last executing test programs: 8.794324773s ago: executing program 1 (id=231): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket(0x40000000002, 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r2, &(0x7f0000002440)=[{&(0x7f00000000c0)=""/156, 0x9c}], 0x1, 0x74, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000000c0)=0x101, &(0x7f0000000240)=0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x8000002, 0xffffffff}) r4 = socket(0x40000000015, 0x0, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)}, {&(0x7f0000000900)="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", 0x43e}], 0x2}, 0x8050) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_uring_setup(0x5357, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000400)=""/68}], 0x32) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) 8.343973285s ago: executing program 1 (id=238): r0 = socket$kcm(0x10, 0x0, 0x10) r1 = gettid() r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) rt_sigqueueinfo(r1, 0xb, &(0x7f0000002d00)={0x37, 0x0, 0x7}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom0\x00', 0x6, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x62, 0x6, 0x2, 0x219, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0xa}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x7, &(0x7f0000000540)=ANY=[@ANYRES64=r3, @ANYRES16=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r0}, 0x14) close(0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x2f, &(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='afs_flock_ev\x00', r6}, 0x10) r7 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00', 0x6e93ebbbcc0884f2, 0x4, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x7}) mq_timedreceive(r7, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r7, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x3ed7, &(0x7f0000000140)={0x0, 0x989680}) r8 = openat(0xffffffffffffff9c, &(0x7f0000004a00)='./file0\x00', 0x478982, 0x0) recvmmsg(r8, &(0x7f0000005a40), 0x0, 0x2001, &(0x7f0000005b80)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x0, 0xffffffffffffffff}}) mq_notify(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0xa, 0x4}) r10 = openat(r9, &(0x7f000000c380)='./file0\x00', 0x20842, 0x14) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r11, 0x4) 7.423924836s ago: executing program 1 (id=242): socket$nl_generic(0x10, 0x3, 0x10) openat$nvram(0xffffff9c, &(0x7f0000000040), 0x4000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000680)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3a) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f03000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r3, 0x80044dfd, &(0x7f00000003c0)) syz_open_dev$evdev(0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r6) recvmmsg(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb, 0x2e, 0x35, 0x10, 0x413, 0x6026, 0x18aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa6, 0x9b, 0xce}}]}}]}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000080)=0xd, 0x4) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000001480)={'filter\x00', 0x6001, 0x4, 0x3f4, 0xfc, 0x0, 0xfc, 0x314, 0x314, 0x314, 0x4, 0x0, {[{{@uncond, 0xbc, 0xfc}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "de902893064dba27c5e4367824df11d3ccc432eb01397a2c7ad47e49a3fd"}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3f}, @local, 0x0, 0x0, 0x8, 0x1, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x20}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @remote, @private}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @empty, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x440) recvmmsg(r7, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/23, 0x17}}], 0x400000000000078, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE(r8, 0x80084504, &(0x7f0000000140)=""/148) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, &(0x7f00000005c0), 0x4) 7.253212062s ago: executing program 2 (id=244): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x64) write$ppp(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r2 = socket$inet6(0xa, 0x5, 0x0) sched_setscheduler(0x0, 0x5, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902"], 0x0) syz_usb_disconnect(r3) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010ac05440200000000000109022400010000000009040000000300020009210000"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5.183776556s ago: executing program 3 (id=250): r0 = socket(0xa, 0x6, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[0xffffffffffffffff]}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x19, &(0x7f0000000b00)=ANY=[@ANYRESOCT=r0, @ANYRES8=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7a2340900e07b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400004000000085000000820000008520000002000000bf91000000000000b7020000020000008500acab85000000b700000000000080950000060000000020cac92f94911158b88f5b90a8619f6d6d9bbb011bce71ce8623267f94a928c35f50827c32a9b952364d8adee3ff8b81059326b27c45b57986ba66c868b4a2ef5acb5d277d82ad14306247d3a7772030fa0000f12c9bc35197de8a83c516c9348b41a40438d7071d5d040100729710b173a9e34e18e765e55a8c7896dd3d30d358c79d5769000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) unshare(0x22020600) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$UI_END_FF_ERASE(r5, 0x400c55cb, &(0x7f0000000700)={0xd, 0xfffffffc}) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r6 = socket$inet6(0xa, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c80)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x1a4, 0x1a4, 0xffffffff, 0x1a4, 0x0, 0x454, 0x454, 0xffffffff, 0x454, 0x454, 0x5, &(0x7f0000000680), {[{{@ip={@empty, @multicast1, 0xff000000, 0x0, 'vlan0\x00', 'team0\x00', {}, {}, 0x11, 0x1, 0x4}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x40}}, @common=@ttl={{0x24}, {0x0, 0xe}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4=@broadcast, @gre_key=0x6, @port=0x4e24}}}, {{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @multicast1, @multicast2, @port=0x4e24, @port=0x4e21}}}}, {{@ip={@local, @remote, 0xff000000, 0xffff00, 'wlan0\x00', 'pim6reg\x00', {}, {0xff}, 0x16, 0x0, 0x2}, 0x0, 0x198, 0x1e0, 0x0, {}, [@common=@ttl={{0x24}, {0x3}}, @common=@inet=@recent1={{0x104}, {0x8, 0x493, 0x10, 0x0, 'syz0\x00', 0x5, [0xffffff00, 0xff, 0xff000000, 0xff000000]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@private=0xa010100, @port=0x4e22, @port=0x4e23}}}, {{@ip={@loopback, @broadcast, 0x0, 0xff000000, 'syzkaller1\x00', 'dummy0\x00', {0xff}, {}, 0xc, 0x2, 0x41}, 0x0, 0x9c, 0xd0, 0x0, {}, [@common=@addrtype={{0x2c}, {0x40, 0x408, 0x1, 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x5, @broadcast, @broadcast, @icmp_id=0x68, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x544) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r6, 0x0, 0x0, 0x200c8004, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r6, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendmsg$inet6(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ac0)="2f6c62fdf406a1a017d356c35c10e4d1be87033978d275293527325d1cd47e250c86", 0x22}], 0x1}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f00000000c0), 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000380)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000640)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0x12) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)="49773bcb35e8", &(0x7f0000000480), 0xffffffff, r2}, 0x38) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000440)={r3, 0xbe, &(0x7f0000000300)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18030000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.892684638s ago: executing program 2 (id=251): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x9, 0xf, &(0x7f0000000b00)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x7b}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x7, 0x2, 0x0, 0x0, 0x0, "4102000000ff000000000006bbff0f00"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000004000140000000000900010073797a"], 0xdc}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000001380)=""/97, 0x61}], 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="188099000000000008000000"], &(0x7f0000002880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x90) read$char_usb(0xffffffffffffffff, &(0x7f0000001840)=""/4090, 0xffa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fa00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.472298491s ago: executing program 0 (id=255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket(0x40000000002, 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r2, &(0x7f0000002440)=[{&(0x7f00000000c0)=""/156, 0x9c}], 0x1, 0x74, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000000c0)=0x101, &(0x7f0000000240)=0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x8000002, 0xffffffff}) r4 = socket(0x40000000015, 0x0, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)}, {&(0x7f0000000900)="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", 0x43e}], 0x2}, 0x8050) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_uring_setup(0x5357, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000400)=""/68}], 0x32) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) 4.328740573s ago: executing program 1 (id=256): r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) io_submit(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) unshare(0x22020400) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x9c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x0, @loopback, 0x2000, 0x0, 'sh\x00', 0x0, 0x0, 0x24}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x5cb820, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) socket(0x28, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) 3.744138541s ago: executing program 0 (id=257): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket(0x40000000002, 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r2, &(0x7f0000002440)=[{&(0x7f00000000c0)=""/156, 0x9c}], 0x1, 0x74, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000000c0)=0x101, &(0x7f0000000240)=0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x8000002, 0xffffffff}) r4 = socket(0x40000000015, 0x0, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)}, {&(0x7f0000000900)="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", 0x43e}], 0x2}, 0x8050) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_uring_setup(0x5357, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000400)=""/68}], 0x32) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) 3.655082338s ago: executing program 3 (id=258): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0xa}, 0x1c) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000280)=""/239, 0xef) write$char_usb(r1, &(0x7f0000000240)="96", 0x1) read$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x8}, @chandef_params, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x28}}, 0x0) socket$rds(0x15, 0x5, 0x0) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=ANY=[@ANYBLOB="8080000008021100000100021100000150505050505020000000000000000000000000006400000001"], 0x7b) r6 = openat$fuse(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000400)={0x2a, 0x6, 0x0, {0x5, 0x2, 0x1, 0x0, '\x00'}}, 0x2a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, &(0x7f0000000300)=0xa) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, 0x0, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) 3.572912705s ago: executing