiscuous mode [ 611.421607][T16680] veth1_vlan: entered promiscuous mode [ 611.449056][T16680] veth0_macvtap: entered promiscuous mode [ 611.454865][T16680] veth1_macvtap: entered promiscuous mode [ 611.470981][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.476066][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.480239][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.484896][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.489174][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.493633][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.498021][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.502537][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.508065][T16680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.517521][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.521968][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.526740][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.531107][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.535357][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.539330][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.543071][T16680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.547342][T16680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.552968][T16680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.561203][T16680] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.565240][T16680] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.569151][T16680] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.573085][T16680] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.620861][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.624402][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.646013][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.649067][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.774396][T16858] FAULT_INJECTION: forcing a failure. [ 611.774396][T16858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.779681][T16858] CPU: 0 PID: 16858 Comm: syz.0.3011 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 611.783469][T16858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 611.787624][T16858] Call Trace: [ 611.788955][T16858] [ 611.790120][T16858] dump_stack_lvl+0x16c/0x1f0 [ 611.792045][T16858] should_fail_ex+0x497/0x5b0 [ 611.793900][T16858] _copy_from_iter+0x27a/0xfb0 [ 611.795795][T16858] ? __alloc_skb+0x200/0x380 [ 611.797628][T16858] ? __pfx__copy_from_iter+0x10/0x10 [ 611.799691][T16858] ? __virt_addr_valid+0x5e/0x590 [ 611.801653][T16858] ? __phys_addr_symbol+0x30/0x80 [ 611.803625][T16858] ? __check_object_size+0x48e/0x720 [ 611.805899][T16858] netlink_sendmsg+0x813/0xd70 [ 611.807804][T16858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.809891][T16858] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 611.811969][T16858] ____sys_sendmsg+0x9b4/0xb50 [ 611.813844][T16858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.816009][T16858] ? get_compat_msghdr+0x11b/0x170 [ 611.818014][T16858] ? __pfx___lock_acquire+0x10/0x10 [ 611.820071][T16858] ___sys_sendmsg+0x135/0x1e0 [ 611.821906][T16858] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.823945][T16858] ? ksys_write+0x21c/0x260 [ 611.825745][T16858] ? __fget_light+0x173/0x210 [ 611.827594][T16858] __sys_sendmsg+0x117/0x1f0 [ 611.829403][T16858] ? __pfx___sys_sendmsg+0x10/0x10 [ 611.831420][T16858] __do_fast_syscall_32+0x73/0x120 [ 611.833406][T16858] do_fast_syscall_32+0x32/0x80 [ 611.835311][T16858] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 611.837768][T16858] RIP: 0023:0xf7f26579 [ 611.839373][T16858] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 611.846795][T16858] RSP: 002b:00000000f5cd656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 611.850039][T16858] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 611.853087][T16858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 611.856128][T16858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 611.859164][T16858] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 611.862132][T16858] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 611.865020][T16858] [ 611.866386][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.965962][T16871] MTD: Couldn't look up '/dev/sg0': -15 [ 612.021521][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'. [ 612.029723][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'. [ 612.033158][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'. [ 612.037339][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'. [ 612.041211][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'. [ 612.045799][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'. [ 612.049803][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'. [ 612.053707][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'. [ 612.056977][T16876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3018'. [ 612.057755][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'. [ 612.104352][T12772] Bluetooth: hci4: command 0x0406 tx timeout [ 612.117564][T16877] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 612.120320][T16877] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 612.123858][T16877] vhci_hcd vhci_hcd.0: Device attached [ 612.133229][T16878] vhci_hcd: connection closed [ 612.133542][ T1086] vhci_hcd: stop threads [ 612.139722][ T1086] vhci_hcd: release socket [ 612.141740][ T1086] vhci_hcd: disconnect device [ 612.370233][T16885] FAULT_INJECTION: forcing a failure. [ 612.370233][T16885] name failslab, interval 1, probability 0, space 0, times 0 [ 612.376066][T16885] CPU: 0 PID: 16885 Comm: syz.0.3020 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 612.380322][T16885] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 612.384128][T16885] Call Trace: [ 612.385334][T16885] [ 612.386430][T16885] dump_stack_lvl+0x16c/0x1f0 [ 612.388130][T16885] should_fail_ex+0x497/0x5b0 [ 612.390100][T16885] should_failslab+0x9/0x20 [ 612.391942][T16885] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 612.394223][T16885] ? getname_kernel+0x52/0x370 [ 612.396326][T16885] getname_kernel+0x52/0x370 [ 612.398400][T16885] kern_path+0x1d/0x50 [ 612.400184][T16885] lookup_bdev+0xd9/0x280 [ 612.402023][T16885] ? __pfx_lookup_bdev+0x10/0x10 [ 612.404163][T16885] get_tree_bdev+0xbd/0x610 [ 612.406091][T16885] ? __pfx_ext4_fill_super+0x10/0x10 [ 612.408375][T16885] ? __pfx_get_tree_bdev+0x10/0x10 [ 612.410368][T16885] ? bpf_lsm_capable+0x9/0x10 [ 612.411966][T16885] ? security_capable+0x98/0xd0 [ 612.413988][T16885] vfs_get_tree+0x8f/0x380 [ 612.416030][T16885] path_mount+0x6e1/0x1f10 [ 612.417966][T16885] ? __pfx_path_mount+0x10/0x10 [ 612.420069][T16885] ? putname+0x12e/0x170 [ 612.421836][T16885] ? putname+0x12e/0x170 [ 612.423476][T16885] __ia32_sys_mount+0x292/0x310 [ 612.425480][T16885] ? __pfx___ia32_sys_mount+0x10/0x10 [ 612.427522][T16885] __do_fast_syscall_32+0x73/0x120 [ 612.429153][T16885] do_fast_syscall_32+0x32/0x80 [ 612.430838][T16885] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 612.433256][T16885] RIP: 0023:0xf7f26579 [ 612.434741][T16885] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 612.441880][T16885] RSP: 002b:00000000f5cb556c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 612.444749][T16885] RAX: ffffffffffffffda RBX: 00000000200000c0 RCX: 0000000020000080 [ 612.448436][T16885] RDX: 0000000020000200 RSI: 0000000000000003 RDI: 0000000000000000 [ 612.451801][T16885] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 612.454589][T16885] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 612.457241][T16885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 612.460266][T16885] [ 612.461669][ C0] vkms_vblank_simulate: vblank timer overrun [ 612.472340][T16885] /dev/sr0: Can't lookup blockdev [ 612.914986][ T39] audit: type=1326 audit(1721575099.848:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 612.923277][ T39] audit: type=1326 audit(1721575099.848:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 612.933296][ T39] audit: type=1326 audit(1721575099.848:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 612.943095][ T39] audit: type=1326 audit(1721575099.848:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 612.952649][ T39] audit: type=1326 audit(1721575099.848:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 612.962585][ T39] audit: type=1326 audit(1721575099.848:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 612.976344][ T39] audit: type=1326 audit(1721575099.848:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 612.991263][ T39] audit: type=1326 audit(1721575099.848:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 613.004236][ T39] audit: type=1326 audit(1721575099.848:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16895 comm="syz.1.3022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 613.294658][ T5229] Bluetooth: hci0: command 0x0406 tx timeout [ 614.024796][T16924] IPv6: NLM_F_REPLACE set, but no existing node found! [ 614.149994][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 614.150010][ T39] audit: type=1326 audit(1721575101.078:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16923 comm="syz.1.3030" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x0 [ 614.309129][T16936] FAULT_INJECTION: forcing a failure. [ 614.309129][T16936] name failslab, interval 1, probability 0, space 0, times 0 [ 614.314741][T16936] CPU: 0 PID: 16936 Comm: syz.0.3033 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 614.318963][T16936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 614.323588][T16936] Call Trace: [ 614.325268][T16936] [ 614.326672][T16936] dump_stack_lvl+0x16c/0x1f0 [ 614.328613][T16936] should_fail_ex+0x497/0x5b0 [ 614.330637][T16936] should_failslab+0x9/0x20 [ 614.332282][T16936] __kmalloc_noprof+0xcb/0x410 [ 614.334214][T16936] ? kasan_quarantine_put+0x10a/0x240 [ 614.336542][T16936] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 614.339552][T16936] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 614.341772][T16936] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 614.344134][T16936] ? ns_capable+0xd7/0x110 [ 614.345671][T16936] genl_rcv_msg+0x565/0x800 [ 614.347329][T16936] ? __pfx_genl_rcv_msg+0x10/0x10 [ 614.349505][T16936] ? __pfx_ovs_vport_cmd_set+0x10/0x10 [ 614.351845][T16936] netlink_rcv_skb+0x165/0x410 [ 614.353718][T16936] ? __pfx_genl_rcv_msg+0x10/0x10 [ 614.355766][T16936] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 614.358031][T16936] ? down_read+0xc9/0x330 [ 614.359592][T16936] ? __pfx_down_read+0x10/0x10 [ 614.361318][T16936] ? netlink_deliver_tap+0x1ae/0xcf0 [ 614.363512][T16936] genl_rcv+0x28/0x40 [ 614.365127][T16936] netlink_unicast+0x544/0x830 [ 614.366639][T16936] ? __pfx_netlink_unicast+0x10/0x10 [ 614.368595][T16936] ? __phys_addr_symbol+0x30/0x80 [ 614.370581][T16936] ? __check_object_size+0x48e/0x720 [ 614.372425][T16936] netlink_sendmsg+0x8b8/0xd70 [ 614.374107][T16936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.376290][T16936] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 614.378416][T16936] ____sys_sendmsg+0x9b4/0xb50 [ 614.380396][T16936] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.382410][T16936] ? get_compat_msghdr+0x11b/0x170 [ 614.384638][T16936] ? __pfx___lock_acquire+0x10/0x10 [ 614.386711][T16936] ___sys_sendmsg+0x135/0x1e0 [ 614.388620][T16936] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.390309][T16936] ? ksys_write+0x21c/0x260 [ 614.392071][T16936] ? __fget_light+0x173/0x210 [ 614.393803][T16936] __sys_sendmsg+0x117/0x1f0 [ 614.395818][T16936] ? __pfx___sys_sendmsg+0x10/0x10 [ 614.398204][T16936] __do_fast_syscall_32+0x73/0x120 [ 614.400418][T16936] do_fast_syscall_32+0x32/0x80 [ 614.402590][T16936] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 614.405416][T16936] RIP: 0023:0xf7f26579 [ 614.407050][T16936] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 614.413641][T16936] RSP: 002b:00000000f5cd656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 614.418950][T16936] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000100 [ 614.421872][T16936] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 614.424938][T16936] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 614.427791][T16936] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 614.431119][T16936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 614.433939][T16936] [ 614.435307][ C0] vkms_vblank_simulate: vblank timer overrun [ 614.971159][ T1086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.029534][ T39] audit: type=1326 audit(1721575101.958:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.1.3036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 615.038747][ T39] audit: type=1326 audit(1721575101.958:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.1.3036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 615.048338][ T39] audit: type=1326 audit(1721575101.968:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.1.3036" exe="/syz-executor" sig=0 arch=40000003 syscall=348 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 615.062453][ T39] audit: type=1326 audit(1721575101.968:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.1.3036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 615.071303][ T39] audit: type=1326 audit(1721575101.968:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16943 comm="syz.1.3036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 615.151597][T12740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 615.157898][T12740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 615.161621][T12740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 615.165148][T12740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 615.168780][T12740] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 615.171730][T12740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 615.451999][T16951] chnl_net:caif_netlink_parms(): no params data found [ 615.665761][T16951] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.668926][T16951] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.671984][T16951] bridge_slave_0: entered allmulticast mode [ 615.676087][T16951] bridge_slave_0: entered promiscuous mode [ 615.680940][T16951] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.684093][T16951] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.687291][T16951] bridge_slave_1: entered allmulticast mode [ 615.691025][T16951] bridge_slave_1: entered promiscuous mode [ 615.752367][T16951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.760641][T16951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.828910][T16951] team0: Port device team_slave_0 added [ 615.837025][T16951] team0: Port device team_slave_1 added [ 615.887874][T16951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.890316][T16951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.900595][T16951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.906641][T16951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.909577][T16951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.920383][T16951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.983671][T16951] hsr_slave_0: entered promiscuous mode [ 615.991685][T16951] hsr_slave_1: entered promiscuous mode [ 615.994333][T16951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.997262][T16951] Cannot create hsr debugfs directory [ 616.214379][T16972] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 