last executing test programs: 4.011002582s ago: executing program 3 (id=206): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',=']) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000340)=[{}, {0x80000000}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000400)={{r2, 0x0, 0x3}}) 3.937014401s ago: executing program 3 (id=207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0xc}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0x15f, 0xfffd}, @sack_perm, @window={0x3, 0x5, 0xfffc}, @timestamp, @timestamp], 0x6) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400448c0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000280)="459d4185c052855f1a1ff3", 0xb, 0x0, 0x0, 0x6) r6 = openat$sndseq(0xffffff9c, &(0x7f0000000100), 0x90800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc04c5349, &(0x7f00000003c0)={0x8, 0x101, 0x1000}) unshare(0x10000100) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x2001, 0x644501) 2.899843511s ago: executing program 2 (id=216): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_io_uring_setup(0x494, &(0x7f0000000200)={0x0, 0x7278, 0x400, 0x1, 0x385}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x26c8, 0x0, 0x1, 0x0, 0x10) write$6lowpan_enable(r1, 0x0, 0x0) r6 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100), &(0x7f0000000000)) r7 = eventfd2(0x3, 0x800) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000140)=r7, 0x1) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28d, 0x0, r6}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r12}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000002c0)={0x10001, 0x5, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sigaltstack(0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x1}) r13 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r13, 0x2285, &(0x7f0000000280)={0x53, 0xfffffffffffffffc, 0x21, 0x93, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="bda0a15ac7201c3f8fbc4dbac9282168c2d7e736a6b295496ce89e38e2c724267c", 0x0, 0x8, 0x10004, 0x2, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x4c) 2.830119432s ago: executing program 3 (id=217): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xa) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x14) creat(&(0x7f0000000000)='./file0\x00', 0x6e) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_INIT(r6, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x8004000, 0x7, 0x8, 0x8000, 0x4, 0x0, 0x0, 0x10, 0x5}}, 0x50) write$FUSE_GETXATTR(r6, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1a1842, 0x22) writev(r8, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2000}], 0x1) syz_usbip_server_init(0x5) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x80, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x62, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x19}, @device_b, @device_a, @initial, {0xf, 0xfc4}}, 0xfff, @random=0x5, 0x1000, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x9}, @void, @void, @val={0x5, 0x3, {0x2, 0xc9, 0x9}}, @val={0x25, 0x3, {0x1, 0x68, 0x1}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x8, 0xa5, 0x5}}, @val={0x2d, 0x1a, {0x8, 0x2, 0x1, 0x0, {0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1}, 0x1, 0xc396, 0xa}}, @void, @void, @void}}]}, 0x80}, 0x1, 0x0, 0x0, 0x804}, 0x0) 2.236029774s ago: executing program 3 (id=220): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x0, 0x1}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0xc0041) syz_usb_connect(0x0, 0x24, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x34, 0x22, 0x3e, 0x10, 0x5ac, 0x274, 0xf9c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x45, 0x0, 0x0, 0x3, 0x63, 0x2}}]}}]}}, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000000c0)) write(r1, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) 1.969303822s ago: executing program 1 (id=221): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x4080) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x8, 0x0, 0x0, 0xfffffffc}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = dup(r4) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r6, 0x0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r5, &(0x7f0000001740)={0x2020}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r8, 0x100, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x8000) r9 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r9, 0xc034564b, &(0x7f0000000100)={0x0, 0x50565559, 0x780, 0x2000438, 0x2, @discrete={0x6, 0xf94}}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x2000}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xff}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SIOCGSKNS(r10, 0x894c, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r11) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r12, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) ioctl$NBD_DO_IT(r0, 0x40041271) 1.907778241s ago: executing program 0 (id=223): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x3, 0x12) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T \x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) 1.907545476s ago: executing program 0 (id=224): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x10000004}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r4 = socket$kcm(0x29, 0x4, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="5ba0019718c5dba253def9e644c64daf9c0c5b206533257c0d72e5fdb623a4e45e8bf158284afc16a6dc93dbcf6cd8234f0c531b465b70de6b1c9f45e3927bd0f0e3d192ef6cb499acf4830d69df9a9a3afde75a170db8b974d6354c6ae570bd244aa4ec24043a857d91d2e3c117c9261d5bf6e7", 0x74}], 0x1, &(0x7f0000001900)=[{0xbc, 0x107, 0x6df, "2fcd082c124236136f72ad531ee410a14518f49bf4eb25a170a6de44935a68f78ace8ecbf97fd9ec58a15d5fbddc2c7cb8541b5a044c28bae09038c91a281b522ab27f02365fbdfa3b122d27c8ce919fbec1c0c07414d26600817071b3b1e83263b9212bbc9fe7db7b8ca23543ca78ed64884d1d307ecfb726e56cfc409bd0c203cb34680c4e0b80b521bcee782aff6d906a2e00371104e3e34ade21bea276b4e3a767a31f69fcec1aeab61c7c10"}, {0x100c, 0x10a, 0xfffffff7, "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"}, {0xe8, 0x118, 0x9, "9b43ff105aa0566a33bc037a8a3385acdded9489c9766e483bf18ec9f9f6a7391b269cc6e4422e7067ec77284fe544bd3005c55ea57d76460ef6e2efd85f4228b9cd60066dd5697ddfcbc45f9f8a09dd134b2af5cc3fefdb318e881f781b6c57d96dac7a9aa888d877b94d2bdd367b929c4036a241d3544bf0815d9469b8f1be4548402f13ef3df71f8d6061a94bf3cf19a0a505794d8f925369d36df756b6a557c26811e32ab0c0acc0a812d66ff6c3886c90a3c2ab86beef39d72e5ce24b02a0f363c0b2ef8df6c7e15400f807a6a25aa96c07c04d662c1571"}, {0xe0, 0x10e, 0xfffffffe, "ebf64c01c262a84f95de1358cb29d7d8dbc2d180003d68009285e3a4c98fea0d109527fff81a8a06c197d3c76a14de8f32561d35f881e10f132ec734c09e9b12f7f317975af810f21574502c38f70d005e90c73c21c201be4a917cf9a3a022862c5c8adf7e02028f19a0032e7551374ef94c73f2b478e211a314f6f3624189815d81682c25af07b7e9a09450af119d21e09a5052b65fafd9dac25276384f62cb503aed9f76076b72210117da1019a044fe6ec4f883a87ba2c47897a95a588f35a45d66fcc3c180f67e26a8b8cd10d9061baa"}, {0xe8, 0x81, 0xfffffffa, "65d0833e5310c1375f77ca65da9c8c15b65c70ccdaa1647743cc52babbcbab9c472fb1e5a15e6ca62250132491758ede7a2ebb077143d765b7df3d3639917ddf1a8da148cfed293b6654d8edf8fed4a0f5e5bafe52e859e434570bee48b649721ad5a3fd5a6677f94b67c97928331e034204f0976270f381afaa1e000e70e8ae2dff163d28ff0cb33725237e125c2f6f40be0b36ea78ccc2827ef951e04901ac87115d3233f00a837704ba8352c175ebf91710fb3c273aec06255780587cbd55565109616c1a3f3a2b9363a66dd70dd8478a7ff7a5d47940cf"}, {0x60, 0x119, 0x3, "c938e277085110b43f696f3b1b9f06ff1f721b3cb73d973cef58c9a40b483c695dae39b5abbca973b6dff58353bed8cf845de4a0fd5cb50778186f6b54e91ca70ac5433ad1f71a1c9a8ebacc9ff55b5cf4ef59"}], 0x13d8}, 0x8004) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000b0001200000050009"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 