program 1 (id=259): openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0xb6, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a42, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x48000, 0x0) symlinkat(&(0x7f0000000280)='./file2\x00', r2, &(0x7f0000000100)='./file2\x00') lsm_set_self_attr(0x65, &(0x7f0000000240)=ANY=[@ANYRESDEC=r2], 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019340)={0x8, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000003000000000950050aaf926c15d00"/40], &(0x7f0000000000)='syzkaller\x00'}, 0x90) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000180)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RELDISP(r3, 0x5605) r4 = socket$inet(0x2, 0x0, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$dsp(r6, &(0x7f0000000440)="ed", 0x1) write$UHID_INPUT(r6, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0xf13) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x40001) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000019300)=ANY=[@ANYRESHEX=r7], 0x10) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) 3.453920189s ago: executing program 2 (id=260): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) creat(0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r2, 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x183203, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @dev}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) pipe2(&(0x7f0000000140), 0x8880) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000009c0)={{}, 'syz0\x00', 0x15}) io_setup(0x4e6, &(0x7f0000004200)=0x0) io_submit(r5, 0x3db, &(0x7f0000000480)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) 3.026350719s ago: executing program 0 (id=261): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) 2.913281334s ago: executing program 0 (id=262): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0xb6, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x141a42, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x48000, 0x0) symlinkat(&(0x7f0000000280)='./file2\x00', r3, &(0x7f0000000100)='./file2\x00') lsm_set_self_attr(0x65, &(0x7f0000000240)=ANY=[@ANYRESDEC=r3], 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019340)={0x8, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000003000000000950050aaf926c15d00"/40], &(0x7f0000000000)='syzkaller\x00'}, 0x90) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000180)=0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RELDISP(r4, 0x5605) r5 = socket$inet(0x2, 0x0, 0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$dsp(r7, &(0x7f0000000440)="ed", 0x1) write$UHID_INPUT(r7, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0xf13) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000200)={0xbb, 0xa, 0x1, 0xfffd, 0x0, 0x6, 0x0}) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000019300)=ANY=[@ANYRESHEX], 0x10) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) 2.393931024s ago: executing program 2 (id=263): openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) io_setup(0x5, 0x0) io_submit(0x0, 0x0, 0x0) r0 = memfd_create(0x0, 0x8) syz_open_dev$evdev(&(0x7f0000000300), 0x3, 0x100040) gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000380)=0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) setresuid(r2, r4, r6) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0xf0000012}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x8, &(0x7f0000000140)={0x1, "96e67ad2d329008afe83c910c40800"}}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r9 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 2.193275034s ago: executing program 1 (id=264): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x64) write$ppp(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r2 = socket$inet6(0xa, 0x5, 0x0) sched_setscheduler(0x0, 0x5, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902"], 0x0) syz_usb_disconnect(r3) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010ac05440200000000000109022400010000000009040000000300020009210000"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.033896632s ago: executing program 3 (id=265): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket(0x40000000002, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r2, &(0x7f0000002440)=[{&(0x7f00000000c0)=""/156, 0x9c}], 0x1, 0x74, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000000c0)=0x101, &(0x7f0000000240)=0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x8000002, 0xffffffff}) r4 = socket(0x40000000015, 0x0, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)}, {&(0x7f0000000900)="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", 0x43e}], 0x2}, 0x8050) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_uring_setup(0x5357, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000400)=""/68}], 0x32) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) 1.57344724s ago: executing program 3 (id=266): syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x1b0}, @l2cap_cid_signaling={{0x1ac}, [@l2cap_conf_req={{0x4, 0x7, 0x33}, {0xa, 0x8, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x10, 0xd, 0x1b, 0x101, 0x3}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x2, 0x3, 0x0, 0xaa9, 0x299}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x80, 0x2, 0x3a, 0x9, 0x3fa7}}, @l2cap_conf_flushto={0x2, 0x2, 0x6}]}}, @l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0xff00, 0x9}}, @l2cap_info_rsp={{0xb, 0x5, 0xc1}, {0x3ff, 0x1, "fd9ae59d9a44d4ba3c737771f4f58b9a91f18640c827f0063d2c5adb46a9cb7dbb43758740cd3af028b539e11c73e629888afffd09146751c8350c1f1b177d7ad93a4327b74ace4d58ae5121df2fb618bf63b3f5b9d6f0c50b4f336167c3c7233c8a3644d70f4b3702c7abe2d6782d87a95b76cffa82b5d996a3dd539ab4589027401ad083f9c4ea06df0dd5a33dfd0a9c9017b34f0b7d580bf1f0e394f2542f99c415c7122b8567cfcf6dc695ca4d5dfb654eb45bb66c46ebbf6d4cf4"}}, @l2cap_disconn_req={{0x6, 0x8, 0x4}, {0x3ff, 0xd}}, @l2cap_info_rsp={{0xb, 0x6e, 0x97}, {0x200, 0x0, "d1f62aeb5c5d4f154b716328e3f71d6ee69125386e68e9f6dcaa20752a56ab6b3f49973d7a1b350cbf828732edb250c9cd78949b7e16646657b430e753a63ad2af4ee546239f69cf4271c296088e7e564ffe230effc7d2895f27608a50df35b0e0bf2de2c6c6cf6f660cc09ab146e3296b609727dc06773e4182c879bed2d531998ec96b004b68b1b5cbd544354000bfc906fd"}}, @l2cap_cmd_rej_unk={{0x1, 0x4, 0x2}, {0x2}}]}}, 0x1b5) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) connect$inet(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x2, 0x4}, &(0x7f0000000140)) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{0x4, 0x10}, 0x1, &(0x7f0000000180)={0x40, 0x2, 0x2, 0xfc, @time={0x6, 0x2}, {0x4, 0xff}, {0x4, 0x4}, @addr={0x1c, 0x6}}}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f00000000c0)={0x2a2}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv4_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @multicast1}]}, 0x2c}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) 1.572695321s ago: executing program 0 (id=267): r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, 0x0) io_submit(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) unshare(0x22020400) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x9c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x0, @loopback, 0x2000, 0x0, 'sh\x00', 0x0, 0x0, 0x24}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd1, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x5cb820, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) socket$igmp6(0xa, 0x3, 0x2) 1.053451518s ago: executing program 0 (id=268): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x9, 0xf, &(0x7f0000000b00)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x7b}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x7, 0x2, 0x0, 0x0, 0x0, "4102000000ff000000000006bbff0f00"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000004000140000000000900010073797a"], 0xdc}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000001380)=""/97, 0x61}], 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="188099000000000008000000"], &(0x7f0000002880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x90) read$char_usb(0xffffffffffffffff, &(0x7f0000001840)=""/4090, 0xffa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fa00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 809.503611ms ago: executing program 2 (id=269): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r2}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x48) r3 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[], 0x0) connect$inet6(r3, &(0x7f00000002c0), 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x80fe) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000008e00000095000000f8000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xe4, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x50}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) clock_getres(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r6, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) 605.982621ms ago: executing program 3 (id=270): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket(0x40000000002, 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r2, &(0x7f0000002440)=[{&(0x7f00000000c0)=""/156, 0x9c}], 0x1, 0x74, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000000c0)=0x101, &(0x7f0000000240)=0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x8000002, 0xffffffff}) r4 = socket(0x40000000015, 0x0, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)}, {&(0x7f0000000900)="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", 0x43e}], 0x2}, 0x8050) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_uring_setup(0x5357, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000400)=""/68}], 0x32) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) 595.280338ms ago: executing program 2 (id=271): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) creat(0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r2, 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x183203, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @dev}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x810) pipe2(&(0x7f0000000140), 0x8880) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f00000009c0)={{}, 'syz0\x00', 0x15}) io_setup(0x4e6, &(0x7f0000004200)=0x0) io_submit(r5, 0x3db, &(0x7f0000000480)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) 0s ago: executing program 3 (id=272): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r4}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x0, 0x1, 0x0, 0x0}) r8 = syz_open_dev$dri(0x0, 0x1f, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000003940)={r9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000180)={r7}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:9766' (ED25519) to the list of known hosts. [ 58.428206][ T5208] cgroup: Unknown subsys name 'net' [ 58.539784][ T5208] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.809366][ T5208] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.411739][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.420738][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.425795][ T5228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.429981][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.434189][ T5228] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.437520][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.437613][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.441457][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.445882][ T5228] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.446868][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.450707][ T5228] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.453766][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.455620][ T5228] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.460428][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.465301][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.465307][ T5228] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.465608][ T5228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.468965][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.470841][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.482495][ T5228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.485845][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.496266][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.507599][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.510816][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.876026][ T5221] chnl_net:caif_netlink_parms(): no params data found [ 66.018703][ T5222] chnl_net:caif_netlink_parms(): no params data found [ 66.105562][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 66.152743][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.155845][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.159181][ T5221] bridge_slave_0: entered allmulticast mode [ 66.164074][ T5221] bridge_slave_0: entered promiscuous mode [ 66.204201][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.206889][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.209567][ T5221] bridge_slave_1: entered allmulticast mode [ 66.214613][ T5221] bridge_slave_1: entered promiscuous mode [ 66.435008][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.493962][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.496658][ T5222] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.499439][ T5222] bridge_slave_0: entered allmulticast mode [ 66.503970][ T5222] bridge_slave_0: entered promiscuous mode [ 66.510511][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.571829][ T5222] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.574914][ T5222] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.578023][ T5222] bridge_slave_1: entered allmulticast mode [ 66.582331][ T5222] bridge_slave_1: entered promiscuous mode [ 66.590513][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 66.621467][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.624500][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.627557][ T5227] bridge_slave_0: entered allmulticast mode [ 66.631752][ T5227] bridge_slave_0: entered promiscuous mode [ 66.699302][ T5221] team0: Port device team_slave_0 added [ 66.705664][ T5221] team0: Port device team_slave_1 added [ 66.710493][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.713559][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.716507][ T5227] bridge_slave_1: entered allmulticast mode [ 66.720239][ T5227] bridge_slave_1: entered promiscuous mode [ 66.756652][ T5222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.858899][ T5222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.863497][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.866199][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.878194][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.900633][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.927764][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.930628][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.941275][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.954069][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.985472][ T5222] team0: Port device team_slave_0 added [ 67.072699][ T5222] team0: Port device team_slave_1 added [ 67.129488][ T5227] team0: Port device team_slave_0 added [ 67.193062][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.196169][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.199109][ T5235] bridge_slave_0: entered allmulticast mode [ 67.202798][ T5235] bridge_slave_0: entered promiscuous mode [ 67.208490][ T5227] team0: Port device team_slave_1 added [ 67.214947][ T5221] hsr_slave_0: entered promiscuous mode [ 67.218133][ T5221] hsr_slave_1: entered promiscuous mode [ 67.274463][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.277307][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.280520][ T5235] bridge_slave_1: entered allmulticast mode [ 67.283745][ T5235] bridge_slave_1: entered promiscuous mode [ 67.346918][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.350355][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.361493][ T5222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.427762][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.430945][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.442684][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.448439][ T5222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.451153][ T5222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.460887][ T5222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.498372][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.503990][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.506881][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.517187][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.533402][ T5236] Bluetooth: hci3: command tx timeout [ 67.540269][ T5229] Bluetooth: hci2: command tx timeout [ 67.540415][ T4650] Bluetooth: hci0: command tx timeout [ 67.541716][ T5236] Bluetooth: hci1: command tx timeout [ 67.545979][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.661957][ T5235] team0: Port device team_slave_0 added [ 67.672808][ T5227] hsr_slave_0: entered promiscuous mode [ 67.676511][ T5227] hsr_slave_1: entered promiscuous mode [ 67.679787][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.683273][ T5227] Cannot create hsr debugfs directory [ 67.743658][ T5235] team0: Port device team_slave_1 added [ 67.799364][ T5222] hsr_slave_0: entered promiscuous mode [ 67.806100][ T5222] hsr_slave_1: entered promiscuous mode [ 67.808725][ T5222] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.811963][ T5222] Cannot create hsr debugfs directory [ 67.876083][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.878902][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.890121][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.899463][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.904903][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.915142][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.096012][ T5235] hsr_slave_0: entered promiscuous mode [ 68.099277][ T5235] hsr_slave_1: entered promiscuous mode [ 68.102513][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.105705][ T5235] Cannot create hsr debugfs directory [ 68.196281][ T5221] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.257635][ T5221] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.264167][ T5221] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.313161][ T5221] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.515067][ T5227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.523834][ T5227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.530888][ T5227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.557327][ T5227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.593410][ T5222] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.611488][ T5222] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.633814][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.637013][ T5222] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.645309][ T5222] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.693517][ T5235] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.701437][ T5235] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.707994][ T5235] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.724575][ T5235] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.783446][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.821791][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.825535][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.890201][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.894638][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.963766][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.995420][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.043277][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.055187][ T5222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.082288][ T5222] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.094746][ T5265] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.097686][ T5265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.118204][ T5265] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.121372][ T5265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.147282][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.151274][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.167983][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.201722][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.207422][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.238269][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.242032][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.249463][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.253470][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.348182][ T5222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.610669][ T4650] Bluetooth: hci0: command tx timeout [ 69.610804][ T5229] Bluetooth: hci1: command tx timeout [ 69.612942][ T4650] Bluetooth: hci2: command tx timeout [ 69.612987][ T4650] Bluetooth: hci3: command tx timeout [ 69.683661][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.754358][ T5221] veth0_vlan: entered promiscuous mode [ 69.769142][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.789260][ T5221] veth1_vlan: entered promiscuous mode [ 69.825816][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.835225][ T5222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.878690][ T5221] veth0_macvtap: entered promiscuous mode [ 69.888924][ T5227] veth0_vlan: entered promiscuous mode [ 69.913862][ T5221] veth1_macvtap: entered promiscuous mode [ 69.935421][ T5227] veth1_vlan: entered promiscuous mode [ 69.956021][ T5235] veth0_vlan: entered promiscuous mode [ 69.967380][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.975065][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.983437][ T5235] veth1_vlan: entered promiscuous mode [ 70.006688][ T5221] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.010122][ T5221] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.013320][ T5221] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.016855][ T5221] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.027853][ T5222] veth0_vlan: entered promiscuous mode [ 70.036369][ T5227] veth0_macvtap: entered promiscuous mode [ 70.054198][ T5222] veth1_vlan: entered promiscuous mode [ 70.069152][ T5227] veth1_macvtap: entered promiscuous mode [ 70.115031][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.120935][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.127064][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.136190][ T5235] veth0_macvtap: entered promiscuous mode [ 70.148398][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.153413][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.159241][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.169822][ T5227] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.173738][ T5227] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.177498][ T5227] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.181121][ T5227] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.212290][ T5235] veth1_macvtap: entered promiscuous mode [ 70.222000][ T5222] veth0_macvtap: entered promiscuous mode [ 70.227434][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.230787][ T5222] veth1_macvtap: entered promiscuous mode [ 70.231332][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.283556][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.287690][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.292955][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.297227][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.302828][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.316653][ T548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.321775][ T548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.327653][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.333436][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.338277][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.343045][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.347401][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.352479][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.357813][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.360932][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.365203][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.369051][ T5222] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.372635][ T5222] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.378872][ T5222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.396648][ T5222] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.400316][ T5222] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.403939][ T5222] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.407470][ T5222] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.413033][ T1195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.416282][ T1195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.421045][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.433597][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.437784][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.442874][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.446877][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.451410][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.457226][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.482395][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.484961][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.491123][ T5235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.494845][ T5235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.498264][ T5235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.501779][ T5235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.626466][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.630044][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.689234][ T548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.690346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.692427][ T548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.699465][ T5293] netlink: 'syz.1.2': attribute type 3 has an invalid length. [ 70.710305][ T5293] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2'. [ 70.711312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.718593][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.724058][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.727935][ T5290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 70.761841][ T1195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.765184][ T1195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.766664][ T5292] process 'syz.3.4' launched './file2' with NULL argv: empty string added [ 70.901653][ T5293] fuse: Bad value for 'fd' [ 71.508986][ T5311] input: syz0 as /devices/virtual/input/input6 [ 71.691741][ T5229] Bluetooth: hci1: command tx timeout [ 71.700025][ T5229] Bluetooth: hci3: command tx timeout [ 71.700272][ T5236] Bluetooth: hci2: command tx timeout [ 71.700402][ T4650] Bluetooth: hci0: command tx timeout [ 72.563516][ T5324] binder: 5323:5324 ioctl c0306201 20000580 returned -14 [ 72.585811][ T5324] tmpfs: Unknown parameter 'mp' [ 72.589812][ T5324] netlink: 'syz.0.10': attribute type 10 has an invalid length. [ 72.592747][ T5324] ipvlan1: entered promiscuous mode [ 72.601521][ T5324] team0: Device ipvlan1 failed to register rx_handler [ 73.069047][ T5336] netlink: 'syz.0.14': attribute type 3 has an invalid length. [ 73.074106][ T5336] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.14'. [ 73.094824][ T5335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 73.212836][ T5336] fuse: Bad value for 'fd' [ 73.256918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.272140][ T39] audit: type=1326 audit(1721402690.979:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5337 comm="syz.1.15" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x0 [ 73.584961][ T5354] input: syz0 as /devices/virtual/input/input8 [ 73.769903][ T5236] Bluetooth: hci0: command tx timeout [ 73.770259][ T5229] Bluetooth: hci3: command tx timeout [ 73.772735][ T4650] Bluetooth: hci1: command tx timeout [ 73.775316][ T5229] Bluetooth: hci2: command tx timeout [ 73.886167][ T25] IPVS: starting estimator thread 0... [ 73.969934][ T5360] IPVS: using max 21 ests per chain, 50400 per kthread [ 74.188139][ T58] IPVS: starting estimator thread 0... [ 74.279825][ T5371] IPVS: using max 35 ests per chain, 84000 per kthread [ 74.281002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.410138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.304867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.364758][ T5388] capability: warning: `syz.2.30' uses deprecated v2 capabilities in a way that may be insecure [ 75.499396][ T5393] input: syz0 as /devices/virtual/input/input9 [ 75.509641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.652075][ T39] audit: type=1326 audit(1721402693.359:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5394 comm="syz.2.32" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x0 [ 76.239251][ T5405] binder: 5404:5405 ioctl c0306201 20000580 returned -14 [ 76.257458][ T5405] tmpfs: Unknown parameter 'mp' [ 76.262762][ T5405] netlink: 'syz.1.34': attribute type 10 has an invalid length. [ 76.266240][ T5405] ipvlan1: entered promiscuous mode [ 76.276883][ T5405] team0: Device ipvlan1 failed to register rx_handler [ 76.666798][ T5423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42'. [ 76.689579][ T5424] netlink: 'syz.3.40': attribute type 3 has an invalid length. [ 76.692811][ T5424] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.40'. [ 76.705382][ T5425] netlink: 'syz.2.41': attribute type 3 has an invalid length. [ 76.709083][ T5425] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.41'. [ 76.711716][ T5419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 76.745940][ T1354] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.749484][ T1354] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.779457][ T5421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41'. [ 76.794497][ T5430] Zero length message leads to an empty skb [ 76.827112][ T5424] fuse: Bad value for 'fd' [ 76.900526][ T5425] fuse: Bad value for 'fd' [ 77.126088][ T5443] input: syz0 as /devices/virtual/input/input12 [ 77.176461][ T5444] input: syz0 as /devices/virtual/input/input13 [ 77.610432][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 77.802746][ T25] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 77.806402][ T25] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.810640][ T25] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 77.814366][ T25] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.825137][ T25] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 77.828963][ T25] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 77.832822][ T25] usb 7-1: Product: syz [ 77.834628][ T25] usb 7-1: Manufacturer: syz [ 77.843602][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 77.845947][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 77.848129][ T25] cdc_wdm 7-1:1.0: skipping garbage [ 77.851471][ T25] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 77.968092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.099763][ T10] IPVS: starting estimator thread 0... [ 78.199913][ T5456] IPVS: using max 20 ests per chain, 48000 per kthread [ 78.431800][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.518193][ T5471] input: syz0 as /devices/virtual/input/input14 [ 78.629793][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 78.634503][ T10] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 78.639224][ T10] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 78.649333][ T10] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 78.653935][ T10] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 78.660557][ T10] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 78.664762][ T10] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 78.677077][ T10] usb 5-1: string descriptor 0 read error: -22 [ 78.679844][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 78.684390][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.691224][ T10] adutux 5-1:168.0: interrupt endpoints not found [ 78.919538][ T10] usb 5-1: USB disconnect, device number 2 [ 79.152723][ T5460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.480093][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.590344][ T5488] input: syz0 as /devices/virtual/input/input15 [ 79.792015][ T5496] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 79.795096][ T5496] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 79.799008][ T5496] vhci_hcd vhci_hcd.0: Device attached [ 79.803739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.808739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.018779][ T825] vhci_hcd: vhci_device speed not set [ 80.101137][ T825] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 80.302953][ T39] audit: type=1326 audit(1721402698.009:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5447 comm="syz.2.47" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7fc00000 [ 80.317229][ T10] usb 7-1: USB disconnect, device number 2 [ 80.596883][ T39] audit: type=1326 audit(1721402698.299:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5503 comm="syz.2.66" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x0 [ 80.679271][ T5511] input: syz0 as /devices/virtual/input/input16 [ 80.692430][ T5497] vhci_hcd: connection reset by peer [ 80.700448][ T1093] vhci_hcd: stop threads [ 80.706392][ T1093] vhci_hcd: release socket [ 80.712586][ T1093] vhci_hcd: disconnect device [ 81.314251][ T39] audit: type=1326 audit(1721402699.019:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5513 comm="syz.3.68" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x0 [ 81.861664][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 82.041199][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 82.085177][ T10] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 82.089138][ T10] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.115084][ T10] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 82.127088][ T10] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.154428][ T10] usb 6-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 82.159025][ T10] usb 6-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.181331][ T10] usb 6-1: string descriptor 0 read error: -22 [ 82.183761][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 82.187311][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.209892][ T10] adutux 6-1:168.0: interrupt endpoints not found [ 82.371342][ T5231] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 82.417702][ T35] usb 6-1: USB disconnect, device number 2 [ 82.552894][ T5231] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 82.556506][ T5231] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.570729][ T5231] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 82.574613][ T5231] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.593249][ T5231] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.597010][ T5231] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.600474][ T5231] usb 8-1: Product: syz [ 82.602250][ T5231] usb 8-1: Manufacturer: syz [ 82.620540][ T5231] cdc_wdm 8-1:1.0: skipping garbage [ 82.623128][ T5231] cdc_wdm 8-1:1.0: skipping garbage [ 82.625442][ T5231] cdc_wdm 8-1:1.0: skipping garbage [ 82.627422][ T5231] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 82.643159][ T5525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.444570][ T5541] input: syz0 as /devices/virtual/input/input17 [ 83.860428][ T5553] netlink: 'syz.0.79': attribute type 3 has an invalid length. [ 83.863764][ T5553] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.79'. [ 83.871668][ T5552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 83.950325][ T5553] fuse: Bad value for 'fd' [ 84.367093][ T5567] x_tables: duplicate underflow at hook 1 [ 84.417260][ T35] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.600975][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 84.604402][ T35] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.608191][ T35] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 84.611319][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 84.615347][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 84.619455][ T35] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 84.624122][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.632770][ T35] hub 5-1:1.0: bad descriptor, ignoring hub [ 84.634940][ T35] hub 5-1:1.0: probe with driver hub failed with error -5 [ 84.638125][ T35] cdc_wdm 5-1:1.0: skipping garbage [ 84.639850][ T57] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 84.642663][ T35] cdc_wdm 5-1:1.0: skipping garbage [ 84.651327][ T35] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 84.653775][ T35] cdc_wdm 5-1:1.0: Unknown control protocol [ 84.821167][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 84.826242][ T57] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 84.832007][ T57] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 84.840412][ T57] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 84.844704][ T57] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 84.852074][ T57] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 84.856315][ T57] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 84.865516][ T57] usb 7-1: string descriptor 0 read error: -22 [ 84.868240][ T57] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 84.872035][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.879791][ T57] adutux 7-1:168.0: interrupt endpoints not found [ 85.096742][ T39] audit: type=1326 audit(1721402702.799:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.3.74" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x7fc00000 [ 85.114307][ T5231] usb 8-1: USB disconnect, device number 2 [ 85.161598][ T5536] usb 7-1: USB disconnect, device number 3 [ 85.230191][ T825] vhci_hcd: vhci_device speed not set [ 85.273057][ T5558] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 85.389757][ T5576] input: syz0 as /devices/virtual/input/input20 [ 85.428254][ T5571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.729207][ T5579] netlink: 'syz.1.85': attribute type 3 has an invalid length. [ 85.732947][ T5579] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.85'. [ 85.751061][ T5578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 85.795366][ T35] usb 5-1: USB disconnect, device number 3 [ 85.856438][ T5579] fuse: Bad value for 'fd' [ 86.268305][ T5592] netlink: 'syz.3.88': attribute type 3 has an invalid length. [ 86.274008][ T5592] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.88'. [ 86.279170][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 86.365900][ T5592] fuse: Bad value for 'fd' [ 86.420253][ T35] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 86.599879][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 86.603163][ T35] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 86.606877][ T35] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 86.621343][ T35] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 86.625205][ T35] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 86.632442][ T35] usb 7-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 86.637153][ T35] usb 7-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 86.646638][ T35] usb 7-1: string descriptor 0 read error: -22 [ 86.649565][ T35] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 86.655473][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.665767][ T35] adutux 7-1:168.0: interrupt endpoints not found [ 86.893617][ T25] usb 7-1: USB disconnect, device number 4 [ 86.980867][ T65] cfg80211: failed to load regulatory.db [ 86.996495][ T5610] x_tables: duplicate underflow at hook 1 [ 87.163708][ T5587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.517735][ T39] audit: type=1326 audit(1721402705.219:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5611 comm="syz.3.94" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x0 [ 87.698667][ T5619] input: syz0 as /devices/virtual/input/input24 [ 88.427692][ T5632] netlink: 'syz.0.98': attribute type 3 has an invalid length. [ 88.430536][ T5632] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.98'. [ 88.436230][ T5629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 88.525774][ T5632] fuse: Bad value for 'fd' [ 88.902352][ T5662] x_tables: duplicate underflow at hook 1 [ 89.695010][ T5229] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 89.720955][ T5229] Bluetooth: hci1: Injecting HCI hardware error event [ 89.726030][ T4650] Bluetooth: hci1: hardware error 0x00 [ 89.938791][ T39] audit: type=1326 audit(1721402707.639:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5669 comm="syz.1.108" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x0 [ 90.247488][ T5676] input: syz0 as /devices/virtual/input/input27 [ 90.599817][ T5680] input: syz0 as /devices/virtual/input/input28 [ 90.812358][ T5687] netlink: 'syz.1.113': attribute type 3 has an invalid length. [ 90.816480][ T5687] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.113'. [ 90.821935][ T5686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.113'. [ 90.930508][ T5686] fuse: Bad value for 'fd' [ 91.267781][ T5708] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 91.270733][ T5708] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.276127][ T5708] vhci_hcd vhci_hcd.0: Device attached [ 91.489792][ T825] vhci_hcd: vhci_device speed not set [ 91.559915][ T825] usb 19-1: new full-speed USB device number 2 using vhci_hcd [ 91.770045][ T4650] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 92.139915][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 92.220985][ T5709] vhci_hcd: connection reset by peer [ 92.230138][ T1195] vhci_hcd: stop threads [ 92.232444][ T1195] vhci_hcd: release socket [ 92.234487][ T1195] vhci_hcd: disconnect device [ 92.345317][ T25] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 92.349956][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.359909][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 92.364018][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.384988][ T25] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 92.389066][ T25] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 92.402804][ T25] usb 6-1: Product: syz [ 92.404654][ T25] usb 6-1: Manufacturer: syz [ 92.419042][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 92.422530][ T25] cdc_wdm 6-1:1.0: skipping garbage [ 92.424928][ T25] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 92.454585][ T5726] netlink: 'syz.2.123': attribute type 3 has an invalid length. [ 92.457456][ T5726] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.123'. [ 92.463648][ T5725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'. [ 92.550616][ T5726] fuse: Bad value for 'fd' [ 92.665806][ T5732] x_tables: duplicate underflow at hook 1 [ 92.946517][ T5737] input: syz0 as /devices/virtual/input/input32 [ 93.914079][ T39] audit: type=1326 audit(1721402711.619:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.2.127" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x0 [ 94.828509][ T5767] netlink: 'syz.2.133': attribute type 3 has an invalid length. [ 94.832069][ T5767] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.133'. [ 94.851729][ T5766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'. [ 94.881845][ T39] audit: type=1326 audit(1721402712.579:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.1.119" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7fc00000 [ 94.897667][ T5536] usb 6-1: USB disconnect, device number 3 [ 94.936960][ T5767] fuse: Bad value for 'fd' [ 95.215667][ T5783] x_tables: duplicate underflow at hook 1 [ 95.361678][ T5784] fuse: Bad value for 'user_id' [ 95.366737][ T5784] fuse: Bad value for 'user_id' [ 95.793221][ T5798] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 95.796011][ T5798] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 95.799625][ T5798] vhci_hcd vhci_hcd.0: Device attached [ 96.030006][ T5536] vhci_hcd: vhci_device speed not set [ 96.100486][ T5536] usb 13-1: new full-speed USB device number 3 using vhci_hcd [ 96.623513][ T5799] vhci_hcd: connection reset by peer [ 96.626033][ T1195] vhci_hcd: stop threads [ 96.627541][ T1195] vhci_hcd: release socket [ 96.629862][ T1195] vhci_hcd: disconnect device [ 96.649972][ T825] vhci_hcd: vhci_device speed not set [ 96.948102][ T5812] netlink: 'syz.2.145': attribute type 3 has an invalid length. [ 96.951616][ T5812] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.145'. [ 96.957757][ T5811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'. [ 97.009785][ T35] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 97.058118][ T5812] fuse: Bad value for 'fd' [ 97.229954][ T35] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.233726][ T35] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.238165][ T35] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.243025][ T35] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.249925][ T35] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 97.254167][ T35] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.257582][ T35] usb 6-1: Product: syz [ 97.259431][ T35] usb 6-1: Manufacturer: syz [ 97.265546][ T39] audit: type=1326 audit(1721402714.969:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.3.146" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x0 [ 97.278127][ T35] cdc_wdm 6-1:1.0: skipping garbage [ 97.281624][ T35] cdc_wdm 6-1:1.0: skipping garbage [ 97.289802][ T35] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 97.392712][ T39] audit: type=1326 audit(1721402715.099:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5821 comm="syz.2.148" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x0 [ 98.240040][ T825] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.271147][ T5846] netlink: 'syz.3.155': attribute type 3 has an invalid length. [ 98.274505][ T5846] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.155'. [ 98.280356][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'. [ 98.340385][ T5850] x_tables: duplicate underflow at hook 1 [ 98.373453][ T5846] fuse: Bad value for 'fd' [ 98.419940][ T825] usb 5-1: Using ep0 maxpacket: 32 [ 98.428236][ T825] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.433825][ T825] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 98.438171][ T825] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 98.443153][ T825] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.448523][ T825] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 98.462597][ T825] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.466734][ T825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.470492][ T825] usb 5-1: Product: syz [ 98.472376][ T825] usb 5-1: Manufacturer: syz [ 98.474425][ T825] usb 5-1: SerialNumber: syz [ 98.756802][ T825] cdc_ncm 5-1:1.0: bind() failure [ 98.767513][ T825] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 98.770690][ T825] cdc_ncm 5-1:1.1: bind() failure [ 98.777995][ T825] usb 5-1: USB disconnect, device number 4 [ 98.783848][ T5861] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 98.786744][ T5861] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 98.792689][ T5861] vhci_hcd vhci_hcd.0: Device attached [ 98.999944][ T65] vhci_hcd: vhci_device speed not set [ 99.069829][ T65] usb 19-1: new full-speed USB device number 3 using vhci_hcd [ 99.725895][ T39] audit: type=1326 audit(1721402717.429:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5806 comm="syz.1.143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7fc00000 [ 99.748913][ T825] usb 6-1: USB disconnect, device number 4 [ 99.830003][ T5862] vhci_hcd: connection reset by peer [ 99.832871][ T1086] vhci_hcd: stop threads [ 99.834737][ T1086] vhci_hcd: release socket [ 99.845410][ T1086] vhci_hcd: disconnect device [ 99.969366][ T5876] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.984827][ T5881] netlink: 'syz.0.164': attribute type 3 has an invalid length. [ 99.988264][ T5881] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.164'. [ 99.992310][ T5876] veth1_to_hsr: entered promiscuous mode [ 99.995514][ T5876] veth1_to_hsr: left promiscuous mode [ 100.019736][ T39] audit: type=1326 audit(1721402717.719:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5873 comm="syz.2.162" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x0 [ 100.030121][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 100.111554][ T5881] fuse: Bad value for 'fd' [ 100.307902][ T39] audit: type=1326 audit(1721402718.009:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.1.168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 100.317313][ T39] audit: type=1326 audit(1721402718.009:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.1.168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 100.327374][ T39] audit: type=1326 audit(1721402718.019:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.1.168" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 100.336375][ T39] audit: type=1326 audit(1721402718.019:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.1.168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 100.353204][ T39] audit: type=1326 audit(1721402718.019:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.1.168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 100.365540][ T39] audit: type=1326 audit(1721402718.019:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.1.168" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 100.375151][ T39] audit: type=1326 audit(1721402718.019:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.1.168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 100.385210][ T39] audit: type=1326 audit(1721402718.019:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.1.168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x7ffc0000 [ 100.679845][ T58] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.806418][ T5913] veth1_to_hsr: entered promiscuous mode [ 100.810935][ T5913] veth1_to_hsr: left promiscuous mode [ 100.881947][ T58] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 100.885151][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.889115][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 100.894788][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.899366][ T58] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.905938][ T58] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 100.909282][ T58] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 100.912878][ T58] usb 5-1: Product: syz [ 100.914711][ T58] usb 5-1: Manufacturer: syz [ 100.921131][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 100.923295][ T58] cdc_wdm 5-1:1.0: skipping garbage [ 100.926433][ T58] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 100.928734][ T58] cdc_wdm 5-1:1.0: Unknown control protocol [ 101.128440][ T5899] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 101.230394][ T5536] vhci_hcd: vhci_device speed not set [ 101.238982][ T5925] input: syz0 as /devices/virtual/input/input39 [ 101.298553][ T5929] netlink: 'syz.1.177': attribute type 3 has an invalid length. [ 101.301927][ T5929] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.177'. [ 101.307508][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 101.399373][ T5929] fuse: Bad value for 'fd' [ 101.668510][ T5944] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 101.671475][ T5944] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 101.676064][ T5944] vhci_hcd vhci_hcd.0: Device attached [ 102.445255][ T5945] vhci_hcd: connection closed [ 102.445667][ T11] vhci_hcd: stop threads [ 102.449503][ T11] vhci_hcd: release socket [ 102.451784][ T11] vhci_hcd: disconnect device [ 103.057873][ T5963] veth1_to_hsr: entered promiscuous mode [ 103.062988][ T5963] veth1_to_hsr: left promiscuous mode [ 103.084012][ T5961] syz.2.182 uses obsolete (PF_INET,SOCK_PACKET) [ 103.309387][ T5978] netlink: 'syz.3.186': attribute type 3 has an invalid length. [ 103.312886][ T5978] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.186'. [ 103.421193][ T5269] usb 5-1: USB disconnect, device number 5 [ 103.522565][ T5986] fuse: Bad value for 'fd' [ 104.169970][ T65] vhci_hcd: vhci_device speed not set [ 104.320430][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 104.757262][ T6011] tun0: tun_chr_ioctl cmd 1074025675 [ 104.760054][ T6011] tun0: persist enabled [ 104.814887][ C3] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.912887][ T6022] fuse: Unknown parameter '0x0000000000000004' [ 105.130134][ T5269] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 105.321833][ T5269] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.324753][ T5269] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.329018][ T5269] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.333503][ T5269] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.337604][ T5269] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.344197][ T5269] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.347962][ T5269] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.352117][ T5269] usb 5-1: Product: syz [ 105.356310][ T5269] usb 5-1: Manufacturer: syz [ 105.361531][ T5269] cdc_wdm 5-1:1.0: skipping garbage [ 105.363774][ T5269] cdc_wdm 5-1:1.0: skipping garbage [ 105.367414][ T5269] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 105.369648][ T5269] cdc_wdm 5-1:1.0: Unknown control protocol [ 105.572195][ T6019] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 106.908442][ T6078] netlink: 'syz.2.215': attribute type 3 has an invalid length. [ 106.911433][ T6078] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.215'. [ 106.918878][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 107.028572][ T6078] fuse: Bad value for 'fd' [ 107.443014][ T6094] FAULT_INJECTION: forcing a failure. [ 107.443014][ T6094] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.449943][ T6094] CPU: 1 PID: 6094 Comm: syz.3.219 Not tainted 6.10.0-syzkaller-08676-g720261cfc732 #0 [ 107.453596][ T6094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.457718][ T6094] Call Trace: [ 107.459176][ T6094] [ 107.460482][ T6094] dump_stack_lvl+0x16c/0x1f0 [ 107.462594][ T6094] should_fail_ex+0x497/0x5b0 [ 107.464703][ T6094] _copy_from_iter+0x27a/0xfb0 [ 107.466772][ T6094] ? _copy_from_iter+0x149/0xfb0 [ 107.468909][ T6094] ? __pfx__copy_from_iter+0x10/0x10 [ 107.471358][ T6094] ? sock_alloc_send_pskb+0x750/0x980 [ 107.473518][ T6094] ? __pfx__copy_from_iter+0x10/0x10 [ 107.475499][ T6094] copy_page_from_iter+0xa5/0x120 [ 107.477673][ T6094] skb_copy_datagram_from_iter+0x41d/0x6c0 [ 107.480214][ T6094] packet_sendmsg+0x2136/0x5390 [ 107.482151][ T6094] ? __pfx___might_resched+0x10/0x10 [ 107.484331][ T6094] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 107.486868][ T6094] ? aa_sk_perm+0x2f5/0xb40 [ 107.488801][ T6094] ? __pfx___might_resched+0x10/0x10 [ 107.491024][ T6094] ? __pfx_packet_sendmsg+0x10/0x10 [ 107.493278][ T6094] ? __pfx_aa_sk_perm+0x10/0x10 [ 107.495390][ T6094] ? __might_fault+0xe3/0x190 [ 107.497400][ T6094] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 107.499367][ T6094] __sys_sendto+0x47f/0x4e0 [ 107.501034][ T6094] ? __pfx___sys_sendto+0x10/0x10 [ 107.503195][ T6094] ? ksys_write+0x1ab/0x260 [ 107.505123][ T6094] ? __pfx_ksys_write+0x10/0x10 [ 107.507179][ T6094] __ia32_sys_sendto+0xdd/0x1b0 [ 107.509285][ T6094] ? lockdep_hardirqs_on+0x7c/0x110 [ 107.511509][ T6094] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 107.514360][ T6094] __do_fast_syscall_32+0x73/0x120 [ 107.516612][ T6094] do_fast_syscall_32+0x32/0x80 [ 107.518707][ T6094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.521544][ T6094] RIP: 0023:0xf7f53579 [ 107.523054][ T6094] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 107.530260][ T6094] RSP: 002b:00000000f5d0656c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 107.533819][ T6094] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200002c0 [ 107.537243][ T6094] RDX: 000000000000fce0 RSI: 0000000000000004 RDI: 0000000020000140 [ 107.540339][ T6094] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 107.543323][ T6094] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 107.546010][ T6094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.549364][ T6094] [ 107.657402][ T6104] FAULT_INJECTION: forcing a failure. [ 107.657402][ T6104] name failslab, interval 1, probability 0, space 0, times 1 [ 107.665972][ T6104] CPU: 1 PID: 6104 Comm: syz.3.224 Not tainted 6.10.0-syzkaller-08676-g720261cfc732 #0 [ 107.670004][ T6104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 107.674671][ T6104] Call Trace: [ 107.676056][ T6104] [ 107.677239][ T6104] dump_stack_lvl+0x16c/0x1f0 [ 107.679047][ T6104] should_fail_ex+0x497/0x5b0 [ 107.680875][ T6104] should_failslab+0x9/0x20 [ 107.682757][ T6104] __kmalloc_node_track_caller_noprof+0xcf/0x440 [ 107.685466][ T6104] ? parse_opts+0x1a1/0x4c0 [ 107.687417][ T6104] kstrdup+0x3c/0x80 [ 107.689109][ T6104] parse_opts+0x1a1/0x4c0 [ 107.690929][ T6104] ? __pfx_parse_opts+0x10/0x10 [ 107.692993][ T6104] p9_fd_create+0x87/0x4a0 [ 107.694896][ T6104] ? __pfx_p9_fd_create+0x10/0x10 [ 107.697048][ T6104] ? kfree+0x12a/0x3b0 [ 107.698684][ T6104] ? p9_client_create+0x7ad/0x11b0 [ 107.700839][ T6104] p9_client_create+0x81a/0x11b0 [ 107.703003][ T6104] ? __pfx_p9_client_create+0x10/0x10 [ 107.705339][ T6104] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 107.708182][ T6104] ? v9fs_session_init+0x1f8/0x1a80 [ 107.710393][ T6104] v9fs_session_init+0x1f8/0x1a80 [ 107.712394][ T6104] ? __pfx_v9fs_session_init+0x10/0x10 [ 107.714663][ T6104] ? kasan_save_track+0x14/0x30 [ 107.716802][ T6104] v9fs_mount+0xc6/0xaa0 [ 107.718621][ T6104] ? __pfx_v9fs_mount+0x10/0x10 [ 107.720726][ T6104] ? apparmor_capable+0x126/0x1e0 [ 107.722970][ T6104] ? __pfx_v9fs_mount+0x10/0x10 [ 107.725058][ T6104] legacy_get_tree+0x109/0x220 [ 107.727174][ T6104] vfs_get_tree+0x8f/0x380 [ 107.729124][ T6104] path_mount+0x6e1/0x1f10 [ 107.731052][ T6104] ? __pfx_path_mount+0x10/0x10 [ 107.733162][ T6104] ? putname+0x12e/0x170 [ 107.734735][ T6104] ? putname+0x12e/0x170 [ 107.736156][ T6104] __ia32_sys_mount+0x292/0x310 [ 107.737601][ T6104] ? __pfx___ia32_sys_mount+0x10/0x10 [ 107.739734][ T6104] __do_fast_syscall_32+0x73/0x120 [ 107.741956][ T6104] do_fast_syscall_32+0x32/0x80 [ 107.743943][ T6104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.746600][ T6104] RIP: 0023:0xf7f53579 [ 107.748339][ T6104] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 107.755677][ T6104] RSP: 002b:00000000f5d0656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 107.758714][ T6104] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000040 [ 107.761508][ T6104] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000020000200 [ 107.764344][ T6104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.767645][ T6104] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 107.770977][ T6104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.773918][ T6104] [ 107.839286][ T39] kauditd_printk_skb: 36 callbacks suppressed [ 107.839300][ T39] audit: type=1326 audit(1721402725.539:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6018 comm="syz.0.196" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7fc00000 [ 107.855235][ T6116] netlink: 'syz.3.230': attribute type 21 has an invalid length. [ 107.872397][ T6116] netlink: 132 bytes leftover after parsing attributes in process `syz.3.230'. [ 107.876054][ T6116] netlink: 'syz.3.230': attribute type 1 has an invalid length. [ 107.876335][ T1390] usb 5-1: USB disconnect, device number 6 [ 107.880470][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 108.315561][ T6145] FAULT_INJECTION: forcing a failure. [ 108.315561][ T6145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.321234][ T6145] CPU: 3 PID: 6145 Comm: syz.3.237 Not tainted 6.10.0-syzkaller-08676-g720261cfc732 #0 [ 108.324975][ T6145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.329290][ T6145] Call Trace: [ 108.330587][ T6145] [ 108.331746][ T6145] dump_stack_lvl+0x16c/0x1f0 [ 108.333692][ T6145] should_fail_ex+0x497/0x5b0 [ 108.335534][ T6145] _copy_from_user+0x30/0xf0 [ 108.337403][ T6145] get_compat_msghdr+0xa8/0x170 [ 108.339382][ T6145] ? __pfx_get_compat_msghdr+0x10/0x10 [ 108.341594][ T6145] ? kfree+0x245/0x3b0 [ 108.343157][ T6145] ? find_held_lock+0x2d/0x110 [ 108.345159][ T6145] ___sys_recvmsg+0x193/0x1a0 [ 108.346922][ T6145] ? __pfx____sys_recvmsg+0x10/0x10 [ 108.348865][ T6145] ? __pfx___might_resched+0x10/0x10 [ 108.350736][ T6145] ? __fget_light+0x173/0x210 [ 108.352509][ T6145] do_recvmmsg+0x51a/0x750 [ 108.354166][ T6145] ? __pfx_do_recvmmsg+0x10/0x10 [ 108.355971][ T6145] ? __pfx_lock_release+0x10/0x10 [ 108.357810][ T6145] ? vfs_write+0x14d/0x1140 [ 108.359522][ T6145] __sys_recvmmsg+0x21e/0x280 [ 108.361253][ T6145] ? __pfx___sys_recvmmsg+0x10/0x10 [ 108.363129][ T6145] ? __pfx_ksys_write+0x10/0x10 [ 108.364957][ T6145] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 108.367211][ T6145] ? lockdep_hardirqs_on+0x7c/0x110 [ 108.369126][ T6145] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 108.371517][ T6145] __do_fast_syscall_32+0x73/0x120 [ 108.373391][ T6145] do_fast_syscall_32+0x32/0x80 [ 108.375192][ T6145] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 108.377540][ T6145] RIP: 0023:0xf7f53579 [ 108.379016][ T6145] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 108.385916][ T6145] RSP: 002b:00000000f5ce556c EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 108.388969][ T6145] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200066c0 [ 108.392115][ T6145] RDX: 0000000000000a0d RSI: 0000000000000000 RDI: 0000000000000000 [ 108.395136][ T6145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 108.398387][ T6145] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 108.401798][ T6145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 108.405191][ T6145] [ 108.588788][ T39] audit: type=1326 audit(1721402726.289:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.3.239" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x0 [ 108.616613][ T6154] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 108.692497][ T6157] netlink: 'syz.3.239': attribute type 5 has an invalid length. [ 109.129821][ T65] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 109.312015][ T65] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 109.315950][ T65] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.321506][ T65] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 109.325443][ T65] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.330470][ T65] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.336759][ T65] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 109.340884][ T65] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 109.344342][ T65] usb 5-1: Product: syz [ 109.346177][ T65] usb 5-1: Manufacturer: syz [ 109.352844][ T65] cdc_wdm 5-1:1.0: skipping garbage [ 109.355108][ T65] cdc_wdm 5-1:1.0: skipping garbage [ 109.359799][ T65] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 109.362519][ T65] cdc_wdm 5-1:1.0: Unknown control protocol [ 109.556305][ T6159] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 109.569824][ T5536] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 109.759918][ T65] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 109.763341][ T5536] usb 6-1: Using ep0 maxpacket: 16 [ 109.771075][ T5536] usb 6-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 109.775056][ T5536] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.778480][ T5536] usb 6-1: Product: syz [ 109.780560][ T5536] usb 6-1: Manufacturer: syz [ 109.782832][ T5536] usb 6-1: SerialNumber: syz [ 109.791024][ T5536] usb 6-1: config 0 descriptor?? [ 109.796305][ T5536] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 109.810171][ T5536] dvb-usb: bulk message failed: -22 (3/0) [ 109.837721][ T5536] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle error while loading driver (-22) [ 109.842334][ T5536] dvb_usb_dibusb_mc 6-1:0.0: probe with driver dvb_usb_dibusb_mc failed with error -22 [ 109.943551][ T65] usb 7-1: config 0 has no interfaces? [ 109.947108][ T65] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 109.958120][ T65] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 109.962449][ T65] usb 7-1: Manufacturer: syz [ 109.970939][ T65] usb 7-1: config 0 descriptor?? [ 110.178400][ T65] usb 7-1: USB disconnect, device number 5 [ 110.759893][ T65] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 110.959802][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 110.965052][ T65] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.969867][ T65] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 110.973945][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.981185][ T65] usb 7-1: config 0 descriptor?? [ 110.986441][ T65] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input43 [ 111.239976][ T4691] bcm5974 7-1:0.0: could not read from device [ 111.249798][ T4691] bcm5974 7-1:0.0: could not read from device [ 111.251210][ T65] usb 7-1: USB disconnect, device number 6 [ 111.256715][ T6165] bcm5974 7-1:0.0: could not read from device [ 111.483068][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b038800: rx timeout, send abort [ 111.488201][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b038800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 111.667480][ T6186] x_tables: duplicate underflow at hook 1 [ 111.861701][ T39] audit: type=1326 audit(1721402729.569:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.0.241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7fc00000 [ 111.871872][ T5536] usb 5-1: USB disconnect, device number 7 [ 111.943540][ T10] IPVS: starting estimator thread 0... [ 112.023048][ T6195] FAULT_INJECTION: forcing a failure. [ 112.023048][ T6195] name failslab, interval 1, probability 0, space 0, times 0 [ 112.028263][ T6195] CPU: 2 PID: 6195 Comm: syz.0.253 Not tainted 6.10.0-syzkaller-08676-g720261cfc732 #0 [ 112.031955][ T6195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.035898][ T6195] Call Trace: [ 112.037341][ T6195] [ 112.038615][ T6195] dump_stack_lvl+0x16c/0x1f0 [ 112.040395][ T6195] should_fail_ex+0x497/0x5b0 [ 112.042140][ T6195] should_failslab+0x9/0x20 [ 112.044171][ T6195] __kmalloc_noprof+0xcb/0x410 [ 112.046292][ T6195] ? __pfx_d_absolute_path+0x10/0x10 [ 112.048480][ T6195] tomoyo_encode2+0x100/0x3e0 [ 112.050501][ T6195] tomoyo_realpath_from_path+0x1a7/0x710 [ 112.052904][ T6195] tomoyo_mount_acl+0x66d/0x880 [ 112.054953][ T6195] ? hlock_class+0x4e/0x130 [ 112.056899][ T6195] ? __lock_acquire+0x1620/0x3cb0 [ 112.058944][ T6195] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 112.061133][ T6195] ? __pfx___lock_acquire+0x10/0x10 [ 112.063366][ T6195] ? do_fast_syscall_32+0x32/0x80 [ 112.065263][ T6195] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.067648][ T6195] ? tomoyo_domain+0xbb/0x150 [ 112.069590][ T6195] ? tomoyo_profile+0x47/0x60 [ 112.071502][ T6195] tomoyo_mount_permission+0x16b/0x410 [ 112.073408][ T6195] ? tomoyo_mount_permission+0x146/0x410 [ 112.075726][ T6195] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 112.078309][ T6195] ? get_current_fs_domain+0x188/0x1f0 [ 112.080522][ T6195] security_sb_mount+0x8d/0xe0 [ 112.082258][ T6195] path_mount+0x129/0x1f10 [ 112.084084][ T6195] ? __pfx_path_mount+0x10/0x10 [ 112.086108][ T6195] ? putname+0x12e/0x170 [ 112.087700][ T6195] ? putname+0x12e/0x170 [ 112.089501][ T6195] __ia32_sys_mount+0x292/0x310 [ 112.091599][ T6195] ? __pfx___ia32_sys_mount+0x10/0x10 [ 112.093925][ T6195] __do_fast_syscall_32+0x73/0x120 [ 112.096167][ T6195] do_fast_syscall_32+0x32/0x80 [ 112.098210][ T6195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.100676][ T6195] RIP: 0023:0xf73ae579 [ 112.102408][ T6195] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 112.109714][ T6195] RSP: 002b:00000000f5cc656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 112.113175][ T6195] RAX: ffffffffffffffda RBX: 0000000020000100 RCX: 00000000200002c0 [ 112.116454][ T6195] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.119802][ T6195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.122944][ T6195] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 