616.216769][T16972] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 616.220077][T16972] vhci_hcd vhci_hcd.0: Device attached [ 616.225408][T16973] vhci_hcd: connection closed [ 616.225649][T12815] vhci_hcd: stop threads [ 616.229764][T12815] vhci_hcd: release socket [ 616.231800][T12815] vhci_hcd: disconnect device [ 616.356890][T16977] libceph: resolve '. [ 616.356890][T16977] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 616.356890][T16977] ' (ret=-3): failed [ 616.999137][T16985] IPv6: NLM_F_REPLACE set, but no existing node found! [ 617.142593][ T39] audit: type=1326 audit(1721575104.068:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16984 comm="syz.3.3045" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x0 [ 617.224370][T12740] Bluetooth: hci1: command tx timeout [ 617.426152][ T1086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.513940][ T1086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.518604][T16990] MTD: Couldn't look up '/dev/sg0': -15 [ 617.569114][ T1086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.718132][T16994] dccp_close: ABORT with 32 bytes unread [ 617.731639][T16994] 9pnet_fd: Insufficient options for proto=fd [ 617.747594][ T1086] bridge_slave_1: left allmulticast mode [ 617.750066][ T1086] bridge_slave_1: left promiscuous mode [ 617.752810][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.759494][ T1086] bridge_slave_0: left allmulticast mode [ 617.762030][ T1086] bridge_slave_0: left promiscuous mode [ 617.775404][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.986185][T17007] __nla_validate_parse: 30 callbacks suppressed [ 617.986207][T17007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3052'. [ 618.235417][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.241310][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.249896][ T1086] bond0 (unregistering): Released all slaves [ 618.277227][T17008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3052'. [ 618.290969][T17013] netlink: 'syz.3.3052': attribute type 4 has an invalid length. [ 618.301231][T17010] netlink: 'syz.3.3052': attribute type 4 has an invalid length. [ 618.366826][T17015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3053'. [ 618.387995][T17015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3053'. [ 618.476841][T17018] netlink: 'syz.3.3053': attribute type 4 has an invalid length. [ 618.525871][T17015] netlink: 'syz.3.3053': attribute type 4 has an invalid length. [ 618.721380][ T1086] hsr_slave_0: left promiscuous mode [ 618.723793][T17024] libceph: resolve '. [ 618.723793][T17024] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 618.723793][T17024] ' (ret=-3): failed [ 618.731864][ T1086] hsr_slave_1: left promiscuous mode [ 618.766905][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.770415][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.775797][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.779225][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.883640][ T1086] veth1_macvtap: left promiscuous mode [ 618.886233][ T1086] veth0_macvtap: left promiscuous mode [ 618.889047][ T1086] veth1_vlan: left promiscuous mode [ 618.890946][ T1086] veth0_vlan: left promiscuous mode [ 619.294479][T12740] Bluetooth: hci1: command tx timeout [ 620.342450][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 620.460325][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 620.812096][T17039] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 620.815628][T17040] MTD: Couldn't look up '/dev/sg0': -15 [ 621.301539][T16951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 621.309169][T16951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 621.317614][T16951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 621.323771][T16951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 621.384395][T12740] Bluetooth: hci1: command tx timeout [ 621.386190][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3061'. [ 621.400008][T17042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3061'. [ 621.461634][T16951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.466333][T17047] netlink: 'syz.1.3061': attribute type 4 has an invalid length. [ 621.483773][T17042] netlink: 'syz.1.3061': attribute type 4 has an invalid length. [ 621.496710][T16951] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.512236][ T5540] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.515535][ T5540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.532513][ T5540] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.535654][ T5540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.569596][T16951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 621.614308][ T5261] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 621.705679][T16951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.724236][T14880] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 621.743306][T16951] veth0_vlan: entered promiscuous mode [ 621.752338][T16951] veth1_vlan: entered promiscuous mode [ 621.775517][T16951] veth0_macvtap: entered promiscuous mode [ 621.781421][T16951] veth1_macvtap: entered promiscuous mode [ 621.794893][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.799160][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.803142][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.804963][ T5261] usb 8-1: Using ep0 maxpacket: 32 [ 621.807778][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.813458][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.814647][ T5261] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.817755][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.825679][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.827810][ T5261] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.829871][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.831420][T16951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.839049][ T5261] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 621.847239][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.851036][ T5261] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 621.851587][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.859277][ T5261] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 621.859923][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.867988][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.870321][ T5261] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 621.871929][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.871942][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.882609][T14880] usb 5-1: device descriptor read/64, error -71 [ 621.885729][T16951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 621.887403][ T5261] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.891392][T16951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.892857][T16951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.895221][ T5261] usb 8-1: Product: syz [ 621.901875][T16951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.903868][ T5261] usb 8-1: Manufacturer: syz [ 621.907668][T16951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.910094][ T5261] usb 8-1: SerialNumber: syz [ 621.912922][T16951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.918547][T16951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.023951][T12815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.030825][T12815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.046707][T12815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.050017][T12815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.127986][ T5261] cdc_ncm 8-1:1.0: bind() failure [ 622.133118][ T5261] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 622.136677][ T5261] cdc_ncm 8-1:1.1: bind() failure [ 622.141938][ T5261] usb 8-1: USB disconnect, device number 9 [ 622.148383][T14967] udevd[14967]: setting mode of /dev/bus/usb/008/009 to 020664 failed: No such file or directory [ 622.152773][T14967] udevd[14967]: setting owner of /dev/bus/usb/008/009 to uid=0, gid=0 failed: No such file or directory [ 622.196080][T14880] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 622.355968][T14880] usb 5-1: device descriptor read/64, error -71 [ 622.484878][T14880] usb usb5-port1: attempt power cycle [ 622.502589][T17057] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3064'. [ 622.680739][T17062] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 622.683615][T17062] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 622.690165][T17062] vhci_hcd vhci_hcd.0: Device attached [ 622.696843][T17062] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 622.699426][T17062] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 622.702859][T17062] vhci_hcd vhci_hcd.0: Device attached [ 622.706059][T17065] usbip_core: unknown command [ 622.707701][T17065] vhci_hcd: unknown pdu 0 [ 622.709381][T17065] usbip_core: unknown command [ 622.711476][T12815] vhci_hcd: stop threads [ 622.713211][T12815] vhci_hcd: release socket [ 622.714893][T12815] vhci_hcd: disconnect device [ 622.717676][T17063] vhci_hcd: connection closed [ 622.719252][T12815] vhci_hcd: stop threads [ 622.722852][T12815] vhci_hcd: release socket [ 622.725206][T12815] vhci_hcd: disconnect device [ 622.904304][T14880] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 622.938562][T14880] usb 5-1: device descriptor read/8, error -71 [ 623.204712][T14880] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 623.234905][T14880] usb 5-1: device descriptor read/8, error -71 [ 623.356502][T14880] usb usb5-port1: unable to enumerate USB device [ 624.032542][T17076] sctp: [Deprecated]: syz.3.3069 (pid 17076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 624.032542][T17076] Use struct sctp_sack_info instead [ 624.490622][T17080] MTD: Couldn't look up '/dev/sg0': -15 [ 624.495246][T17082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3071'. [ 624.508965][T17082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3071'. [ 624.562528][T17082] netlink: 'syz.0.3071': attribute type 4 has an invalid length. [ 624.581114][T17082] netlink: 'syz.0.3071': attribute type 4 has an invalid length. [ 624.666418][ T1355] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.669500][ T1355] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.429335][ T1130] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.936612][T17096] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 625.939442][T17096] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 625.942895][T17096] vhci_hcd vhci_hcd.0: Device attached [ 625.952253][T17096] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 625.954853][T17096] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 625.960281][T17096] vhci_hcd vhci_hcd.0: Device attached [ 625.965916][T17099] usbip_core: unknown command [ 625.969871][T17099] vhci_hcd: unknown pdu 0 [ 625.971735][T17099] usbip_core: unknown command [ 625.973939][ T13] vhci_hcd: stop threads [ 625.976492][T17097] vhci_hcd: connection closed [ 625.977373][ T13] vhci_hcd: release socket [ 625.981898][ T13] vhci_hcd: disconnect device [ 625.984815][ T13] vhci_hcd: stop threads [ 625.987001][ T13] vhci_hcd: release socket [ 625.989038][ T13] vhci_hcd: disconnect device [ 626.030356][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 626.035606][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 626.039055][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 626.044740][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 626.048832][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 626.052023][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 626.203043][T17102] chnl_net:caif_netlink_parms(): no params data found [ 626.355678][T17102] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.358934][T17102] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.362121][T17102] bridge_slave_0: entered allmulticast mode [ 626.366097][T17102] bridge_slave_0: entered promiscuous mode [ 626.371152][T17102] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.380086][T17102] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.383475][T17102] bridge_slave_1: entered allmulticast mode [ 626.387577][T17102] bridge_slave_1: entered promiscuous mode [ 626.478626][T17102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.486826][T17102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.547862][T17102] team0: Port device team_slave_0 added [ 626.553804][T17102] team0: Port device team_slave_1 added [ 626.632063][T17102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.643052][T17102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.655480][T17102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.686617][T17102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.689681][T17102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.701531][T17102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.765208][T17122] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3078'. [ 626.837193][T17102] hsr_slave_0: entered promiscuous mode [ 626.840141][T17102] hsr_slave_1: entered promiscuous mode [ 626.842880][T17102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 626.847509][T17102] Cannot create hsr debugfs directory [ 627.022356][T17127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3080'. [ 627.080957][T17127] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3080'. [ 627.156880][T17127] netlink: 'syz.3.3080': attribute type 4 has an invalid length. [ 627.171715][T17127] netlink: 'syz.3.3080': attribute type 4 has an invalid length. [ 627.908537][ T1130] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.071739][ T1130] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.094560][T12740] Bluetooth: hci1: command tx timeout [ 628.188705][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3085'. [ 628.200641][ T1130] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.204811][T17150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.326546][T17155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.358913][ T1130] bridge_slave_1: left allmulticast mode [ 628.361423][ T1130] bridge_slave_1: left promiscuous mode [ 628.363966][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.370202][ T1130] bridge_slave_0: left allmulticast mode [ 628.372328][ T1130] bridge_slave_0: left promiscuous mode [ 628.375452][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.474417][ T9951] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 628.658629][ T9951] usb 6-1: Using ep0 maxpacket: 32 [ 628.674034][ T9951] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 628.692066][ T9951] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 628.696347][ T9951] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 628.700328][ T9951] usb 6-1: Product: syz [ 628.702230][ T9951] usb 6-1: Manufacturer: syz [ 628.704521][ T9951] usb 6-1: SerialNumber: syz [ 628.709581][ T9951] usb 6-1: config 0 descriptor?? [ 628.713760][T17148] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 628.741765][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.749282][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.754647][ T1130] bond0 (unregistering): Released all slaves [ 628.934846][T17148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.941134][T17148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.953808][ T9951] usb 6-1: USB disconnect, device number 19 [ 629.103906][ T1130] hsr_slave_0: left promiscuous mode [ 629.108687][ T1130] hsr_slave_1: left promiscuous