1.826780634s ago: executing program 0 (id=225): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x800, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() unlinkat(0xffffffffffffffff, 0x0, 0x200) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000c80)={r3, 0x0, {0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x9, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r5 = dup2(r3, r1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x42c5, r3}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) r6 = dup(r4) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r8, 0x5437, 0x0) read(r8, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000200)=0xfff) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f00000001c0)) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000003c0)={0x0, 0x5, 0x1, 0x1}) 1.814042417s ago: executing program 1 (id=226): setresuid(0xee01, 0xee00, 0x0) r0 = shmget(0x3, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000c215000008009f000d000000080026000816"], 0x40}}, 0x0) 1.730272548s ago: executing program 1 (id=227): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r2, 0x4068aea3, &(0x7f0000000040)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x800000, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1c, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r4, 0x9b99000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000300)) r8 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB="000000000000000408000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x40, 0x8, 0x7, 0x8, {{0xd, 0x4, 0x1, 0x5, 0x34, 0x64, 0x0, 0x3, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @ssrr={0x89, 0xfffffffffffffe2e, 0x4b, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, @empty, @empty, @remote]}, @end]}}}}}) 1.098311023s ago: executing program 0 (id=228): gettid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xe22c0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'team0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3}) 1.097417301s ago: executing program 0 (id=229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="000003000000f0ffffff00000000000000000000516fda795d97c506d578787fa8533fc2c8ef529e50f0290f39da2f1a33a3409da947e0d173f7dcd0afa27a2959423b120ccdaf7a4a9d53038ef8c9634d127beb0a305a8961a2b12dc4883f27464a334cbc5102f7670f0bd4e184cee19db2b6eaf311605b6d17c9318bbe98b69f520bd8a29e0c25a1a2bf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}}, 0x0, 0x8000}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="11"], 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @remote}, 0x3b, r7}) epoll_create(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xf8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) syz_emit_ethernet(0x25f, &(0x7f0000000580)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @random="8452d7a63aa0", @val={@void, {0x8100, 0x5, 0x1, 0x1}}, {@mpls_mc={0x8848, {[{0x2e, 0x0, 0x1}, {0x4}], @ipv6=@tipc_packet={0x1, 0x6, "1189b4", 0x21d, 0x6, 0x1, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, {[@hopopts={0x2f, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7}]}, @fragment={0x3c, 0x0, 0x1, 0x1, 0x0, 0xa, 0x68}, @dstopts={0x3c, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xf}, @jumbo={0xc2, 0x4, 0x3}, @ra, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @routing={0x2b, 0xc, 0x1, 0x2, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x5}]}, @srh={0x1d, 0x6, 0x4, 0x3, 0x3, 0x60, 0x1, [@rand_addr=' \x01\x00', @mcast2, @mcast2]}, @srh={0x2e, 0xe, 0x4, 0x7, 0x4, 0x58, 0x9, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @empty, @mcast1, @loopback, @empty]}, @fragment={0x2c, 0x0, 0x7, 0x1, 0x0, 0x1c, 0x68}, @routing={0x0, 0x12, 0x2, 0x21, 0x0, [@remote, @private2, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @private0, @dev={0xfe, 0x80, '\x00', 0x20}, @remote]}], @payload_mcast={{{{{{0x2d, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1, 0x7fff, 0x9, 0x3, 0x4e24, 0x4e23}, 0x1, 0x4}}, 0x4}}, [0x0]}}}}}}}, &(0x7f0000000380)={0x1, 0x3, [0x4ca, 0x68d, 0x5cf, 0x616]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r9, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r10, @ANYBLOB="100a27bd7000fedbdf250700000050000180380004001400010002004e24ac1414180000000000000000200002000a0000030000010000000000000000000000000000000001050000000c00028008000200ffffffff080003003ecb00002c00078008000100ff0100000c002051b0df4fb551e5c4000000000000000c000400ff070000000000000800020001000080"], 0x90}, 0x1, 0x0, 0x0, 0x880}, 0x880) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r14, 0x0) 1.066352769s ago: executing program 2 (id=230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000008480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000085c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000088c0)={&(0x7f0000000300)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0xc004) 960.344592ms ago: executing program 2 (id=231): r0 = syz_open_dev$cec(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="90f97a23cd18167c47214c6d427a303184ef6eeaea25fd694e73f5b5182738da093a520f161d2aa0c8ef03b60510aa5abe0352decb93c74857714eef9fb6dea4014242b3cb0967c777a93d497dc6f017ba6235a39fd82993f7ebaea86bb49bf737b334d69329e2dbd6ced6dd6f52ed4b5f1d5e0e8298", @ANYRESOCT=r0, @ANYRESDEC=r0], &(0x7f0000000240)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000001c0)={r3}) 860.314993ms ago: executing program 0 (id=232): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000780)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x9, 0x0, 0x100000}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) io_uring_setup(0x773d, &(0x7f0000000a40)={0x0, 0x0, 0x1000, 0x2, 0x3bc}) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x6, 0x0, 0x5, 0x0}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x9100, &(0x7f0000000200)={0x81, 0x0, 0x100000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, 0x0) exit(0x5) exit(0x8) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) exit(0x6) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0xee, 0x12) 857.798276ms ago: executing program 3 (id=233): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0xffe4, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x1200, 0x0, 0x0, 0x200000}, 0x90) 749.979847ms ago: executing program 3 (id=234): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) epoll_create(0x10000e9) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x6, 0xfffffffffffffde5, &(0x7f0000000600)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f00000007c0)={0x0, 0xf453, 0x80, 0x0, 0x2f}, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r2, 0x47f6, 0x880e, 0x0, 0x0, 0x0) (fail_nth: 2) 749.309076ms ago: executing program 1 (id=235): add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000140)="1e4ea861a32adce984fdbf4447738b1392e54d8a321302485cdea2e2c2e43ea34fb9fa393e1a700f7b56c748316f884115dfbcd8821408d520b082c92b07211607bfa709ab2d1b2b6c60d5a653589679a47890164328a8af07591a0f54a3be1a50e74ac07cabefca074718936189fd39c807da8bf8851ffacaa1fc516894c5170e37d77500a6f76de1e4f27771affe0c06c6bbd410ca800138587a07cdc98f5d710a807b4ddd19bbd1ebcc23033e3dd6b7fe92eedcf3d02fe8cb08c60195d377933bcc693df172f59e598921ab41daed37f3", 0xd2, 0xfffffffffffffffa) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb00000000"}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085000000080000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x88, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x10000000, 0xffffffffffffffff, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21, 0x0, 0x1120081, 0x1, 0x0, 0xfffffffd}}, 0x50) (async) r2 = open(&(0x7f0000000380)='./file0\x00', 0x6ec58fa5834dfb19, 0xdb) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x1c) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) (async) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) 