112.126000][ T6195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.129191][ T6195] [ 112.132138][ T6192] IPVS: using max 35 ests per chain, 84000 per kthread [ 112.136424][ T6195] ERROR: Out of memory at tomoyo_realpath_from_path. [ 112.319277][ T10] usb 6-1: USB disconnect, device number 5 [ 113.399852][ T5536] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 113.466549][ T6219] input: syz0 as /devices/virtual/input/input45 [ 113.589826][ T5536] usb 8-1: Using ep0 maxpacket: 8 [ 113.601148][ T5536] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 113.605974][ T5536] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.622687][ T5536] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 113.627076][ T5536] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.650982][ T5536] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 113.655158][ T5536] usb 8-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.696697][ T5536] usb 8-1: string descriptor 0 read error: -22 [ 113.699592][ T5536] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 113.707028][ T5536] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.718645][ T5536] adutux 8-1:168.0: interrupt endpoints not found [ 113.920042][ T5268] usb 8-1: USB disconnect, device number 3 [ 114.136955][ T6208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.883240][ T35] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 115.071349][ T35] usb 6-1: config 0 has no interfaces? [ 115.075920][ T35] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 115.092736][ T35] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 115.096124][ T35] usb 6-1: Manufacturer: syz [ 115.108430][ T35] usb 6-1: config 0 descriptor?? [ 115.136185][ T4650] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 115.139528][ T4650] Bluetooth: Wrong link type (-22) [ 115.142089][ T4650] Bluetooth: hci0: link tx timeout [ 115.146338][ T4650] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 115.351735][ T10] usb 6-1: USB disconnect, device number 6 [ 115.949858][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 116.140465][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 116.146627][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.155393][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 116.165145][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.177205][ T10] usb 6-1: config 0 descriptor?? [ 116.193647][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input46 [ 116.332201][ T6258] input: syz0 as /devices/virtual/input/input47 [ 116.488854][ T4691] bcm5974 6-1:0.0: could not read from device [ 116.497379][ T4691] bcm5974 6-1:0.0: could not read from device [ 116.503362][ T10] usb 6-1: USB disconnect, device number 7 [ 116.514709][ T6232] bcm5974 6-1:0.0: could not read from device [ 116.861087][ C3] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 116.866030][ C3] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 116.871448][ C3] CPU: 3 PID: 6263 Comm: syz.3.273 Not tainted 6.10.0-syzkaller-08676-g720261cfc732 #0 [ 116.876094][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.880782][ C3] RIP: 0010:__dev_flush+0x49/0x1e0 [ 116.882653][ C3] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 98 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 2f 48 8d 5d 80 48 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 69 01 00 00 48 8b 45 00 49 39 ef 4c 8d 60 80 0f [ 116.889625][ C3] RSP: 0018:ffffc900005f0c90 EFLAGS: 00010246 [ 116.892186][ C3] RAX: dffffc0000000000 RBX: ffffffffffffff80 RCX: ffffffff88cfc09b [ 116.895468][ C3] RDX: 0000000000000000 RSI: ffffffff81b49c96 RDI: ffffc90007f47a58 [ 116.898847][ C3] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 116.902322][ C3] R10: 0000000000000010 R11: 0000000000000000 R12: ffffc90007f47a48 [ 116.905634][ C3] R13: ffff88802c3404c8 R14: ffffc90007f47a58 R15: ffffc90007f47a58 [ 116.908998][ C3] FS: 0000000000000000(0000) GS:ffff88802c300000(0063) knlGS:00000000f5d06b40 [ 116.912397][ C3] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 116.914955][ C3] CR2: 0000000020012000 CR3: 0000000028d66000 CR4: 0000000000350ef0 [ 116.917869][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.921360][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.924799][ C3] Call Trace: [ 116.926263][ C3] [ 116.927578][ C3] ? show_regs+0x8c/0xa0 [ 116.929937][ C3] ? die_addr+0x4f/0xd0 [ 116.931772][ C3] ? exc_general_protection+0x155/0x230 [ 116.934210][ C3] ? asm_exc_general_protection+0x26/0x30 [ 116.936695][ C3] ? xdp_do_check_flushed+0x21b/0x4e0 [ 116.938939][ C3] ? __dev_flush+0x16/0x1e0 [ 116.940744][ C3] ? __dev_flush+0x49/0x1e0 [ 116.942539][ C3] xdp_do_check_flushed+0x26b/0x4e0 [ 116.945048][ C3] __napi_poll.constprop.0+0xd1/0x550 [ 116.947920][ C3] net_rx_action+0xa92/0x1010 [ 116.950242][ C3] ? __pfx_net_rx_action+0x10/0x10 [ 116.952513][ C3] ? __pfx_rcu_is_watching+0x10/0x10 [ 116.954660][ C3] ? trace_rcu_utilization+0x100/0x160 [ 116.956918][ C3] handle_softirqs+0x216/0x8f0 [ 116.958915][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 116.961256][ C3] ? irqtime_account_irq+0x18d/0x2e0 [ 116.963463][ C3] ? tun_get_user+0x1d66/0x3c20 [ 116.965556][ C3] do_softirq+0xb2/0xf0 [ 116.967369][ C3] [ 116.968655][ C3] [ 116.969924][ C3] __local_bh_enable_ip+0x100/0x120 [ 116.972154][ C3] ? tun_get_user+0x1d66/0x3c20 [ 116.974230][ C3] tun_get_user+0x1d80/0x3c20 [ 116.976246][ C3] ? __pfx_tun_get_user+0x10/0x10 [ 116.978369][ C3] ? find_held_lock+0x2d/0x110 [ 116.980610][ C3] ? __pfx_lock_release+0x10/0x10 [ 116.983138][ C3] tun_chr_write_iter+0xe8/0x210 [ 116.986467][ C3] vfs_write+0x6b6/0x1140 [ 116.988585][ C3] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 116.991262][ C3] ? __pfx_vfs_write+0x10/0x10 [ 116.991282][ C3] ? __fget_files+0x256/0x400 [ 116.991309][ C3] ? __fget_light+0x173/0x210 [ 116.997314][ C3] ksys_write+0x12f/0x260 [ 116.999150][ C3] ? __pfx_ksys_write+0x10/0x10 [ 117.001211][ C3] __do_fast_syscall_32+0x73/0x120 [ 117.003317][ C3] do_fast_syscall_32+0x32/0x80 [ 117.005339][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.008021][ C3] RIP: 0023:0xf7f53579 [ 117.009755][ C3] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 117.017873][ C3] RSP: 002b:00000000f5d06530 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 117.021478][ C3] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000020000a00 [ 117.024784][ C3] RDX: 0000000000011dc0 RSI: 00000000f73d9ff4 RDI: 0000000000000000 [ 117.028178][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.031476][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.034814][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.038239][ C3] [ 117.039615][ C3] Modules linked in: [ 117.041667][ C3] ---[ end trace 0000000000000000 ]--- [ 117.044008][ C3] RIP: 0010:__dev_flush+0x49/0x1e0 [ 117.046193][ C3] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 98 01 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 2f 48 8d 5d 80 48 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 69 01 00 00 48 8b 45 00 49 39 ef 4c 8d 60 80 0f [ 117.054070][ C3] RSP: 0018:ffffc900005f0c90 EFLAGS: 00010246 [ 117.056393][ C3] RAX: dffffc0000000000 RBX: ffffffffffffff80 RCX: ffffffff88cfc09b [ 117.059346][ C3] RDX: 0000000000000000 RSI: ffffffff81b49c96 RDI: ffffc90007f47a58 [ 117.062716][ C3] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 117.066044][ C3] R10: 0000000000000010 R11: 0000000000000000 R12: ffffc90007f47a48 [ 117.069381][ C3] R13: ffff88802c3404c8 R14: ffffc90007f47a58 R15: ffffc90007f47a58 [ 117.072980][ C3] FS: 0000000000000000(0000) GS:ffff88802c300000(0063) knlGS:00000000f5d06b40 [ 117.076714][ C3] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 117.079496][ C3] CR2: 0000000020012000 CR3: 0000000028d66000 CR4: 0000000000350ef0 [ 117.082867][ C3] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.086172][ C3] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.090650][ C3] Kernel panic - not syncing: Fatal exception in interrupt [ 117.102977][ C3] Kernel Offset: disabled [ 117.104847][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:25:34 Registers: info registers vcpu 0 CPU#0 RAX=0000000000389fec RBX=0000000000000000 RCX=ffffffff8ae47699 RDX=ffffed1005806fe2 RSI=ffffffff8b904b80 RDI=ffffffff816688bc RBP=fffffbfff1b12af8 RSP=ffffffff8d807e20 R8 =0000000000000000 R9 =ffffed1005806fe1 R10=ffff88802c037f0b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8d8957c0 R14=ffffffff8fe49ad8 R15=0000000000000000 RIP=ffffffff8ae48a8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000325fcff8 CR3=000000005ca70000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000053adec RBX=0000000000000001 RCX=ffffffff8ae47699 RDX=ffffed1005826fe2 RSI=ffffffff8b904b80 RDI=ffffffff816688bc RBP=ffffed1002c60910 RSP=ffffc90000477e08 R8 =0000000000000000 R9 =ffffed1005826fe1 R10=ffff88802c137f0b R11=0000000000000001 R12=0000000000000001 R13=ffff888016304880 R14=ffffffff8fe49ad8 R15=0000000000000000 RIP=ffffffff8ae48a8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002002a000 CR3=0000000058b70000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc900031df008 RCX=ffffffff81d58038 RDX=000000000002ec4b RSI=ffffffff907d344c RDI=ffffffff9127b844 RBP=0000000000000001 RSP=ffffc900031def88 R8 =0000000000000004 R9 =000000000000d580 R10=00000000000a2000 R11=dffffc0000000000 R12=ffffffff81d58038 R13=ffffffff907d344c R14=000000000002ec4a R15=ffffc900031df03d RIP=ffffffff813c9132 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f6f8faf8d00 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f087b78000 CR3=0000000019f0c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=6a05fec76a05fec7 6a05fec76a05fec7 6a05fec76a05fec7 6a05fec76a05fec7 6a05fec76a05fec7 6a05fec76a05fec7 6a05fec76a05fec7 6a05fec76a05fec7 ZMM22=995c6f3a995c6f3a 995c6f3a995c6f3a 995c6f3a995c6f3a 995c6f3a995c6f3a 995c6f3a995c6f3a 995c6f3a995c6f3a 995c6f3a995c6f3a 995c6f3a995c6f3a ZMM23=08e8154c08e8154c 08e8154c08e8154c 08e8154c08e8154c 08e8154c08e8154c 08e8154c08e8154c 08e8154c08e8154c 08e8154c08e8154c 08e8154c08e8154c ZMM24=cae3200dcae3200d cae3200dcae3200d cae3200dcae3200d cae3200dcae3200d cae3200dcae3200d cae3200dcae3200d cae3200dcae3200d cae3200dcae3200d ZMM25=9ac7420d9ac7420d 9ac7420d9ac7420d 9ac7420d9ac7420d 9ac7420d9ac7420d 9ac7420d9ac7420d 9ac7420d9ac7420d 9ac7420d9ac7420d 9ac7420d9ac7420d ZMM26=19d18c8f19d18c8f 19d18c8f19d18c8f 19d18c8f19d18c8f 19d18c8f19d18c8f 19d18c8f19d18c8f 19d18c8f19d18c8f 19d18c8f19d18c8f 19d18c8f19d18c8f ZMM27=838eb6c3838eb6c3 838eb6c3838eb6c3 838eb6c3838eb6c3 838eb6c3838eb6c3 838eb6c3838eb6c3 838eb6c3838eb6c3 838eb6c3838eb6c3 838eb6c3838eb6c3 ZMM28=000001700000016f 0000016e0000016d 0000016c0000016b 0000016a00000169 0000016800000167 0000016600000165 0000016400000163 0000016200000161 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=dd050000dd050000 dd050000dd050000 dd050000dd050000 dd050000dd050000 dd050000dd050000 dd050000dd050000 dd050000dd050000 dd050000dd050000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fc1315 RDI=ffffffff94da62c0 RBP=ffffffff94da6280 RSP=ffffc900005f0678 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=502033203a555043 R12=0000000000000000 R13=0000000000000036 R14=ffffffff84fc12b0 R15=0000000000000000 RIP=ffffffff84fc133f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c300000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020012000 CR3=0000000028d66000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000