mode [ 629.111961][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.115243][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.118480][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.121499][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.175685][ T1130] veth1_macvtap: left promiscuous mode [ 629.178169][ T1130] veth0_macvtap: left promiscuous mode [ 629.180181][ T1130] veth1_vlan: left promiscuous mode [ 629.182000][ T1130] veth0_vlan: left promiscuous mode [ 629.604233][T17161] MTD: Couldn't look up '/dev/sg0': -15 [ 629.698809][T17165] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3092'. [ 630.224265][T12740] Bluetooth: hci1: command tx timeout [ 630.518929][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 630.640947][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 631.623075][T17102] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 631.638866][T17102] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 631.650401][T17102] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 631.661673][T17102] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 631.787102][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3100'. [ 631.808254][T17195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.817551][T17102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.831640][T17102] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.835980][T17198] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3102'. [ 631.840249][T14973] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.843065][T14973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.855154][T14973] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.857721][T14973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.017642][T17202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.183876][T17102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.246460][T17102] veth0_vlan: entered promiscuous mode [ 632.264390][T12740] Bluetooth: hci1: command tx timeout [ 632.267367][T17102] veth1_vlan: entered promiscuous mode [ 632.331579][T17102] veth0_macvtap: entered promiscuous mode [ 632.345456][T17102] veth1_macvtap: entered promiscuous mode [ 632.372844][T17102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.378856][T17102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.383382][T17102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.388031][T17102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.393534][T17102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.399682][T17102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.404550][T17102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.409387][T17102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.421728][T17102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.436250][T17102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.440775][T17102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.445872][T17102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.451306][T17102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.457948][T17102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.463435][T17102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.468092][T17102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.473154][T17102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.480945][T17102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.492614][T17102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.501908][T17102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.506095][T17102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.509942][T17102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.591678][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.603926][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.656423][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.660033][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.054225][ T5292] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 633.259158][ T5292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.263027][ T5292] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.266405][ T5292] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 633.278483][ T5292] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 633.282556][ T5292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.292336][ T5292] usb 5-1: config 0 descriptor?? [ 633.876736][ T5292] usbhid 5-1:0.0: can't add hid device: -71 [ 633.880994][ T5292] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 633.891383][ T5292] usb 5-1: USB disconnect, device number 24 [ 634.092034][T17218] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3107'. [ 634.258761][T17224] netlink: 'syz.1.3109': attribute type 5 has an invalid length. [ 634.587345][T17231] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3111'. [ 634.591872][T17229] syzkaller1: entered promiscuous mode [ 634.594003][T17229] syzkaller1: entered allmulticast mode [ 634.663648][T17233] syzkaller1: entered promiscuous mode [ 634.665979][T17233] syzkaller1: entered allmulticast mode [ 634.727158][T17235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3114'. [ 634.795441][T17237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3115'. [ 634.806917][T17237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3115'. [ 634.882481][T17244] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3115'. [ 634.892203][T17237] netlink: 'syz.0.3115': attribute type 4 has an invalid length. [ 634.918478][T17237] netlink: 'syz.0.3115': attribute type 4 has an invalid length. [ 635.515303][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3123'. [ 635.541221][T17262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3123'. [ 635.643845][ T1130] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.658707][T17262] netlink: 'syz.0.3123': attribute type 4 has an invalid length. [ 635.701843][T17262] netlink: 'syz.0.3123': attribute type 4 has an invalid length. [ 636.288909][T17270] syzkaller1: entered promiscuous mode [ 636.291429][T17270] syzkaller1: entered allmulticast mode [ 636.405690][T12772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 636.413912][T12772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 636.419490][T12772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 636.429483][T12772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 636.433952][T12772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 636.439492][T12772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 636.439508][T17278] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 636.445008][T17278] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 636.496946][T17278] vhci_hcd vhci_hcd.0: Device attached [ 636.499316][T17282] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 636.501710][T17282] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 636.510814][T17282] vhci_hcd vhci_hcd.0: Device attached [ 636.520372][T17283] usbip_core: unknown command [ 636.522580][T17283] vhci_hcd: unknown pdu 0 [ 636.524822][T17283] usbip_core: unknown command [ 636.527315][ T78] vhci_hcd: stop threads [ 636.528787][ T78] vhci_hcd: release socket [ 636.530362][ T78] vhci_hcd: disconnect device [ 636.547387][T17280] vhci_hcd: connection closed [ 636.547927][ T78] vhci_hcd: stop threads [ 636.551793][ T78] vhci_hcd: release socket [ 636.553839][ T78] vhci_hcd: disconnect device [ 636.586867][T17275] chnl_net:caif_netlink_parms(): no params data found [ 636.679918][T17275] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.686001][T17275] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.692709][T17275] bridge_slave_0: entered allmulticast mode [ 636.698103][T17275] bridge_slave_0: entered promiscuous mode [ 636.702981][T17275] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.710187][T17275] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.713251][T17275] bridge_slave_1: entered allmulticast mode [ 636.717150][T17275] bridge_slave_1: entered promiscuous mode [ 636.772415][T17275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.779655][T17275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.837779][T17275] team0: Port device team_slave_0 added [ 636.843003][T17275] team0: Port device team_slave_1 added [ 636.889149][T17275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.891614][T17275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.908520][T17275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.916310][T17275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.920144][T17275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.933969][T17275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.984321][T12772] Bluetooth: hci0: command 0x0406 tx timeout [ 637.007087][T17275] hsr_slave_0: entered promiscuous mode [ 637.010459][T17275] hsr_slave_1: entered promiscuous mode [ 637.013588][T17275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.018425][T17292] FAULT_INJECTION: forcing a failure. [ 637.018425][T17292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.019025][T17275] Cannot create hsr debugfs directory [ 637.023203][T17292] CPU: 3 PID: 17292 Comm: syz.1.3128 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 637.023247][T17292] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 637.033314][T17292] Call Trace: [ 637.034650][T17292] [ 637.035914][T17292] dump_stack_lvl+0x16c/0x1f0 [ 637.037582][T17292] should_fail_ex+0x497/0x5b0 [ 637.039211][T17292] kvm_write_guest_offset_cached+0x1e5/0x4d0 [ 637.041270][T17292] kvm_lapic_sync_to_vapic+0x484/0x6c0 [ 637.043331][T17292] ? kvm_apic_accept_pic_intr+0xe8/0x1a0 [ 637.045833][T17292] ? __pfx_kvm_lapic_sync_to_vapic+0x10/0x10 [ 637.048533][T17292] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 637.051163][T17292] ? kvm_check_and_inject_events+0x646/0x1000 [ 637.053881][T17292] ? vmx_update_cr8_intercept+0xb9/0x240 [ 637.056410][T17292] vcpu_run+0xece/0x4cf0 [ 637.058301][T17292] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 637.060634][T17292] ? __pfx_vcpu_run+0x10/0x10 [ 637.062687][T17292] ? __pfx_lock_acquire+0x10/0x10 [ 637.064894][T17292] ? mark_held_locks+0x10/0xe0 [ 637.067031][T17292] ? fpu_swap_kvm_fpstate+0x1c8/0x420 [ 637.069055][T17292] ? __local_bh_enable_ip+0xa4/0x120 [ 637.071100][T17292] ? lockdep_hardirqs_on+0x7c/0x110 [ 637.073389][T17292] ? fpu_swap_kvm_fpstate+0x1c8/0x420 [ 637.075778][T17292] ? __local_bh_enable_ip+0xa4/0x120 [ 637.078141][T17292] ? kvm_arch_vcpu_ioctl_run+0x447/0x1730 [ 637.080644][T17292] kvm_arch_vcpu_ioctl_run+0x447/0x1730 [ 637.083090][T17292] kvm_vcpu_ioctl+0x6cd/0x1520 [ 637.085166][T17292] ? tomoyo_path_number_perm+0x467/0x5b0 [ 637.087606][T17292] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 637.089885][T17292] ? tomoyo_path_number_perm+0x190/0x5b0 [ 637.092317][T17292] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 637.094961][T17292] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 637.097580][T17292] ? do_vfs_ioctl+0x515/0x1a90 [ 637.099723][T17292] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 637.101972][T17292] ? __pfx_lock_release+0x10/0x10 [ 637.104242][T17292] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 637.106889][T17292] kvm_vcpu_compat_ioctl+0x216/0x3f0 [ 637.109253][T17292] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 637.111838][T17292] ? __fget_files+0x256/0x400 [ 637.113941][T17292] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 637.116214][T17292] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 637.118538][T17292] __do_compat_sys_ioctl+0x2c3/0x330 [ 637.120652][T17292] __do_fast_syscall_32+0x73/0x120 [ 637.122695][T17292] do_fast_syscall_32+0x32/0x80 [ 637.124484][T17292] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 637.126628][T17292] RIP: 0023:0xf7fb4579 [ 637.128289][T17292] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 637.136329][T17292] RSP: 002b:00000000f5d6656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 637.139820][T17292] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80 [ 637.143037][T17292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 637.146380][T17292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 637.149118][T17292] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 637.151786][T17292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 637.154789][T17292] [ 637.321464][T17297] IPv6: Can't replace route, no match found [ 637.329937][ T39] audit: type=1326 audit(1721575124.258:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17296 comm="syz.1.3130" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x0 [ 638.382723][T17316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3136'. [ 638.395918][T17316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3136'. [ 638.458673][T17316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3136'. [ 638.464767][T17316] netlink: 'syz.1.3136': attribute type 4 has an invalid length. [ 638.483245][T17316] netlink: 'syz.1.3136': attribute type 4 has an invalid length. [ 638.494291][ T5229] Bluetooth: hci1: command tx timeout [ 638.543625][ T1130] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.584678][T17321] FAULT_INJECTION: forcing a failure. [ 638.584678][T17321] name failslab, interval 1, probability 0, space 0, times 0 [ 638.590248][T17321] CPU: 3 PID: 17321 Comm: syz.1.3137 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 638.594376][T17321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 638.598462][T17321] Call Trace: [ 638.599730][T17321] [ 638.600826][T17321] dump_stack_lvl+0x16c/0x1f0 [ 638.602614][T17321] should_fail_ex+0x497/0x5b0 [ 638.604335][T17321] ? __pfx_lock_acquire+0x10/0x10 [ 638.606160][T17321] should_failslab+0x9/0x20 [ 638.607787][T17321] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 638.610088][T17321] ? skb_clone+0x190/0x3f0 [ 638.612062][T17321] skb_clone+0x190/0x3f0 [ 638.613835][T17321] dev_queue_xmit_nit+0x38f/0xba0 [ 638.615851][T17321] dev_hard_start_xmit+0x56/0x790 [ 638.617849][T17321] ? kasan_save_track+0x14/0x30 [ 638.620008][T17321] __dev_queue_xmit+0x7c7/0x4300 [ 638.622061][T17321] ? __pfx___dev_queue_xmit+0x10/0x10 [ 638.624144][T17321] ? rcu_is_watching+0x12/0xc0 [ 638.625848][T17321] ? __copy_skb_header+0x2e8/0x5b0 [ 638.627848][T17321] ? __skb_clone+0x570/0x760 [ 638.629854][T17321] netlink_deliver_tap+0xa8a/0xcf0 [ 638.632094][T17321] netlink_unicast+0x606/0x830 [ 638.633876][T17321] ? __pfx_netlink_unicast+0x10/0x10 [ 638.635831][T17321] ? __phys_addr_symbol+0x30/0x80 [ 638.637748][T17321] ? __check_object_size+0x48e/0x720 [ 638.639673][T17321] netlink_sendmsg+0x8b8/0xd70 [ 638.641573][T17321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.643583][T17321] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 638.645679][T17321] ____sys_sendmsg+0x9b4/0xb50 [ 638.647754][T17321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 638.649710][T17321] ? get_compat_msghdr+0x11b/0x170 [ 638.651685][T17321] ? __pfx___lock_acquire+0x10/0x10 [ 638.653641][T17321] ___sys_sendmsg+0x135/0x1e0 [ 638.655602][T17321] ? __pfx____sys_sendmsg+0x10/0x10 [ 638.657159][T17321] ? ksys_write+0x21c/0x260 [ 638.659094][T17321] ? __fget_light+0x173/0x210 [ 638.661193][T17321] __sys_sendmsg+0x117/0x1f0 [ 638.663276][T17321] ? __pfx___sys_sendmsg+0x10/0x10 [ 638.665556][T17321] __do_fast_syscall_32+0x73/0x120 [ 638.667845][T17321] do_fast_syscall_32+0x32/0x80 [ 638.670007][T17321] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 638.672796][T17321] RIP: 0023:0xf7fb4579 [ 638.674621][T17321] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 638.682961][T17321] RSP: 002b:00000000f5d6656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 638.686629][T17321] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000fc0 [ 638.690137][T17321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 638.693142][T17321] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 638.695950][T17321] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 638.699254][T17321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 638.702601][T17321] [ 638.742731][ T1130] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.792879][T17326] devtmpfs: Bad value for 'mpol' [ 638.852863][ T1130] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.912330][T17332] syzkaller1: entered promiscuous mode [ 638.914858][T17332] syzkaller1: entered allmulticast mode [ 639.044279][ T1130] bridge_slave_1: left allmulticast mode [ 639.047654][ T1130] bridge_slave_1: left promiscuous mode [ 639.052816][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.054208][T17337] MTD: Couldn't look up '/dev/sg0': -15 [ 639.075073][ T1130] bridge_slave_0: left allmulticast mode [ 639.077972][ T1130] bridge_slave_0: left promiscuous mode [ 639.082110][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.203829][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3145'. [ 639.498118][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.504779][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.511103][ T1130] bond0 (unregistering): Released all slaves [ 639.552470][T17344] netlink: 'syz.0.3145': attribute type 4 has an invalid length. [ 639.568489][T17347] netlink: 'syz.0.3145': attribute type 4 has an invalid length. [ 639.684805][T17350] libceph: resolve '. [ 639.684805][T17350] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 639.684805][T17350] ' (ret=-3): failed [ 639.766538][T17352] netlink: 'syz.3.3147': attribute type 13 has an invalid length. [ 639.770013][T17352] macvtap0: entered allmulticast mode [ 639.772274][T17352] veth0_macvtap: entered allmulticast mode [ 639.775893][T17352] macvtap0: refused to change device tx_queue_len [ 639.959899][ T1130] hsr_slave_0: left promiscuous mode [ 639.963737][ T1130] hsr_slave_1: left promiscuous mode [ 639.976539][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.981933][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.989381][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.992066][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.048370][ T1130] veth1_macvtap: left promiscuous mode [ 640.050411][ T1130] veth0_macvtap: left promiscuous mode [ 640.052678][ T1130] veth1_vlan: left promiscuous mode [ 640.055441][ T1130] veth0_vlan: left promiscuous mode [ 640.584306][ T5229] Bluetooth: hci1: command tx timeout [ 641.062472][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 641.181526][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 641.190880][T17375] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 641.193808][T17375] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 641.198189][T17375] vhci_hcd vhci_hcd.0: Device attached [ 641.206515][T17375] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 641.209953][T17375] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 641.215005][T17375] vhci_hcd vhci_hcd.0: Device attached [ 641.217635][T17378] usbip_core: unknown command [ 641.219355][T17378] vhci_hcd: unknown pdu 0 [ 641.221127][T17378] usbip_core: unknown command [ 641.223604][ T13] vhci_hcd: stop threads [ 641.229214][ T13] vhci_hcd: release socket [ 641.230915][ T13] vhci_hcd: disconnect device [ 641.233448][T17376] vhci_hcd: connection closed [ 641.233640][ T13] vhci_hcd: stop threads [ 641.237229][ T13] vhci_hcd: release socket [ 641.238932][ T13] vhci_hcd: disconnect device [ 641.332229][T17382] libceph: resolve '. [ 641.332229][T17382] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 641.332229][T17382] ' (ret=-3): failed [ 641.997885][T17275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 642.011687][T17275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 642.037582][T17275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 642.058255][T17275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 642.085405][T17390] __nla_validate_parse: 1 callbacks suppressed [ 642.085419][T17390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3157'. [ 642.104455][T17390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3157'. [ 642.170327][T17393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3157'. [ 642.194529][T17390] netlink: 'syz.1.3157': attribute type 4 has an invalid length. [ 642.218386][T17275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.242808][T17275] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.250519][T17390] netlink: 'syz.1.3157': attribute type 4 has an invalid length. [ 642.269690][ T5260] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.272144][ T5260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.285530][ T5260] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.287969][ T5260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.429839][T17398] MTD: Couldn't look up '/dev/sg0': -15 [ 642.548439][T17275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.603856][T17275] veth0_vlan: entered promiscuous mode [ 642.625664][T17275] veth1_vlan: entered promiscuous mode [ 642.653207][T17275] veth0_macvtap: entered promiscuous mode [ 642.654245][ T5229] Bluetooth: hci1: command tx timeout [ 642.661275][T17275] veth1_macvtap: entered promiscuous mode [ 642.695941][T17275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.700791][T17275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.715459][T17275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.719635][T17275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.723814][T17275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.728568][T17275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.733315][T17275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.738602][T17275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.751038][T17275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.771976][T17275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.784249][T17275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.788388][T17275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.792783][T17275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.797968][T17275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.802301][T17275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.806439][T17275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.810751][T17275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.818673][T17275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.837558][T17275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.840648][T17275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.843633][T17275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.848673][T17275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.891303][T17408] libceph: resolve '. [ 642.891303][T17408] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 642.891303][T17408] ' (ret=-3): failed [ 642.973739][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.977086][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.051479][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.056753][T17412] libceph: resolve '. [ 643.056753][T17412] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 643.056753][T17412] ' (ret=-3): failed [ 643.064009][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.148824][T17416] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 644.151082][T17416] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 644.154357][T17416] vhci_hcd vhci_hcd.0: Device attached [ 644.158967][T17416] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 644.161180][T17416] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 644.165251][T17416] vhci_hcd vhci_hcd.0: Device attached [ 644.175903][T17420] usbip_core: unknown command [ 644.177570][T17420] vhci_hcd: unknown pdu 0 [ 644.179225][T17420] usbip_core: unknown command [ 644.181691][ T11] vhci_hcd: stop threads [ 644.183507][ T11] vhci_hcd: release socket [ 644.194158][ T11] vhci_hcd: disconnect device [ 644.203269][T17417] vhci_hcd: connection closed [ 644.203746][ T11] vhci_hcd: stop threads [ 644.209230][ T11] vhci_hcd: release socket [ 644.210771][ T11] vhci_hcd: disconnect device [ 644.243526][T17426] syzkaller1: entered promiscuous mode [ 644.245881][T17426] syzkaller1: entered allmulticast mode [ 644.336050][T17428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3167'. [ 644.353146][T17428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3167'. [ 644.417847][T17431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3167'. [ 644.424036][T17428] netlink: 'syz.1.3167': attribute type 4 has an invalid length. [ 644.445795][T17428] netlink: 'syz.1.3167': attribute type 4 has an invalid length. [ 644.570689][T17434] libceph: resolve '. [ 644.570689][T17434] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 644.570689][T17434] ' (ret=-3): failed [ 644.629241][T17434] Restarting kernel threads ... done. [ 644.969561][T17443] fuse: Unknown parameter 'gup_id' [ 645.050354][T17447] libceph: resolve '. [ 645.050354][T17447] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 645.050354][T17447] ' (ret=-3): failed [ 645.956213][T17458] libceph: resolve '. [ 645.956213][T17458] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 645.956213][T17458] ' (ret=-3): failed [ 646.162618][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.743707][T17462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 646.766174][T17462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3176'. [ 646.830882][T17472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3176'. [ 646.838881][ T39] audit: type=1326 audit(1721575133.768:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17463 comm="syz.3.3177" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x0 [ 646.841229][T17462] netlink: 'syz.1.3176': attribute type 4 has an invalid length. [ 646.877013][T12772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 646.877545][T17462] netlink: 'syz.1.3176': attribute type 4 has an invalid length. [ 646.881372][T12772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 646.886879][T17469] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3178'. [ 646.888473][T12772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 646.897500][T12772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 646.900987][T12772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 646.903662][T12772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 647.018334][T17483] 9pnet_fd: Insufficient options for proto=fd [ 647.096595][T17475] chnl_net:caif_netlink_parms(): no params data found [ 647.223891][T17475] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.228661][T17475] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.232307][T17475] bridge_slave_0: entered allmulticast mode [ 647.241459][T17475] bridge_slave_0: entered promiscuous mode [ 647.251531][T17475] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.256226][T17475] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.259408][T17475] bridge_slave_1: entered allmulticast mode [ 647.263767][T17475] bridge_slave_1: entered promiscuous mode [ 647.330422][T17475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.339254][T17475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.404834][T17475] team0: Port device team_slave_0 added [ 647.410468][T17475] team0: Port device team_slave_1 added [ 647.463521][T17475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.469154][T17475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.481263][T17475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.487721][T17475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.490784][T17475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.501475][T17475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.562501][T17475] hsr_slave_0: entered promiscuous mode [ 647.566038][T17475] hsr_slave_1: entered promiscuous mode [ 647.569049][T17475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.571858][T17475] Cannot create hsr debugfs directory [ 647.724030][T17505] libceph: resolve '. [ 647.724030][T17505] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 647.724030][T17505] ' (ret=-3): failed [ 647.899651][T17508] __nla_validate_parse: 2 callbacks suppressed [ 647.899666][T17508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3186'. [ 647.918215][T17508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3186'. [ 647.997738][T17511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3186'. [ 648.008708][T17508] netlink: 'syz.0.3186': attribute type 4 has an invalid length. [ 648.036347][T17508] netlink: 'syz.0.3186': attribute type 4 has an invalid length. [ 648.200589][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3188'. [ 648.223126][T17515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3188'. [ 648.292413][T17518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3188'. [ 648.303257][T17515] netlink: 'syz.0.3188': attribute type 4 has an invalid length. [ 648.347913][T17515] netlink: 'syz.0.3188': attribute type 4 has an invalid length. [ 648.688916][T17525] Invalid ELF section header size [ 648.694739][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3190'. [ 648.880120][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.984589][ T5229] Bluetooth: hci1: command tx timeout [ 649.003416][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.100676][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.158504][ T39] audit: type=1326 audit(1721575136.088:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17535 comm="syz.1.3193" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x0 [ 649.292811][ T11] bridge_slave_1: left allmulticast mode [ 649.295259][ T11] bridge_slave_1: left promiscuous mode [ 649.297610][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.308044][ T11] bridge_slave_0: left allmulticast mode [ 649.310034][ T11] bridge_slave_0: left promiscuous mode [ 649.313705][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.552908][ T39] audit: type=1326 audit(1721575136.478:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17540 comm="syz.3.3194" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x0 [ 649.703169][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.718691][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.724437][ T11] bond0 (unregistering): Released all slaves [ 649.941440][T17554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3197'. [ 649.950046][T17555] libceph: resolve '. [ 649.950046][T17555] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 649.950046][T17555] ' (ret=-3): failed [ 649.975075][T17554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3197'. [ 650.048794][T17554] netlink: 'syz.0.3197': attribute type 4 has an invalid length. [ 650.079444][T17554] netlink: 'syz.0.3197': attribute type 4 has an invalid length. [ 650.105445][ T11] hsr_slave_0: left promiscuous mode [ 650.109450][ T11] hsr_slave_1: left promiscuous mode [ 650.112711][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.115370][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.118415][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.120922][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.160277][ T11] veth1_macvtap: left promiscuous mode [ 650.162673][ T11] veth0_macvtap: left promiscuous mode [ 650.165218][ T11] veth1_vlan: left promiscuous mode [ 650.167050][ T11] veth0_vlan: left promiscuous mode [ 650.824765][T17575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.883180][T17575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.889270][T17575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.058381][ T5229] Bluetooth: hci1: command tx timeout [ 651.375779][ T11] team0 (unregistering): Port device team_slave_1 removed [ 651.515185][ T11] team0 (unregistering): Port device team_slave_0 removed [ 651.593677][T17577] Invalid ELF section header size [ 651.601664][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3201'. [ 652.243144][T17583] FAULT_INJECTION: forcing a failure. [ 652.243144][T17583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.249703][T17583] CPU: 1 PID: 17583 Comm: syz.3.3203 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 652.253568][T17583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 652.258088][T17583] Call Trace: [ 652.259244][T17583] [ 652.260341][T17583] dump_stack_lvl+0x16c/0x1f0 [ 652.262387][T17583] should_fail_ex+0x497/0x5b0 [ 652.264297][T17475] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 652.264435][T17583] _copy_from_user+0x30/0xf0 [ 652.268907][T17583] get_compat_msghdr+0xa8/0x170 [ 652.270749][T17583] ? __pfx_get_compat_msghdr+0x10/0x10 [ 652.272825][T17583] ? __pfx___lock_acquire+0x10/0x10 [ 652.274999][T17583] ___sys_sendmsg+0x1b0/0x1e0 [ 652.276595][T17583] ? __pfx____sys_sendmsg+0x10/0x10 [ 652.278858][T17583] ? ksys_write+0x21c/0x260 [ 652.280593][T17583] ? __fget_light+0x173/0x210 [ 652.282289][T17583] __sys_sendmsg+0x117/0x1f0 [ 652.284319][T17583] ? __pfx___sys_sendmsg+0x10/0x10 [ 652.286147][T17583] __do_fast_syscall_32+0x73/0x120 [ 652.288228][T17583] do_fast_syscall_32+0x32/0x80 [ 652.290069][T17583] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 652.292531][T17583] RIP: 0023:0xf7fb8579 [ 652.294167][T17583] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 652.301433][T17583] RSP: 002b:00000000f5d6656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 652.305117][T17583] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 652.308201][T17583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 652.311281][T17583] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 652.314667][T17583] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 652.318031][T17583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 652.321410][T17583] [ 652.322795][ C1] vkms_vblank_simulate: vblank timer overrun [ 652.333943][T17584] libceph: resolve '. [ 652.333943][T17584] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 652.333943][T17584] ' (ret=-3): failed [ 652.342344][T17475] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 652.359186][T17475] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 652.371744][T17475] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 652.449687][ T39] audit: type=1326 audit(1721575139.378:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17585 comm="syz.3.3204" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x0 [ 652.455726][T17475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.469893][T17475] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.481699][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.484829][ T4580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.490296][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.492794][ T4580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.528924][T17475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 652.597366][T17598] netlink: 'syz.1.3205': attribute type 4 has an invalid length. [ 652.641163][T17592] netlink: 'syz.1.3205': attribute type 4 has an invalid length. [ 652.674556][T17475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.714419][T17475] veth0_vlan: entered promiscuous mode [ 652.779125][T17475] veth1_vlan: entered promiscuous mode [ 652.807516][T17475] veth0_macvtap: entered promiscuous mode [ 652.813606][T17475] veth1_macvtap: entered promiscuous mode [ 652.832672][T17475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.842164][T17475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.846615][T17475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.850973][T17475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.860249][T17475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.864783][T17475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.868141][T17475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.871696][T17475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.877445][T17475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.882717][T17605] netlink: 'syz.1.3206': attribute type 4 has an invalid length. [ 652.896678][T17475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.900795][T17475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.904739][T17475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.908635][T17475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.912282][T17475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.916919][T17475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.921077][T17475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.926103][T17475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.941984][T17475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.946854][T17602] netlink: 'syz.1.3206': attribute type 4 has an invalid length. [ 652.959299][T17475] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.963234][T17475] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.967364][T17475] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.971210][T17475] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.031286][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.038268][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.062052][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.065903][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.136865][ T5229] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 653.205585][T17614] syzkaller1: entered promiscuous mode [ 653.208484][T17614] syzkaller1: entered allmulticast mode [ 653.250708][T17616] FAULT_INJECTION: forcing a failure. [ 653.250708][T17616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.256045][T17616] CPU: 3 PID: 17616 Comm: syz.3.3210 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 653.260368][T17616] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 653.264244][T17616] Call Trace: [ 653.265472][T17616] [ 653.266576][T17616] dump_stack_lvl+0x16c/0x1f0 [ 653.268328][T17616] should_fail_ex+0x497/0x5b0 [ 653.270008][T17616] _copy_from_user+0x30/0xf0 [ 653.271678][T17616] compat_do_replace+0x281/0x750 [ 653.273517][T17616] ? __pfx_compat_do_replace+0x10/0x10 [ 653.275471][T17616] ? __pfx_aa_get_newest_label+0x10/0x10 [ 653.277455][T17616] ? find_held_lock+0x2d/0x110 [ 653.279757][T17616] ? bpf_lsm_capable+0x9/0x10 [ 653.282069][T17616] ? security_capable+0x98/0xd0 [ 653.284190][T17616] do_ebt_set_ctl+0x4af/0x580 [ 653.286528][T17616] ? __pfx___mutex_lock+0x10/0x10 [ 653.289000][T17616] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 653.291499][T17616] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 653.293410][T17616] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 653.296077][T17616] nf_setsockopt+0x8a/0xf0 [ 653.298097][T17616] ip_setsockopt+0xcb/0xf0 [ 653.300313][T17616] udp_setsockopt+0x7d/0xd0 [ 653.302490][T17616] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 653.305452][T17616] do_sock_setsockopt+0x222/0x480 [ 653.307422][T17616] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 653.309438][T17616] ? __fget_light+0x173/0x210 [ 653.311400][T17616] __sys_setsockopt+0x1a4/0x270 [ 653.313135][T17616] ? __pfx___sys_setsockopt+0x10/0x10 [ 653.315258][T17616] ? fput+0x32/0x390 [ 653.317017][T17616] ? ksys_write+0x1ab/0x260 [ 653.319002][T17616] ? __pfx_ksys_write+0x10/0x10 [ 653.321109][T17616] __ia32_sys_setsockopt+0xbc/0x160 [ 653.323135][T17616] ? lockdep_hardirqs_on+0x7c/0x110 [ 653.324966][T17616] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 653.327257][T17616] __do_fast_syscall_32+0x73/0x120 [ 653.329067][T17616] do_fast_syscall_32+0x32/0x80 [ 653.330878][T17616] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.333073][T17616] RIP: 0023:0xf7fb8579 [ 653.334710][T17616] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 653.342777][T17616] RSP: 002b:00000000f5d6656c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 653.345691][T17616] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 653.348444][T17616] RDX: 0000000000000080 RSI: 00000000200012c0 RDI: 00000000000000e0 [ 653.351200][T17616] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 653.353940][T17616] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 653.356705][T17616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 653.359463][T17616] [ 654.158474][T17630] MTD: Couldn't look up '/dev/sg0': -15 [ 654.817249][T17634] __nla_validate_parse: 5 callbacks suppressed [ 654.817265][T17634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3215'. [ 654.832975][T17634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3215'. [ 654.910486][T17634] netlink: 'syz.0.3215': attribute type 4 has an invalid length. [ 654.938433][T17634] netlink: 'syz.0.3215': attribute type 4 has an invalid length. [ 655.025726][T17639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3216'. [ 655.031988][T17641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3217'. [ 655.045545][T17639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3216'. [ 655.114491][T17639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3216'. [ 655.121116][T17639] netlink: 'syz.0.3216': attribute type 4 has an invalid length. [ 655.162599][T17639] netlink: 'syz.0.3216': attribute type 4 has an invalid length. [ 655.684264][ T8] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 655.880786][ T8] usb 8-1: config index 0 descriptor too short (expected 57, got 36) [ 655.884426][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.889157][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.896181][ T8] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 655.900015][ T8] usb 8-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 655.903252][ T8] usb 8-1: Manufacturer: syz [ 655.909758][ T8] usb 8-1: config 0 descriptor?? [ 656.240960][ T1086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.378629][ T8] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 656.380955][ T8] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 656.386160][ T8] arvo 0003:1E7D:30D4.0006: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 656.964036][T17654] syzkaller1: entered promiscuous mode [ 656.966738][T17654] syzkaller1: entered allmulticast mode [ 657.107611][T12772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 657.115024][T12772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 657.120170][T12772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 657.125699][T12772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 657.132045][T12772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 657.136861][T12772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 657.182464][T17659] libceph: resolve '. [ 657.182464][T17659] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 657.182464][T17659] ' (ret=-3): failed [ 657.383629][T17655] chnl_net:caif_netlink_parms(): no params data found [ 657.590951][T17655] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.597920][T17655] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.600991][T17655] bridge_slave_0: entered allmulticast mode [ 657.605569][T17655] bridge_slave_0: entered promiscuous mode [ 657.611575][T17655] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.615305][T17655] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.618331][T17655] bridge_slave_1: entered allmulticast mode [ 657.622762][T17655] bridge_slave_1: entered promiscuous mode [ 657.740459][T17655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.748497][T17655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.823928][T17655] team0: Port device team_slave_0 added [ 657.830926][T17655] team0: Port device team_slave_1 added [ 657.898647][T17655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.901137][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.910946][T17655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.925029][T17655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.927676][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.938045][T17655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.032635][T17655] hsr_slave_0: entered promiscuous mode [ 658.037661][T17655] hsr_slave_1: entered promiscuous mode [ 658.040936][T17655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 658.044086][T17655] Cannot create hsr debugfs directory [ 658.131359][ T1941] usb 8-1: USB disconnect, device number 10 [ 658.387520][T17669] MTD: Couldn't look up '/dev/sg0': -15 [ 658.639567][ T1086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.716951][ T1086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.781492][ T1086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.812184][ T39] audit: type=1326 audit(1721575145.738:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17670 comm="syz.3.3223" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x0 [ 658.918788][ T1086] bridge_slave_1: left allmulticast mode [ 658.920913][ T1086] bridge_slave_1: left promiscuous mode [ 658.923039][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.930782][ T1086] bridge_slave_0: left allmulticast mode [ 658.933368][ T1086] bridge_slave_0: left promiscuous mode [ 658.936918][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.949321][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3224'. [ 659.228340][T12772] Bluetooth: hci1: command tx timeout [ 659.329041][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.335990][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.342047][ T1086] bond0 (unregistering): Released all slaves [ 659.384293][T17680] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3224'. [ 659.387563][T17688] netlink: 'syz.3.3224': attribute type 4 has an invalid length. [ 659.396650][T17683] netlink: 'syz.3.3224': attribute type 4 has an invalid length. [ 659.464434][T17692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3226'. [ 659.488067][T17692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3226'. [ 659.560733][T17692] netlink: 'syz.3.3226': attribute type 4 has an invalid length. [ 659.607234][T17692] netlink: 'syz.3.3226': attribute type 4 has an invalid length. [ 659.695600][T17696] ufs: You didn't specify the type of your ufs filesystem [ 659.695600][T17696] [ 659.695600][T17696] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 659.695600][T17696] [ 659.695600][T17696] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 659.713130][T17696] syz.3.3227: attempt to access beyond end of device [ 659.713130][T17696] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 659.801173][ T1086] hsr_slave_0: left promiscuous mode [ 659.804030][ T1086] hsr_slave_1: left promiscuous mode [ 