744.915247ms ago: executing program 1 (id=236): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000300)=""/235, &(0x7f0000000000)=0xeb) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7ffefffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x84, &(0x7f0000000100)={0x0, 0x3f7, 0x3, 0x0, 0x2, 0x7fff, 0x9, 0x7, {0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x4, 0x7, 0x6, 0x1, 0x9}}, &(0x7f0000000040)=0xb0) epoll_create(0x10000e9) r4 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000090f000000000000009500000100000000"], &(0x7f0000000ec0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, 0x10) fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="cbb28cc705bc16c7fa3abe30e2b558935755f34e48fb7b5fbaa09fb7d7ef97c1790df30d1f40fba30e5158fe22f9f78457d94cebf64d122624b9e896e75f056b0905204479fb1629772704c74993b5940000fa5969741b982c9c469fc30dd24e67e2e00b059771583a6e7b696ed9dc64eb9391b7241da6a945eabf9f721c710d6a07b9bed88a2bc1e07308a10103a5350f9c8f9fc4f5a12bdd2d2a221703ad7a56072e9202eb0ef578ebebbac4455b5c2ffff9ce6900"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r7, &(0x7f0000000cc0)=[{{&(0x7f0000000700)=@un=@file={0x1, './file0\x00'}, 0x80, 0x0}}], 0x1, 0x0) 200.443343ms ago: executing program 1 (id=237): gettid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xe22c0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'team0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3}) 90.114566ms ago: executing program 2 (id=238): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000020000000900010073797a300000000020000000000c01080000000000000000020000000900010073797a310000000014000000020a01020000000000000000000000002c000000180a01"], 0xa8}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0xc0f85403, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 89.830773ms ago: executing program 2 (id=239): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="7116000000000000b7070000000100004870000000ffffffd70700001000000095000000000000002ba72804605789bfbc7174159805d30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc162619b3af8a4e825d922c65e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bf3d6b2e28f90c52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d350100c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64dc4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a7e008f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d054c744fd06a57f7bcb8fb58c512d0884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637c335892b420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072da00f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce6459200000067c38a656d326cff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b52f79a3f7306436762dd1a08ce023e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac3ffff1ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d0dbaec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f6eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032bd2649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a604e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b0104000000000000a4c0a1d44d9dfd82896f5623e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f330a5e05b59db781cf9cf33752836fff6fcbf379332357c47f3597e084d0779b3cbfb312925a8151e338eca2c80600000000ac5992a4c7ec0b741f117f628562c3b27483ad6d733ffcbfca0ba805af95f8985901b0b8f918efa139e984fe872f22f5f094e3fbdf45ec2076710d8c787156b3e05774ac977c3db6288d252b2a73c84a07d73f9721e52f5b5d331ebb7db0a03be93fd96d7355405e954b8d6d0efcd6c37d869086efe15e30b7b6b2b37647e265a62fccfeb16f12f109dc5e405b53d1737b7a2620943affaa2eb07585e23e0513df2f83218f9f3ed9ba3026bcfbe5e9b36ab5b052886227827b983c0fe8da495f1ea7b5c35e42ff83f6e5e5a71ba3000000000000000000f73ffcd0c92a30304d5142441978012e2e6e1c45c28713fa5354f1fd124598688dffa0890dc8c6b4d9732347896d17d4efe12c20c706dcd4601135c553713cc4000a6690a2eed2e680db50589a659a240afc2c1eaa381a4135933a8d7abff2a7882ff50eabbe493ae54f71473eb65fe8e850f36d096a9c7dfd8fd2a35234bef2ba4755e10489b2508e4a9d911135b6c802e16e23fc7a3c3c0f5939b842bca82db931e5ba180f1eed5f539371105aee1d06af045892e18eb5dfd361f6d89fff0b82da98fa7aa90fe92b59887fda0ed8d375ba13fe3f63e69e417c89e31fdf55b9c2e9e0398c661d4c4ce0804971f3"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2}, 0x48) 0s ago: executing program 2 (id=240): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=@newqdisc={0x14c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7ff9}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "bc501f300503d77fbe7533de051cd77b1a8e3fe8f1204c7e0ff6770d957e3a6e32fb7f3b98f4ef075ca55b8c13cb265b8a88000e17d655a15331a6930aa9e7d243cc187c6a6cf75a043ef7aeb8a68230632278ef98e3c2ac111354d88c738ecd156d79be5a2f4309975957f0bcb0f47ee92d8bda25ed824fd7ee7ebcdfe43a6acf8276da95940c23ef9823b37c848493604ef471ba4f60a7c75822e76ccf8617c693d9dfc0bd4f48ac287b145f71442a655203a6a13cd6046ef39f57e208032d8b849663df9d38171e219c418624a6797d2d81f24153bba0ad5cc2a903d5a33cb5f653258b39b5e4ae76f08789996dfc3acacdaa848f36a52b663a4449c3d3ca"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x8, 0x30, 0x0, 0x2, 0x20, 0x7}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) fsopen(&(0x7f0000000100)='udf\x00', 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000440)="b805000000b9c30e00000f01d966b825000f00d06445d32a420f18147ec40260f3130f001866baf80cb858101b8cef66bafc0cb000eec744240034000000c74424024e4ba7b4ff1c2448b800700000000000000f23c80f21f8350000f0000f23f8420f79bb07000000", 0x69}], 0x1, 0x3e, 0x0, 0x0) (async) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x2c0140, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x0, 0xb, 0xf337a68bb8588db, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x24}}, 0x0) (async, rerun: 64) mremap(&(0x7f00005a9000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000292000/0x4000)=nil) (async) io_setup(0x1, &(0x7f00000004c0)=0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb890000000000000000000000000001fc0200000000000000000000000000005c020000000000000401000101fd"], 0x0) io_submit(r6, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r5, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x1) (rerun: 64) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:45692' (ED25519) to the list of known hosts. [ 47.774584][ T5925] cgroup: Unknown subsys name 'net' [ 47.988506][ T5925] cgroup: Unknown subsys name 'cpuset' [ 47.996818][ T5925] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.060814][ T5925] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.980548][ T5947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.985831][ T5946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.985995][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.988702][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.991627][ T5953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.994080][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.997482][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.998510][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.001588][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.004735][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.008538][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.010357][ T5954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.010504][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.011537][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.014044][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.016287][ T5957] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.026811][ T5957] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.030527][ T5957] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.032227][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.036877][ T5956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.367156][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 53.431532][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 53.511051][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 53.564144][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 53.602148][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.605511][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.607967][ T5950] bridge_slave_0: entered allmulticast mode [ 53.612035][ T5950] bridge_slave_0: entered promiscuous mode [ 53.624745][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.627820][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.631189][ T5950] bridge_slave_1: entered allmulticast mode [ 53.635647][ T5950] bridge_slave_1: entered promiscuous mode [ 53.784416][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.791482][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.794207][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.796753][ T5952] bridge_slave_0: entered allmulticast mode [ 53.799767][ T5952] bridge_slave_0: entered promiscuous mode [ 53.808665][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.843475][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.846137][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.848567][ T5952] bridge_slave_1: entered allmulticast mode [ 53.851458][ T5952] bridge_slave_1: entered promiscuous mode [ 53.927366][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.929841][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.932743][ T5941] bridge_slave_0: entered allmulticast mode [ 53.936509][ T5941] bridge_slave_0: entered promiscuous mode [ 53.979271][ T5950] team0: Port device team_slave_0 added [ 53.982642][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.986978][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.989229][ T5941] bridge_slave_1: entered allmulticast mode [ 53.992006][ T5941] bridge_slave_1: entered promiscuous mode [ 53.997165][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.037397][ T5950] team0: Port device team_slave_1 added [ 54.071934][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.075539][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.078125][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.080894][ T5942] bridge_slave_0: entered allmulticast mode [ 54.084264][ T5942] bridge_slave_0: entered promiscuous mode [ 54.157339][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.160569][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.163804][ T5942] bridge_slave_1: entered allmulticast mode [ 54.167171][ T5942] bridge_slave_1: entered promiscuous mode [ 54.171398][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.176173][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.187349][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.194645][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.200695][ T5952] team0: Port device team_slave_0 added [ 54.219803][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.223375][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.234418][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.241340][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.245648][ T5952] team0: Port device team_slave_1 added [ 54.342249][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.349436][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.356874][ T5941] team0: Port device team_slave_0 added [ 54.361303][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.364166][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.372595][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.424392][ T5941] team0: Port device team_slave_1 added [ 54.444586][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.446829][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.457029][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.496028][ T5942] team0: Port device team_slave_0 added [ 54.515094][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.518218][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.528434][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.534357][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.536793][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.549344][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.556914][ T5950] hsr_slave_0: entered promiscuous mode [ 54.559755][ T5950] hsr_slave_1: entered promiscuous mode [ 54.565370][ T5942] team0: Port device team_slave_1 added [ 54.627871][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.630308][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.638721][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.643990][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.646390][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.655171][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.684612][ T5952] hsr_slave_0: entered promiscuous mode [ 54.687709][ T5952] hsr_slave_1: entered promiscuous mode [ 54.691316][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.695342][ T5952] Cannot create hsr debugfs directory [ 54.859904][ T5941] hsr_slave_0: entered promiscuous mode [ 54.862391][ T5941] hsr_slave_1: entered promiscuous mode [ 54.865469][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.868149][ T5941] Cannot create hsr debugfs directory [ 54.932698][ T5942] hsr_slave_0: entered promiscuous mode [ 54.936651][ T5942] hsr_slave_1: entered promiscuous mode [ 54.939192][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.942142][ T5942] Cannot create hsr debugfs directory [ 55.055112][ T63] Bluetooth: hci3: command tx timeout [ 55.063860][ T63] Bluetooth: hci0: command tx timeout [ 55.063969][ T5956] Bluetooth: hci2: command tx timeout [ 55.065735][ T5306] Bluetooth: hci1: command tx timeout [ 55.252845][ T5952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.273023][ T5952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.278441][ T5952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.294159][ T5952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.315696][ T5950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.322127][ T5950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.329249][ T5950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.335230][ T5950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.389260][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.401321][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.405553][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.410575][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.474999][ T5942] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.494570][ T5942] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.498623][ T5942] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.504640][ T5942] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.555859][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.572536][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.586818][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.604481][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.607640][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.621342][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.623450][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.634151][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.646533][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.656516][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.658840][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.668348][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.671723][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.708279][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.728501][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.730848][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.749421][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.757986][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.760995][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.802710][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.823327][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.825770][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.845336][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.848223][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.877302][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.886796][ T5942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.926434][ T5952] veth0_vlan: entered promiscuous mode [ 55.932113][ T5952] veth1_vlan: entered promiscuous mode [ 55.962474][ T5952] veth0_macvtap: entered promiscuous mode [ 55.979720][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.984496][ T5952] veth1_macvtap: entered promiscuous mode [ 55.992926][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.014132][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.024531][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.031859][ T5952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.036672][ T5952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.040719][ T5952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.044729][ T5952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.094899][ T5950] veth0_vlan: entered promiscuous mode [ 56.116181][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.129260][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.130695][ T5950] veth1_vlan: entered promiscuous mode [ 56.135367][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.160006][ T5941] veth0_vlan: entered promiscuous mode [ 56.173373][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.173816][ T5941] veth1_vlan: entered promiscuous mode [ 56.176426][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.187445][ T5942] veth0_vlan: entered promiscuous mode [ 56.207065][ T5950] veth0_macvtap: entered promiscuous mode [ 56.210871][ T5942] veth1_vlan: entered promiscuous mode [ 56.217554][ T5950] veth1_macvtap: entered promiscuous mode [ 56.228063][ T5952] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.236610][ T5941] veth0_macvtap: entered promiscuous mode [ 56.242789][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.255321][ T5941] veth1_macvtap: entered promiscuous mode [ 56.268275][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.279450][ T5942] veth0_macvtap: entered promiscuous mode [ 56.287092][ T5950] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.290640][ T5950] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.295072][ T5950] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.298677][ T5950] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.307350][ T5942] veth1_macvtap: entered promiscuous mode [ 56.315989][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.333036][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.346737][ T5941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.349782][ T5941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.352822][ T5941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.356611][ T5941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.367784][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.384311][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.396544][ T5942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.396771][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.400494][ T5942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.400533][ T5942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.403115][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.406255][ T5942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.457997][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.461729][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.498388][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.501402][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.531542][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.533584][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.535139][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.537338][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.571683][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.575596][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.613883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.816884][ T6043] Zero length message leads to an empty skb [ 56.995240][ T6045] program syz.3.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.134574][ T5956] Bluetooth: hci1: command tx timeout [ 57.137496][ T5956] Bluetooth: hci0: command tx timeout [ 57.137858][ T63] Bluetooth: hci3: command tx timeout [ 57.138512][ T5306] Bluetooth: hci2: command tx timeout [ 57.324416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.407300][ T6050] trusted_key: encrypted_key: insufficient parameters specified [ 57.412606][ T6050] trusted_key: encrypted_key: insufficient parameters specified [ 57.501858][ T6054] netlink: 'syz.1.9': attribute type 1 has an invalid length. [ 57.576870][ T6057] gretap1: entered promiscuous mode [ 57.632796][ T6054] 8021q: VLANs not supported on ip_vti0 [ 57.783744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.786800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.790562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.796938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.800102][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.804193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.807314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.810517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.163926][ T6078] sp0: Synchronizing with TNC [ 58.379331][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 59.149948][ T6096] Bluetooth: MGMT ver 1.23 [ 59.214223][ T5956] Bluetooth: hci0: command tx timeout [ 59.214294][ T5957] Bluetooth: hci2: command tx timeout [ 59.216073][ T5956] Bluetooth: hci3: command tx timeout [ 59.218388][ T5957] Bluetooth: hci1: command tx timeout [ 59.252198][ T6099] 9p: Unknown Cache mode or invalid value fscach [ 61.294429][ T5957] Bluetooth: hci3: command tx timeout [ 61.294627][ T63] Bluetooth: hci2: command tx timeout [ 61.296986][ T5957] Bluetooth: hci0: command tx timeout [ 61.305910][ T5957] Bluetooth: hci1: command tx timeout [ 61.497479][ T6126] netlink: 'syz.2.24': attribute type 4 has an invalid length. [ 61.557252][ T6126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 61.924171][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 62.903734][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.926362][ T6153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.30'. [ 63.057908][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.063631][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 63.068613][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 63.071865][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.078880][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.083126][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.093985][ T24] usb 5-1: config 0 descriptor?? [ 63.555200][ T24] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 63.561913][ T24] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 63.575740][ T24] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 63.750750][ T6167] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.248754][ T6177] bridge_slave_0: left allmulticast mode [ 64.251250][ T6177] bridge_slave_0: left promiscuous