659.807213][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.810417][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.813948][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.818326][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.862922][ T1086] veth1_macvtap: left promiscuous mode [ 659.865424][ T1086] veth0_macvtap: left promiscuous mode [ 659.867509][ T1086] veth1_vlan: left promiscuous mode [ 659.869523][ T1086] veth0_vlan: left promiscuous mode [ 659.925920][T17704] MTD: Couldn't look up '/dev/sg0': -15 [ 660.862420][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 661.002068][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 661.295605][T12772] Bluetooth: hci1: command tx timeout [ 661.618326][ T4580] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 661.818588][ T4580] usb 5-1: config index 0 descriptor too short (expected 57, got 36) [ 661.822187][ T4580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.827374][ T4580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.833010][ T4580] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 661.837310][ T4580] usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 661.840899][ T4580] usb 5-1: Manufacturer: syz [ 661.844980][ T4580] usb 5-1: config 0 descriptor?? [ 661.847647][T17655] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 661.856188][T17655] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 661.862785][T17655] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 661.872492][T17655] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 661.958900][T17655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.973056][T17655] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.980867][ T1941] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.983877][ T1941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.994970][ T1941] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.997409][ T1941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.119240][ T39] audit: type=1326 audit(1721575149.048:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17710 comm="syz.3.3232" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb8579 code=0x0 [ 662.164582][T17655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.208016][T17655] veth0_vlan: entered promiscuous mode [ 662.217355][T17655] veth1_vlan: entered promiscuous mode [ 662.268577][T17655] veth0_macvtap: entered promiscuous mode [ 662.274790][T17655] veth1_macvtap: entered promiscuous mode [ 662.288063][T17720] libceph: resolve '. [ 662.288063][T17720] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 662.288063][T17720] ' (ret=-3): failed [ 662.306281][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.307589][ T4580] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 662.310575][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.313191][ T4580] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0 [ 662.317480][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.325665][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.329425][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.331581][ T4580] arvo 0003:1E7D:30D4.0007: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 662.333401][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.341759][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.346799][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.361965][T17655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.375705][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.380420][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.384835][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.389486][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.393814][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.398507][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.402828][T17655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.407523][T17655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.413474][T17655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.421712][T17655] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.426765][T17655] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.430700][T17655] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.434713][T17655] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.518599][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.521674][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.555234][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.558064][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.574361][T12772] Bluetooth: hci2: command 0x0405 tx timeout [ 662.576733][T12772] Bluetooth: hci4: command 0x0406 tx timeout [ 663.380480][T17726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3234'. [ 663.391556][T17726] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3234'. [ 663.450934][T17726] netlink: 'syz.3.3234': attribute type 4 has an invalid length. [ 663.467704][T17726] netlink: 'syz.3.3234': attribute type 4 has an invalid length. [ 663.530636][T17731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3236'. [ 663.565611][T17731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3236'. [ 663.643746][T17734] netlink: 'syz.3.3236': attribute type 4 has an invalid length. [ 663.661734][ T5227] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 663.666424][ T5227] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 663.671245][ T5227] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 663.679083][T17731] netlink: 'syz.3.3236': attribute type 4 has an invalid length. [ 663.680655][ T5227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 663.687091][ T5227] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 663.690507][ T5227] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 663.863730][T17735] chnl_net:caif_netlink_parms(): no params data found [ 663.980583][T17735] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.983370][T17735] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.987646][T17735] bridge_slave_0: entered allmulticast mode [ 663.990813][T17735] bridge_slave_0: entered promiscuous mode [ 663.997238][T17735] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.000209][T17735] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.002701][T17735] bridge_slave_1: entered allmulticast mode [ 664.007791][T17735] bridge_slave_1: entered promiscuous mode [ 664.060469][ T35] usb 5-1: USB disconnect, device number 25 [ 664.082581][T17735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.095570][T17735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.168678][T17735] team0: Port device team_slave_0 added [ 664.177612][T17735] team0: Port device team_slave_1 added [ 664.227929][T17750] syzkaller1: entered promiscuous mode [ 664.230019][T17750] syzkaller1: entered allmulticast mode [ 664.238482][T17735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.240832][T17735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.251408][T17735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.274055][T17735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.278814][T17735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.290592][T17735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.364470][T17735] hsr_slave_0: entered promiscuous mode [ 664.367938][T17735] hsr_slave_1: entered promiscuous mode [ 664.370632][T17735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 664.373999][T17735] Cannot create hsr debugfs directory [ 664.381993][T17753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3240'. [ 664.439742][T17753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3240'. [ 664.510782][T17756] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3240'. [ 664.541649][T17735] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.555157][T17753] netlink: 'syz.0.3240': attribute type 4 has an invalid length. [ 664.583797][T17753] netlink: 'syz.0.3240': attribute type 4 has an invalid length. [ 664.653969][T17735] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.702736][T17760] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 664.705676][T17760] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 664.709357][T17764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3243'. [ 664.709863][T17760] vhci_hcd vhci_hcd.0: Device attached [ 664.716826][T17764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3243'. [ 664.720568][T17760] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 664.723308][T17760] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 664.728496][T17760] vhci_hcd vhci_hcd.0: Device attached [ 664.734438][T17765] usbip_core: unknown command [ 664.736552][T17765] vhci_hcd: unknown pdu 0 [ 664.738510][T17765] usbip_core: unknown command [ 664.744412][T17762] vhci_hcd: connection closed [ 664.749694][ T1086] vhci_hcd: stop threads [ 664.753598][ T1086] vhci_hcd: release socket [ 664.759035][ T1086] vhci_hcd: disconnect device [ 664.764220][ T1086] vhci_hcd: stop threads [ 664.764845][T17735] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.766245][ T1086] vhci_hcd: release socket [ 664.772639][ T1086] vhci_hcd: disconnect device [ 664.777306][T17769] netlink: 'syz.0.3243': attribute type 4 has an invalid length. [ 664.788910][T17764] netlink: 'syz.0.3243': attribute type 4 has an invalid length. [ 664.850337][T17735] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.999670][T17735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 665.007493][T17735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 665.013935][T17735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 665.021221][T17735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 665.087049][T17735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.104292][T17735] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.110937][T14880] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.114084][T14880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.125036][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.127775][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.170484][T17735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 665.278217][T17735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.311126][T17735] veth0_vlan: entered promiscuous mode [ 665.322971][T17735] veth1_vlan: entered promiscuous mode [ 665.345714][T17735] veth0_macvtap: entered promiscuous mode [ 665.351922][T17735] veth1_macvtap: entered promiscuous mode [ 665.366159][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.370150][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.373501][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.378392][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.382239][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.387131][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.391125][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.398735][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.402361][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.406372][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.412196][T17735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.419035][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3245'. [ 665.423122][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.427710][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.431138][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.434959][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.439395][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.443772][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.448533][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.452577][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.456552][T17735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.460494][T17735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.464916][T17735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.472418][T17735] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.476591][T17735] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.480347][T17735] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.484076][T17735] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.538956][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.542250][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.550668][T17781] netlink: 'syz.3.3245': attribute type 4 has an invalid length. [ 665.575431][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.578509][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.591681][T17778] netlink: 'syz.3.3245': attribute type 4 has an invalid length. [ 665.666852][T17784] dvmrp0: entered allmulticast mode [ 665.775055][T17724] Bluetooth: hci1: command tx timeout [ 665.867258][ T1086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.898214][T17796] syzkaller1: entered promiscuous mode [ 665.900574][T17796] syzkaller1: entered allmulticast mode [ 666.847744][T17803] netlink: 'syz.3.3251': attribute type 4 has an invalid length. [ 666.868225][ T5227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 666.872068][T17803] netlink: 'syz.3.3251': attribute type 4 has an invalid length. [ 666.874969][ T5227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 666.879419][ T5227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 666.895472][ T5227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 666.899960][ T5227] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 666.904801][ T5227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 666.949871][T17812] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 666.952590][T17812] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 666.956336][T17812] vhci_hcd vhci_hcd.0: Device attached [ 666.960600][T17812] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 666.963369][T17812] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 666.967223][T17812] vhci_hcd vhci_hcd.0: Device attached [ 666.968030][T17811] syzkaller1: entered promiscuous mode [ 666.971673][T17811] syzkaller1: entered allmulticast mode [ 666.974797][T17815] usbip_core: unknown command [ 666.976926][T17815] vhci_hcd: unknown pdu 0 [ 666.978834][T17815] usbip_core: unknown command [ 666.983575][ T11] vhci_hcd: stop threads [ 666.984062][T17813] vhci_hcd: connection closed [ 666.990590][ T11] vhci_hcd: release socket [ 667.000433][ T11] vhci_hcd: disconnect device [ 667.002340][ T11] vhci_hcd: stop threads [ 667.003970][ T11] vhci_hcd: release socket [ 667.006919][ T11] vhci_hcd: disconnect device [ 667.113368][T17807] chnl_net:caif_netlink_parms(): no params data found [ 667.261624][T17807] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.266080][T17807] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.269328][T17807] bridge_slave_0: entered allmulticast mode [ 667.273012][T17807] bridge_slave_0: entered promiscuous mode [ 667.287755][T17807] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.291002][T17807] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.296696][T17807] bridge_slave_1: entered allmulticast mode [ 667.300043][T17807] bridge_slave_1: entered promiscuous mode [ 667.397639][T17807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.419042][T17807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.532257][T17807] team0: Port device team_slave_0 added [ 667.541591][T17807] team0: Port device team_slave_1 added [ 667.695308][T17807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.701569][T17807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.714373][T17807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.724356][T17807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.727217][T17807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.738170][T17807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.748940][T17829] MTD: Couldn't look up '/dev/sg0': -15 [ 667.864336][ T5227] Bluetooth: hci1: command tx timeout [ 667.911964][T17831] tmpfs: Bad value for 'mpol' [ 667.948826][T17807] hsr_slave_0: entered promiscuous mode [ 667.952321][T17807] hsr_slave_1: entered promiscuous mode [ 667.957236][T17807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 667.960475][T17807] Cannot create hsr debugfs directory [ 668.422105][ T1086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.507734][ T1086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.645477][ T1086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.751535][T17844] __nla_validate_parse: 4 callbacks suppressed [ 668.751550][T17844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3260'. [ 668.782281][T17844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3260'. [ 668.804589][ T1086] bridge_slave_1: left allmulticast mode [ 668.807287][ T1086] bridge_slave_1: left promiscuous mode [ 668.822729][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.832285][ T1086] bridge_slave_0: left allmulticast mode [ 668.844539][ T1086] bridge_slave_0: left promiscuous mode [ 668.847745][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.974480][ T5227] Bluetooth: hci5: command tx timeout [ 669.301943][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.313279][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.320621][ T1086] bond0 (unregistering): Released all slaves [ 669.356338][T17847] netlink: 'syz.3.3260': attribute type 4 has an invalid length. [ 669.368324][T17844] netlink: 'syz.3.3260': attribute type 4 has an invalid length. [ 669.455464][T17857] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 669.458164][T17857] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 669.460994][T17857] vhci_hcd vhci_hcd.0: Device attached [ 669.493828][T17857] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 669.496674][T17857] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 669.512894][T17857] vhci_hcd vhci_hcd.0: Device attached [ 669.518318][T17860] usbip_core: unknown command [ 669.520468][T17860] vhci_hcd: unknown pdu 0 [ 669.522409][T17860] usbip_core: unknown command [ 669.525468][T12815] vhci_hcd: stop threads [ 669.526088][T17858] vhci_hcd: connection closed [ 669.527348][T12815] vhci_hcd: release socket [ 669.531954][T12815] vhci_hcd: disconnect device [ 669.534857][T12815] vhci_hcd: stop threads [ 669.537115][T12815] vhci_hcd: release socket [ 669.539263][T12815] vhci_hcd: disconnect device [ 669.571638][T17862] libceph: resolve '. [ 669.571638][T17862] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 669.571638][T17862] ' (ret=-3): failed [ 669.944333][ T5227] Bluetooth: hci1: command tx timeout [ 670.031872][ T1086] hsr_slave_0: left promiscuous mode [ 670.039581][ T1086] hsr_slave_1: left promiscuous mode [ 670.043403][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.050482][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.054760][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.059218][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.097392][ T1086] veth1_macvtap: left promiscuous mode [ 670.099345][ T1086] veth0_macvtap: left promiscuous mode [ 670.101411][ T1086] veth1_vlan: left promiscuous mode [ 670.104882][ T1086] veth0_vlan: left promiscuous mode [ 671.054317][ T5227] Bluetooth: hci5: command tx timeout [ 671.568604][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 671.716521][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 672.014304][ T5227] Bluetooth: hci1: command tx timeout [ 672.859268][T17807] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 672.915553][T17807] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 672.953723][T17807] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 672.970864][T17807] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 673.108004][T17807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.126366][T17807] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.132845][T14973] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.135619][T14973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.144422][ T5227] Bluetooth: hci5: command tx timeout [ 673.150526][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.153325][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.228316][T17883] syzkaller1: entered promiscuous mode [ 673.239432][T17883] syzkaller1: entered allmulticast mode [ 673.347321][T17807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.383520][T17807] veth0_vlan: entered promiscuous mode [ 673.393431][T17807] veth1_vlan: entered promiscuous mode [ 673.437014][T17807] veth0_macvtap: entered promiscuous mode [ 673.441665][T17807] veth1_macvtap: entered promiscuous mode [ 673.447766][T17889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3270'. [ 673.460761][T17889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3270'. [ 673.467278][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.475297][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.479477][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.484877][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.489202][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.493686][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.497997][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.502548][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.506990][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.511576][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.519398][T17807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.534637][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.555499][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.574643][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.579525][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.583629][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.588313][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.592321][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.592900][T17894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3271'. [ 673.596863][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.604521][T17807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.608564][T17807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.614049][T17807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.617494][T17892] netlink: 'syz.1.3270': attribute type 4 has an invalid length. [ 673.630072][T17889] netlink: 'syz.1.3270': attribute type 4 has an invalid length. [ 673.646732][T17807] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.650129][T17807] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.653902][T17807] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.658471][T17807] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.663954][T17894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3271'. [ 673.690922][T17896] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 673.693524][T17896] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 673.699831][T17896] vhci_hcd vhci_hcd.0: Device attached [ 673.723695][T17896] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 673.726379][T17896] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 673.732630][T17896] vhci_hcd vhci_hcd.0: Device attached [ 673.741590][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.743192][T17894] netlink: 'syz.0.3271': attribute type 4 has an invalid length. [ 673.746129][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.746749][T17900] usbip_core: unknown command [ 673.746760][T17900] vhci_hcd: unknown pdu 0 [ 673.746769][T17900] usbip_core: unknown command [ 673.751794][ T1130] vhci_hcd: stop threads [ 673.759107][ T1130] vhci_hcd: release socket [ 673.760943][ T1130] vhci_hcd: disconnect device [ 673.785889][T17894] netlink: 'syz.0.3271': attribute type 4 has an invalid length. [ 673.787424][T17897] vhci_hcd: connection closed [ 673.790701][ T1130] vhci_hcd: stop threads [ 673.795257][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.799277][ T1130] vhci_hcd: release socket [ 673.801477][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.803963][ T1130] vhci_hcd: disconnect device [ 673.984048][T17908] libceph: resolve '. [ 673.984048][T17908] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 673.984048][T17908] ' (ret=-3): failed [ 674.070082][ T39] audit: type=1326 audit(1721575160.998:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17907 comm="syz.0.3275" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x0 [ 674.855776][T17918] dccp_invalid_packet: P.CsCov 15 exceeds packet length 400 [ 675.255061][T17925] MTD: Couldn't look up '/dev/sg0': -15 [ 675.542766][T17927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3280'. [ 675.553914][T17927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3280'. [ 675.613915][T17927] netlink: 'syz.1.3280': attribute type 4 has an invalid length. [ 675.640464][T17927] netlink: 'syz.1.3280': attribute type 4 has an invalid length. [ 675.943715][T17934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3282'. [ 675.965106][T17934] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3282'. [ 676.037720][T17934] netlink: 'syz.3.3282': attribute type 4 has an invalid length. [ 676.087271][T17934] netlink: 'syz.3.3282': attribute type 4 has an invalid length. [ 676.409429][T17941] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 676.411844][T17941] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 676.421105][T17941] vhci_hcd vhci_hcd.0: Device attached [ 676.428537][T17941] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 676.431156][T17941] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 676.440333][T17941] vhci_hcd vhci_hcd.0: Device attached [ 676.450740][T17944] usbip_core: unknown command [ 676.453117][T17944] vhci_hcd: unknown pdu 0 [ 676.455084][T17944] usbip_core: unknown command [ 676.457099][ T13] vhci_hcd: stop threads [ 676.458870][ T13] vhci_hcd: release socket [ 676.460614][ T13] vhci_hcd: disconnect device [ 676.463342][T17942] vhci_hcd: connection closed [ 676.463571][ T13] vhci_hcd: stop threads [ 676.467405][ T13] vhci_hcd: release socket [ 676.469282][ T13] vhci_hcd: disconnect device [ 676.547527][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.702285][T17724] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 677.709842][T17724] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 677.714058][T17724] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 677.717967][T17724] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 677.721324][T17724] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 677.724711][T17724] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 677.739815][T17952] [ 677.740920][T17952] ====================================================== [ 677.743964][T17952] WARNING: possible circular locking dependency detected [ 677.747047][T17952] 6.10.0-syzkaller-11185-g2c9b3512402e #0 Not tainted [ 677.750952][T17952] ------------------------------------------------------ [ 677.754366][T17952] syz.3.3287/17952 is trying to acquire lock: [ 677.756849][T17952] ffff888056def058 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_shutdown+0x65/0x800 [ 677.760300][T17952] [ 677.760300][T17952] but task is already holding lock: [ 677.763100][T17952] ffff888057051870 (&nsock->tx_lock){+.+.}-{3:3}, at: sock_shutdown+0x16f/0x280 [ 677.766571][T17952] [ 677.766571][T17952] which lock already depends on the new lock. [ 677.766571][T17952] [ 677.770497][T17952] [ 677.770497][T17952] the existing dependency chain (in reverse order) is: [ 677.773881][T17952] [ 677.773881][T17952] -> #6 (&nsock->tx_lock){+.+.}-{3:3}: [ 677.776790][T17952] __mutex_lock+0x175/0x9c0 [ 677.778743][T17952] sock_shutdown+0x16f/0x280 [ 677.780626][T17952] nbd_config_put+0x1e6/0x750 [ 677.782613][T17952] nbd_release+0xb7/0x190 [ 677.784492][T17952] blkdev_put_whole+0xad/0xf0 [ 677.786493][T17952] bdev_release+0x496/0x6f0 [ 677.788355][T17952] blkdev_release+0x15/0x20 [ 677.790041][T17952] __fput+0x408/0xbb0 [ 677.791754][T17952] task_work_run+0x14e/0x250 [ 677.793714][T17952] syscall_exit_to_user_mode+0x27b/0x2a0 [ 677.796063][T17952] __do_fast_syscall_32+0x80/0x120 [ 677.798148][T17952] do_fast_syscall_32+0x32/0x80 [ 677.800206][T17952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 677.802820][T17952] [ 677.802820][T17952] -> #5 (&nbd->config_lock){+.+.}-{3:3}: [ 677.805920][T17952] __mutex_lock+0x175/0x9c0 [ 677.807883][T17952] refcount_dec_and_mutex_lock+0x51/0xe0 [ 677.810346][T17952] nbd_config_put+0x31/0x750 [ 677.812420][T17952] nbd_release+0xb7/0x190 [ 677.814418][T17952] blkdev_put_whole+0xad/0xf0 [ 677.816522][T17952] bdev_release+0x496/0x6f0 [ 677.818652][T17952] blkdev_release+0x15/0x20 [ 677.820830][T17952] __fput+0x408/0xbb0 [ 677.822840][T17952] __fput_sync+0x47/0x50 [ 677.824928][T17952] __x64_sys_close+0x86/0x100 [ 677.827137][T17952] do_syscall_64+0xcd/0x250 [ 677.829260][T17952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.831682][T17952] [ 677.831682][T17952] -> #4 (&disk->open_mutex){+.+.}-{3:3}: [ 677.834617][T17952] __mutex_lock+0x175/0x9c0 [ 677.836655][T17952] bdev_open+0x41a/0xe40 [ 677.838639][T17952] bdev_file_open_by_dev+0x17d/0x210 [ 677.840992][T17952] disk_scan_partitions+0x1ed/0x320 [ 677.843023][T17952] device_add_disk+0xfbb/0x12d0 [ 677.845241][T17952] pmem_attach_disk+0x9ab/0x13c0 [ 677.847530][T17952] nd_pmem_probe+0x1a9/0x1f0 [ 677.849662][T17952] nvdimm_bus_probe+0x169/0x5d0 [ 677.851895][T17952] really_probe+0x23e/0xa90 [ 677.853983][T17952] __driver_probe_device+0x1de/0x440 [ 677.856413][T17952] driver_probe_device+0x4c/0x1b0 [ 677.858656][T17952] __driver_attach+0x283/0x580 [ 677.860837][T17952] bus_for_each_dev+0x13c/0x1d0 [ 677.863040][T17952] bus_add_driver+0x2e9/0x690 [ 677.865135][T17952] driver_register+0x15c/0x4b0 [ 677.867132][T17952] __nd_driver_register+0x103/0x1a0 [ 677.869245][T17952] do_one_initcall+0x128/0x630 [ 677.871209][T17952] kernel_init_freeable+0x660/0xc50 [ 677.873466][T17952] kernel_init+0x1c/0x2b0 [ 677.875442][T17952] ret_from_fork+0x45/0x80 [ 677.877490][T17952] ret_from_fork_asm+0x1a/0x30 [ 677.879635][T17952] [ 677.879635][T17952] -> #3 (&nvdimm_namespace_key){+.+.}-{3:3}: [ 677.883040][T17952] __mutex_lock+0x175/0x9c0 [ 677.885200][T17952] uevent_show+0x188/0x3b0 [ 677.887298][T17952] dev_attr_show+0x53/0xe0 [ 677.889377][T17952] sysfs_kf_seq_show+0x223/0x3e0 [ 677.891581][T17952] seq_read_iter+0x4fa/0x12c0 [ 677.893639][T17952] kernfs_fop_read_iter+0x41a/0x590 [ 677.895977][T17952] vfs_read+0x869/0xbd0 [ 677.897913][T17952] ksys_read+0x12f/0x260 [ 677.899885][T17952] do_syscall_64+0xcd/0x250 SYZFAIL: failed to recv rpc [ 677.901895][T17952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.904815][T17952] fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 677.904815][T17952] -> #2 (kn->active#5){++++}-{0:0}: [ 677.908083][T17952] kernfs_drain+0x48f/0x590 [ 677.910201][T17952] __kernfs_remove+0x281/0x670 [ 677.912370][T17952] kernfs_remove_by_name_ns+0xb2/0x130 [ 677.914760][T17952] device_del+0x381/0x9f0 [ 677.916191][T17952] unregister_netdevice_many_notify+0x103b/0x1e40 [ 677.918257][T17952] unregister_netdevice_queue+0x307/0x3f0 [ 677.920355][T17952] unregister_netdev+0x1c/0x30 [ 677.922545][T17952] slip_close+0x165/0x1c0 [ 677.924304][T17952] tty_ldisc_close+0x111/0x1a0 [ 677.926385][T17952] tty_ldisc_kill+0x8e/0x150 [ 677.928461][T17952] tty_ldisc_release+0x17b/0x2a0 [ 677.930562][T17952] tty_release_struct+0x23/0xe0 [ 677.932815][T17952] tty_release+0xe33/0x1420 [ 677.935135][T17952] __fput+0x408/0xbb0 [ 677.937067][T17952] task_work_run+0x14e/0x250 [ 677.939182][T17952] syscall_exit_to_user_mode+0x27b/0x2a0 [ 677.941704][T17952] __do_fast_syscall_32+0x80/0x120 [ 677.944089][T17952] do_fast_syscall_32+0x32/0x80 [ 677.946267][T17952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 677.948817][T17952] [ 677.948817][T17952] -> #1 (rtnl_mutex){+.+.}-{3:3}: [ 677.951634][T17952] __mutex_lock+0x175/0x9c0 [ 677.953692][T17952] smc_vlan_by_tcpsk+0x251/0x620 [ 677.955992][T17952] __smc_connect+0x466/0x48f0 [ 677.958124][T17952] smc_connect+0x2fc/0x760 [ 677.960170][T17952] __sys_connect_file+0x15f/0x1a0 [ 677.962432][T17952] __sys_connect+0x149/0x170 [ 677.964482][T17952] __ia32_sys_connect+0x71/0xb0 [ 677.966631][T17952] __do_fast_syscall_32+0x73/0x120 [ 677.968703][T17952] do_fast_syscall_32+0x32/0x80 [ 677.970801][T17952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 677.973597][T17952] [ 677.973597][T17952] -> #0 (sk_lock-AF_SMC){+.+.}-{0:0}: [ 677.976721][T17952] __lock_acquire+0x24ed/0x3cb0 [ 677.978943][T17952] lock_acquire+0x1b1/0x560 [ 677.981039][T17952] lock_sock_nested+0x3a/0xf0 [ 677.983035][T17952] smc_shutdown+0x65/0x800 [ 677.984907][T17952] nbd_mark_nsock_dead+0xae/0x5d0 [ 677.987290][T17952] sock_shutdown+0x17c/0x280 [ 677.989001][T17952] nbd_config_put+0x1e6/0x750 [ 677.990967][T17952] nbd_release+0xb7/0x190 [ 677.992791][T17952] blkdev_put_whole+0xad/0xf0 [ 677.994775][T17952] bdev_release+0x496/0x6f0 [ 677.996579][T17952] blkdev_release+0x15/0x20 [ 677.998516][T17952] __fput+0x408/0xbb0 [ 678.000217][T17952] task_work_run+0x14e/0x250 [ 678.002017][T17952] syscall_exit_to_user_mode+0x27b/0x2a0 [ 678.004326][T17952] __do_fast_syscall_32+0x80/0x120 [ 678.006710][T17952] do_fast_syscall_32+0x32/0x80 [ 678.009037][T17952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 678.011965][T17952] [ 678.011965][T17952] other info that might help us debug this: [ 678.011965][T17952] [ 678.016298][T17952] Chain exists of: [ 678.016298][T17952] sk_lock-AF_SMC --> &nbd->config_lock --> &nsock->tx_lock [ 678.016298][T17952] [ 678.021381][T17952] Possible unsafe locking scenario: [ 678.021381][T17952] [ 678.023795][T17952] CPU0 CPU1 [ 678.025921][T17952] ---- ---- [ 678.028176][T17952] lock(&nsock->tx_lock); [ 678.030023][T17952] lock(&nbd->config_lock); [ 678.032988][T17952] lock(&nsock->tx_lock); [ 678.035860][T17952] lock(sk_lock-AF_SMC); [ 678.037656][T17952] [ 678.037656][T17952] *** DEADLOCK *** [ 678.037656][T17952] [ 678.040999][T17952] 3 locks held by syz.3.3287/17952: [ 678.043186][T17952] #0: ffff88801f2fe4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_release+0x166/0x6f0 [ 678.047269][T17952] #1: ffff88801f2f7998 (&nbd->config_lock){+.+.}-{3:3}, at: refcount_dec_and_mutex_lock+0x51/0xe0 [ 678.051740][T17952] #2: ffff888057051870 (&nsock->tx_lock){+.+.}-{3:3}, at: sock_shutdown+0x16f/0x280 [ 678.055791][T17952] [ 678.055791][T17952] stack backtrace: [ 678.057621][T17952] CPU: 0 PID: 17952 Comm: syz.3.3287 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 678.061493][T17952] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 678.065685][T17952] Call Trace: [ 678.067102][T17952] [ 678.068344][T17952] dump_stack_lvl+0x116/0x1f0 [ 678.070328][T17952] check_noncircular+0x31a/0x400 [ 678.072425][T17952] ? __pfx_check_noncircular+0x10/0x10 [ 678.074691][T17952] ? __switch_to+0x749/0x1180 [ 678.076655][T17952] ? lockdep_lock+0x1b8/0x200 [ 678.078636][T17952] ? __pfx_lockdep_lock+0x10/0x10 [ 678.080759][T17952] __lock_acquire+0x24ed/0x3cb0 [ 678.082804][T17952] ? __pfx___lock_acquire+0x10/0x10 [ 678.084970][T17952] lock_acquire+0x1b1/0x560 [ 678.086893][T17952] ? smc_shutdown+0x65/0x800 [ 678.088868][T17952] ? __pfx_lock_acquire+0x10/0x10 [ 678.090967][T17952] ? __mutex_lock+0x2cc/0x9c0 [ 678.092919][T17952] ? sock_shutdown+0x16f/0x280 [ 678.094915][T17952] ? lock_acquire+0x1b1/0x560 [ 678.096852][T17952] lock_sock_nested+0x3a/0xf0 [ 678.098559][T17952] ? smc_shutdown+0x65/0x800 [ 678.100094][T17952] smc_shutdown+0x65/0x800 [ 678.101664][T17952] ? nbd_config_put+0xe3/0x750 [ 678.103678][T17952] nbd_mark_nsock_dead+0xae/0x5d0 [ 678.105607][T17952] sock_shutdown+0x17c/0x280 [ 678.107667][T17952] nbd_config_put+0x1e6/0x750 [ 678.109605][T17952] nbd_release+0xb7/0x190 [ 678.111443][T17952] ? __pfx_nbd_release+0x10/0x10 [ 678.113505][T17952] blkdev_put_whole+0xad/0xf0 [ 678.115424][T17952] bdev_release+0x496/0x6f0 [ 678.117078][T17952] ? evm_file_release+0xd6/0x1d0 [ 678.119152][T17952] ? __pfx_blkdev_release+0x10/0x10 [ 678.121312][T17952] blkdev_release+0x15/0x20 [ 678.122966][T17952] __fput+0x408/0xbb0 [ 678.124400][T17952] task_work_run+0x14e/0x250 [ 678.126342][T17952] ? __pfx_task_work_run+0x10/0x10 [ 678.128507][T17952] ? __pfx___close_range+0x10/0x10 [ 678.130692][T17952] syscall_exit_to_user_mode+0x27b/0x2a0 [ 678.133088][T17952] __do_fast_syscall_32+0x80/0x120 [ 678.135269][T17952] do_fast_syscall_32+0x32/0x80 [ 678.136984][T17952] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 678.139418][T17952] RIP: 0023:0xf7fb8579 [ 678.140709][T17952] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 678.148096][T17952] RSP: 002b:00000000ffe31cac EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 678.151660][T17952] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 678.155002][T17952] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 678.158419][T17952] RBP: 00000000000004e0 R08: 0000000000000000 R09: 0000000000000000 [ 678.161685][T17952] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 678.165008][T17952] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 678.168288][T17952] [ 678.224583][T17952] block nbd3: shutting down sockets [ 679.249793][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.329736][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.408858][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.553064][ T13] bridge_slave_1: left allmulticast mode [ 679.555416][ T13] bridge_slave_1: left promiscuous mode [ 679.557686][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.562368][ T13] bridge_slave_0: left allmulticast mode [ 679.565583][ T13] bridge_slave_0: left promiscuous mode [ 679.568050][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.705080][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.709621][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.713288][ T13] bond0 (unregistering): Released all slaves [ 680.128510][ T13] hsr_slave_0: left promiscuous mode [ 680.131420][ T13] hsr_slave_1: left promiscuous mode [ 680.134995][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.138638][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.142506][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.146035][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.151649][ T13] veth1_macvtap: left promiscuous mode [ 680.155754][ T13] veth0_macvtap: left promiscuous mode [ 680.157970][ T13] veth1_vlan: left promiscuous mode [ 680.160052][ T13] veth0_vlan: left promiscuous mode [ 680.450483][ T13] team0 (unregistering): Port device team_slave_1 removed [ 680.509216][ T13] team0 (unregistering): Port device team_slave_0 removed [ 681.275597][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.400289][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.578975][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.692608][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.827864][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.889888][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.973938][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.099480][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.241570][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.330719][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.557770][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.618730][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.784854][ T13] bridge_slave_1: left allmulticast mode [ 682.787035][ T13] bridge_slave_1: left promiscuous mode [ 682.789322][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.793951][ T13] bridge_slave_0: left allmulticast mode [ 682.796662][ T13] bridge_slave_0: left promiscuous mode [ 682.798910][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.805525][ T13] bridge_slave_1: left allmulticast mode [ 682.807922][ T13] bridge_slave_1: left promiscuous mode [ 682.810322][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.816995][ T13] bridge_slave_0: left allmulticast mode [ 682.819276][ T13] bridge_slave_0: left promiscuous mode [ 682.821645][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.827615][ T13] bridge_slave_1: left allmulticast mode [ 682.829882][ T13] bridge_slave_1: left promiscuous mode [ 682.831930][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.836008][ T13] bridge_slave_0: left allmulticast mode [ 682.838272][ T13] bridge_slave_0: left promiscuous mode [ 682.840606][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.055607][ T13] dvmrp0 (unregistering): left allmulticast mode [ 683.599831][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.605199][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.609460][ T13] bond0 (unregistering): Released all slaves [ 683.621002][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.626391][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.631051][ T13] bond0 (unregistering): Released all slaves [ 683.641868][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.646829][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.651181][ T13] bond0 (unregistering): Released all slaves [ 684.421436][ T13] hsr_slave_0: left promiscuous mode [ 684.425376][ T13] hsr_slave_1: left promiscuous mode [ 684.428033][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.430889][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.434077][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.437042][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.442908][ T13] hsr_slave_0: left promiscuous mode [ 684.445532][ T13] hsr_slave_1: left promiscuous mode [ 684.448225][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.451028][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.454423][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.457222][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.462855][ T13] hsr_slave_0: left promiscuous mode [ 684.465593][ T13] hsr_slave_1: left promiscuous mode [ 684.468198][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.470993][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.477238][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.480050][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.486636][ T13] veth1_macvtap: left promiscuous mode [ 684.488803][ T13] veth0_macvtap: left promiscuous mode [ 684.491006][ T13] veth1_vlan: left promiscuous mode [ 684.493030][ T13] veth0_vlan: left promiscuous mode [ 684.496760][ T13] veth1_macvtap: left promiscuous mode [ 684.498917][ T13] veth0_macvtap: left promiscuous mode [ 684.501131][ T13] veth1_vlan: left promiscuous mode [ 684.503182][ T13] veth0_vlan: left promiscuous mode [ 684.506536][ T13] veth1_macvtap: left promiscuous mode [ 684.508624][ T13] veth0_macvtap: left allmulticast mode [ 684.510733][ T13] veth0_macvtap: left promiscuous mode [ 684.513071][ T13] veth1_vlan: left promiscuous mode [ 684.515569][ T13] veth0_vlan: left promiscuous mode [ 684.893999][ T13] team0 (unregistering): Port device team_slave_1 removed [ 684.990727][ T13] team0 (unregistering): Port device team_slave_0 removed [ 685.368735][ T13] team0 (unregistering): Port device team_slave_1 removed [ 685.414630][ T13] team0 (unregistering): Port device team_slave_0 removed [ 685.850637][ T13] team0 (unregistering): Port device team_slave_1 removed [ 685.896478][ T13] team0 (unregistering): Port device team_slave_0 removed [ 686.099419][ T1355] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.101674][ T1355] ieee802154 phy1 wpan1: encryption failed: -22 VM DIAGNOSIS: 15:19:24 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84f8aec5 RDI=ffffffff94dc1380 RBP=ffffffff94dc1340 RSP=ffffc90003e573b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e30312e36 R12=0000000000000000 R13=0000000000000033 R14=ffffffff84f8ae60 R15=0000000000000000 RIP=ffffffff84f8aeef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c000000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5af1da4 CR3=0000000050edc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff88b57084 RBX=ffffc9000772f4f8 RCX=1ffff92000ee5ea8 RDX=dffffc0000000000 RSI=ffffffff813c7249 RDI=ffffc9000772faf8 RBP=0000000000000001 RSP=ffffc9000772f478 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff9100793a R13=ffffc9000772fb00 R14=ffffffff9100793e R15=0000000000000001 RIP=ffffffff813c8be9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f57fa6c6280 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020513000 CR3=00000000215b4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=000000000000ffdf Opmask03=2040000404420020 Opmask04=00000000ffffffdf Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7bc2dae0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73001605121f0073 431e161e035c1810 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000061 000055fd3cf48600 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000091 0000000000000000 000000003130323a 356963682f356963 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b1646b6ffcd35eb 000055f863205f33 0000000000000251 0000000036386c6c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57fa3f2220 00007f57fa3f2220 0000000000005c01 0030003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffbb33e77ffdfd 332c75fd7ff7ffb7 7b567dfffffffffc 7f6d7fffff6eefff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 382432273f397b27 697a787c69303b7e 69305f474f5b647c 6930382432273f39 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000210 0000000000000030 00164663682f3574 00004e4f53204552 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000210 0000000000000030 000046633c2f3570 00004e4f53204531 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=ffff888015088000 RCX=ffffc9002c0d0000 RDX=0000000000040000 RSI=ffffffff8473a6fc RDI=ffff888015088000 RBP=ffff888015088000 RSP=ffffc900037a7c00 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=dffffc0000000000 R13=ffff888015088410 R14=0000000000000000 R15=ffff8880150882d0 RIP=ffffffff818ae745 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c200000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f77434 CR3=00000000198c8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffffff8175c758 RCX=1ffffffff29671cc RDX=0000000000000000 RSI=ffffffff8175c74e RDI=ffff8880209714c8 RBP=ffff888020970000 RSP=ffffc90003bf7b60 R8 =0000000000000003 R9 =0000000000000000 R10=0000000000000080 R11=0000000000000000 R12=0000000000000017 R13=ffff888028e4c510 R14=0000000000000077 R15=ffff88805621e111 RIP=ffffffff815b4b03 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c300000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f75000 CR3=000000006876e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffff0000 ffffff0000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000