mode [ 64.256852][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.285338][ T6177] bridge_slave_1: left allmulticast mode [ 64.293312][ T6177] bridge_slave_1: left promiscuous mode [ 64.302207][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.319198][ T6177] bond0: (slave bond_slave_0): Releasing backup interface [ 64.342094][ T6177] bond0: (slave bond_slave_1): Releasing backup interface [ 64.380352][ T6185] netlink: 'syz.1.36': attribute type 10 has an invalid length. [ 64.416070][ T6186] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.445777][ T6177] team0: Port device team_slave_0 removed [ 64.456081][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'. [ 64.483250][ T6177] team0: Port device team_slave_1 removed [ 64.486067][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.497000][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.530154][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.535975][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.779230][ T6178] bridge_slave_0: left allmulticast mode [ 64.781271][ T6178] bridge_slave_0: left promiscuous mode [ 64.783648][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.807676][ T6178] bridge_slave_1: left allmulticast mode [ 64.809746][ T6178] bridge_slave_1: left promiscuous mode [ 64.811850][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.859606][ T6178] bond0: (slave bond_slave_0): Releasing backup interface [ 64.926393][ T6178] bond0: (slave bond_slave_1): Releasing backup interface [ 65.003912][ T53] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 65.044416][ T6178] team0: Port device team_slave_0 removed [ 65.100961][ T6178] team0: Port device team_slave_1 removed [ 65.127219][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.129824][ T6178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.134161][ T53] usb 5-1: device descriptor read/64, error -32 [ 65.164243][ T6178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.167391][ T6178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.635492][ T53] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 66.113064][ T6193] openvswitch: netlink: Key type 16144 is out of range max 32 [ 66.116512][ T6179] team0: Mode changed to "loadbalance" [ 66.141684][ T6185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.147109][ T6185] team0: Port device bond0 added [ 66.312544][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 66.321764][ T6187] team0 (unregistering): Port device bond0 removed [ 66.445872][ T6194] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.479902][ T6196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.39'. [ 66.480017][ T6196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.39'. [ 66.607606][ T6194] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.897615][ T6210] "syz.2.43" (6210) uses obsolete ecb(arc4) skcipher [ 66.934791][ T6194] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.970379][ T6033] usb 5-1: USB disconnect, device number 2 [ 67.062941][ T6194] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.224228][ T6194] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.267212][ T6194] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.275959][ T6194] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.283147][ T6194] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.625674][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.45'. [ 67.752916][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 67.776570][ T6220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 67.786964][ T6225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.48'. [ 67.959490][ T6229] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.028009][ T6229] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.109350][ T6229] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.164892][ T6229] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.254878][ T6229] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.266972][ T6229] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.283455][ T6229] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.295871][ T6229] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.643630][ T3231] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 68.726578][ T6236] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 68.807445][ T3231] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.821949][ T3231] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 68.829759][ T3231] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.832545][ T3231] usb 7-1: Product: syz [ 68.837168][ T3231] usb 7-1: Manufacturer: syz [ 68.840795][ T3231] usb 7-1: SerialNumber: syz [ 69.068730][ T3231] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 69.279069][ T3231] usb 7-1: USB disconnect, device number 2 [ 69.287467][ T3231] usblp0: removed [ 69.499995][ T6245] fuse: Bad value for 'fd' [ 69.530397][ T6247] lo speed is unknown, defaulting to 1000 [ 69.533295][ T6247] lo speed is unknown, defaulting to 1000 [ 69.539336][ T6247] lo speed is unknown, defaulting to 1000 [ 69.548990][ T6247] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.563677][ T6247] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 69.575011][ T6249] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 69.607910][ T6247] lo speed is unknown, defaulting to 1000 [ 69.619298][ T6247] lo speed is unknown, defaulting to 1000 [ 69.626392][ T6247] lo speed is unknown, defaulting to 1000 [ 69.642928][ T6247] lo speed is unknown, defaulting to 1000 [ 70.996587][ T6261] netlink: 32 bytes leftover after parsing attributes in process `syz.2.57'. [ 71.003288][ T6261] overlayfs: failed to resolve './file0': -2 [ 71.355346][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 72.604249][ T6280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'. [ 72.793250][ T6268] lo speed is unknown, defaulting to 1000 [ 73.228698][ T6295] netlink: 'syz.2.64': attribute type 4 has an invalid length. [ 73.232164][ T6295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.64'. [ 73.343617][ T1021] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 73.429565][ T54] IPVS: starting estimator thread 0... [ 73.474576][ T6302] netlink: 36 bytes leftover after parsing attributes in process `syz.3.65'. [ 73.478563][ T6302] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 73.513650][ T6301] IPVS: using max 44 ests per chain, 105600 per kthread [ 73.525039][ T1021] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 73.528129][ T1021] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 73.532203][ T1021] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 73.536632][ T1021] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 73.539954][ T1021] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 73.544231][ T1021] usb 5-1: config 0 interface 0 has no altsetting 0 [ 73.555481][ T1021] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 73.558000][ T1021] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 73.560394][ T1021] usb 5-1: Product: syz [ 73.561847][ T1021] usb 5-1: Manufacturer: syz [ 73.563605][ T1021] usb 5-1: SerialNumber: syz [ 73.574085][ T1021] usb 5-1: config 0 descriptor?? [ 73.576913][ T6286] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.584642][ T1021] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 73.590899][ T1021] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 73.888734][ T40] audit: type=1326 audit(1750852931.354:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7fc00000 [ 74.063631][ T1021] usb 5-1: USB disconnect, device number 3 [ 74.071207][ T1021] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 74.302485][ T6315] block device autoloading is deprecated and will be removed. [ 74.519309][ T40] audit: type=1326 audit(1750852931.984:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x7fc00000 [ 74.558916][ T6318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.69'. [ 74.716091][ T6325] bpf: Bad value for 'gid' [ 74.930033][ T6329] lo speed is unknown, defaulting to 1000 [ 75.027987][ T40] audit: type=1326 audit(1750852932.464:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.0.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 75.049624][ T40] audit: type=1326 audit(1750852932.464:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.0.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 75.062049][ T40] audit: type=1326 audit(1750852932.474:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.0.71" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 75.069082][ T40] audit: type=1326 audit(1750852932.474:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.0.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 75.076849][ T40] audit: type=1326 audit(1750852932.474:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.0.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 75.093714][ T40] audit: type=1326 audit(1750852932.474:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.0.71" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 75.113731][ T40] audit: type=1326 audit(1750852932.474:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.0.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 75.133831][ T40] audit: type=1326 audit(1750852932.474:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.0.71" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 75.296890][ T6333] syz.2.72 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 75.445473][ T10] hid-generic 0005:04F3:FFF9.0003: item fetching failed at offset 0/1 [ 75.449811][ T10] hid-generic 0005:04F3:FFF9.0003: probe with driver hid-generic failed with error -22 [ 76.200081][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.202615][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.479830][ T6320] Set syz1 is full, maxelem 65536 reached [ 76.558322][ T6343] ubi31: attaching mtd0 [ 76.582989][ T6343] ubi31: scanning is finished [ 76.586461][ T6343] ubi31: empty MTD device detected [ 76.683031][ T6347] syzkaller1: entered promiscuous mode [ 76.685323][ T6347] syzkaller1: entered allmulticast mode [ 76.702335][ T6347] program syz.2.76 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.755966][ T1109] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 76.759600][ T1109] ata1.00: irq_stat 0x40000000 [ 76.761906][ T1109] ata1.00: failed command: ZAC MANAGEMENT OUT [ 76.765434][ T1109] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 8 [ 76.765434][ T1109] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 76.770511][ T1109] ata1.00: status: { DRDY ERR } [ 76.772550][ T1109] ata1.00: error: { ABRT } [ 76.774510][ T1109] ata1.00: device reported invalid CHS sector 0 [ 76.999577][ T6343] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 77.033442][ T6343] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 77.041961][ T6343] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 77.048215][ T6343] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 77.057700][ T6343] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 77.062221][ T6343] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 77.068459][ T6343] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3422580871 [ 77.078349][ T6343] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 77.204822][ T6351] ubi31: background thread "ubi_bgt31d" started, PID 6351 [ 78.011487][ T6369] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.097174][ T6369] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.171287][ T6369] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.254488][ T6377] ip6t_srh: unknown srh invflags 6BE9 [ 78.257172][ T6377] ubi: mtd0 is already attached to ubi31 [ 78.265329][ T6369] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.522445][ T6369] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.549432][ T6369] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.566908][ T6369] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.584750][ T6369] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.853199][ T6379] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 80.040986][ T6397] Cannot find del_set index 3 as target [ 80.074618][ T6397] vxcan0: tx address claim with dlc 0 [ 80.149343][ T6410] xt_hashlimit: size too large, truncated to 1048576 [ 80.273787][ T6409] netlink: 20 bytes leftover after parsing attributes in process `syz.1.90'. [ 80.366278][ T6415] netlink: 'syz.1.92': attribute type 1 has an invalid length. [ 80.369826][ T6415] netlink: 224 bytes leftover after parsing attributes in process `syz.1.92'. [ 81.774771][ T1109] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 81.779693][ T6430] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 81.779772][ T1109] ata1: failed to read log page 10h (errno=-5) [ 81.784545][ T1109] ata1.00: exception Emask 0x1 SAct 0x1 SErr 0x0 action 0x0 [ 81.787386][ T1109] ata1.00: irq_stat 0x40000000 [ 81.788970][ T1109] ata1.00: failed command: WRITE FPDMA QUEUED [ 81.790902][ T1109] ata1.00: cmd 61/18:00:e6:05:10/00:00:00:00:00/40 tag 0 ncq dma 12288 out [ 81.790902][ T1109] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 81.799475][ T1109] ata1.00: status: { DRDY } [ 81.801627][ T1109] ata1.00: error: { ABRT } [ 81.806057][ T1109] ata1.00: configured for UDMA/100 [ 81.808557][ T1109] ata1: EH complete [ 82.006359][ T6443] syz.1.101 uses obsolete (PF_INET,SOCK_PACKET) [ 82.206873][ T6446] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 82.261525][ T6448] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 82.299264][ T6449] : entered promiscuous mode [ 82.354673][ T6446] /dev/sr0: Can't open blockdev [ 82.535763][ T6448] /dev/sr0: Can't open blockdev [ 83.305715][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.333618][ T54] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 83.463646][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 83.468489][ T24] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 83.474573][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.478876][ T6482] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 83.481961][ T24] usb 5-1: config 0 has no interface number 0 [ 83.484313][ T24] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 83.490253][ T24] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 83.494440][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.499250][ T24] usb 5-1: Product: syz [ 83.501226][ T24] usb 5-1: Manufacturer: syz [ 83.502810][ T24] usb 5-1: SerialNumber: syz [ 83.506460][ T24] usb 5-1: config 0 descriptor?? [ 83.514290][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 83.515488][ T54] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 83.523095][ T54] usb 7-1: config 0 has no interfaces? [ 83.527043][ T54] usb 7-1: config 0 has no interfaces? [ 83.531762][ T54] usb 7-1: config 0 has no interfaces? [ 83.536165][ T54] usb 7-1: config 0 has no interfaces? [ 83.538852][ T54] usb 7-1: config 0 has no interfaces? [ 83.539078][ T24] snd-usb-audio 5-1:0.151: probe with driver snd-usb-audio failed with error -2 [ 83.541575][ T54] usb 7-1: config 0 has no interfaces? [ 83.552152][ T54] usb 7-1: config 0 has no interfaces? [ 83.555064][ T54] usb 7-1: config 0 has no interfaces? [ 83.558989][ T54] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 83.559816][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.562366][ T54] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 83.562382][ T54] usb 7-1: Product: syz [ 83.562391][ T54] usb 7-1: Manufacturer: syz [ 83.579420][ T54] usb 7-1: SerialNumber: syz [ 83.584839][ T54] usb 7-1: config 0 descriptor?? [ 83.612471][ T6487] netlink: 2 bytes leftover after parsing attributes in process `syz.1.113'. [ 83.622086][ T6487] overlayfs: invalid origin (0000) [ 83.844129][ T6462] warning: `syz.2.106' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.850338][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'. [ 83.872239][ T54] usb 7-1: USB disconnect, device number 3 [ 83.978372][ T6494] FAULT_INJECTION: forcing a failure. [ 83.978372][ T6494] name failslab, interval 1, probability 0, space 0, times 1 [ 83.982691][ T6494] CPU: 0 UID: 0 PID: 6494 Comm: syz.3.115 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 83.982707][ T6494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.982714][ T6494] Call Trace: [ 83.982719][ T6494] [ 83.982724][ T6494] dump_stack_lvl+0x16c/0x1f0 [ 83.982745][ T6494] should_fail_ex+0x512/0x640 [ 83.982763][ T6494] should_failslab+0xc2/0x120 [ 83.982776][ T6494] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 83.982793][ T6494] ? skb_clone+0x190/0x3f0 [ 83.982812][ T6494] skb_clone+0x190/0x3f0 [ 83.982829][ T6494] netlink_deliver_tap+0xabd/0xd30 [ 83.982843][ T6494] netlink_unicast+0x5df/0x7f0 [ 83.982856][ T6494] ? __pfx_netlink_unicast+0x10/0x10 [ 83.982871][ T6494] netlink_sendmsg+0x8d1/0xdd0 [ 83.982884][ T6494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.982896][ T6494] ? __import_iovec+0x1dd/0x650 [ 83.982916][ T6494] ____sys_sendmsg+0xa98/0xc70 [ 83.982936][ T6494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.982947][ T6494] ? get_compat_msghdr+0x11a/0x170 [ 83.982970][ T6494] ___sys_sendmsg+0x134/0x1d0 [ 83.982988][ T6494] ? __pfx____sys_sendmsg+0x10/0x10 [ 83.983010][ T6494] ? find_held_lock+0x2b/0x80 [ 83.983030][ T6494] __sys_sendmsg+0x16d/0x220 [ 83.983046][ T6494] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.983078][ T6494] ? rcu_is_watching+0x12/0xc0 [ 83.983095][ T6494] __do_fast_syscall_32+0x7c/0x3a0 [ 83.983121][ T6494] do_fast_syscall_32+0x32/0x80 [ 83.983141][ T6494] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.983155][ T6494] RIP: 0023:0xf7f03579 [ 83.983164][ T6494] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 83.983176][ T6494] RSP: 002b:00000000f500555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 83.983186][ T6494] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800012c0 [ 83.983193][ T6494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.983199][ T6494] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.983205][ T6494] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 83.983211][ T6494] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.983223][ T6494] [ 84.077207][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.084071][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 84.420286][ T5957] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 84.425103][ T5957] CPU: 3 UID: 0 PID: 5957 Comm: kworker/u33:8 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 84.425135][ T5957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.425150][ T5957] Workqueue: hci0 hci_rx_work [ 84.425175][ T5957] Call Trace: [ 84.425185][ T5957] [ 84.425193][ T5957] dump_stack_lvl+0x16c/0x1f0 [ 84.425228][ T5957] sysfs_warn_dup+0x7f/0xa0 [ 84.425255][ T5957] sysfs_create_dir_ns+0x24b/0x2b0 [ 84.425281][ T5957] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 84.425306][ T5957] ? find_held_lock+0x2b/0x80 [ 84.425332][ T5957] ? do_raw_spin_unlock+0x172/0x230 [ 84.425365][ T5957] kobject_add_internal+0x2c4/0x9b0 [ 84.425391][ T5957] kobject_add+0x16e/0x240 [ 84.425411][ T5957] ? __pfx_kobject_add+0x10/0x10 [ 84.425432][ T5957] ? do_raw_spin_unlock+0x172/0x230 [ 84.425463][ T5957] ? kobject_put+0xab/0x5a0 [ 84.425501][ T5957] device_add+0x288/0x1a70 [ 84.425523][ T5957] ? __pfx_dev_set_name+0x10/0x10 [ 84.425544][ T5957] ? __pfx_device_add+0x10/0x10 [ 84.425565][ T5957] ? mgmt_send_event_skb+0x2fb/0x460 [ 84.425603][ T5957] hci_conn_add_sysfs+0x17e/0x230 [ 84.425625][ T5957] le_conn_complete_evt+0x1075/0x1d70 [ 84.425661][ T5957] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 84.425689][ T5957] ? hci_event_packet+0x459/0x11c0 [ 84.425725][ T5957] hci_le_conn_complete_evt+0x23c/0x370 [ 84.425791][ T5957] hci_le_meta_evt+0x354/0x5e0 [ 84.425812][ T5957] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 84.425845][ T5957] hci_event_packet+0x685/0x11c0 [ 84.425873][ T5957] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 84.425894][ T5957] ? __pfx_hci_event_packet+0x10/0x10 [ 84.425928][ T5957] ? kcov_remote_start+0x3c9/0x6d0 [ 84.425960][ T5957] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.425993][ T5957] hci_rx_work+0x2c5/0x16b0 [ 84.426011][ T5957] ? rcu_is_watching+0x12/0xc0 [ 84.426039][ T5957] process_one_work+0x9cc/0x1b70 [ 84.426083][ T5957] ? __pfx_process_one_work+0x10/0x10 [ 84.426120][ T5957] ? assign_work+0x1a0/0x250 [ 84.426149][ T5957] worker_thread+0x6c8/0xf10 [ 84.426185][ T5957] ? __kthread_parkme+0x19e/0x250 [ 84.426211][ T5957] ? __pfx_worker_thread+0x10/0x10 [ 84.426240][ T5957] kthread+0x3c5/0x780 [ 84.426268][ T5957] ? __pfx_kthread+0x10/0x10 [ 84.426297][ T5957] ? rcu_is_watching+0x12/0xc0 [ 84.426318][ T5957] ? __pfx_kthread+0x10/0x10 [ 84.426346][ T5957] ret_from_fork+0x5d4/0x6f0 [ 84.426374][ T5957] ? __pfx_kthread+0x10/0x10 [ 84.426400][ T5957] ret_from_fork_asm+0x1a/0x30 [ 84.426437][ T5957] [ 84.426470][ T5957] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 84.540516][ T5957] Bluetooth: hci0: failed to register connection device [ 85.008997][ T6506] ======================================================= [ 85.008997][ T6506] WARNING: The mand mount option has been deprecated and [ 85.008997][ T6506] and is ignored by this kernel. Remove the mand [ 85.008997][ T6506] option from the mount to silence this warning. [ 85.008997][ T6506] ======================================================= [ 85.405201][ T6033] usb 5-1: USB disconnect, device number 4 [ 85.824809][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 85.991984][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 86.005664][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 86.021388][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 86.025933][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.072924][ T6517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 86.147102][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.359934][ T54] usb 6-1: USB disconnect, device number 2 [ 86.420091][ T6535] netlink: 72 bytes leftover after parsing attributes in process `syz.2.128'. [ 86.492808][ T6537] loop6: detected capacity change from 0 to 7 [ 86.506082][ T6537] Dev loop6: unable to read RDB block 7 [ 86.508270][ T6537] loop6: unable to read partition table [ 86.510387][ T6537] loop6: partition table beyond EOD, truncated [ 86.513087][ T6537] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 86.572464][ T6530] udevd[6530]: failed to send result of seq 14148 to main daemon: Connection refused [ 86.701225][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 86.740256][ T838] cfg80211: failed to load regulatory.db [ 87.187550][ T6567] random: crng reseeded on system resumption [ 87.268098][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 87.268110][ T40] audit: type=1326 audit(1750852944.654:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6556 comm="syz.1.137" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7fc00000 [ 88.475698][ T6609] Cannot find del_set index 3 as target [ 89.436537][ T6631] netlink: 'syz.2.155': attribute type 12 has an invalid length. [ 89.438988][ T6631] netlink: 132 bytes leftover after parsing attributes in process `syz.2.155'. [ 89.535496][ T6632] binder: 6629:6632 ioctl c0306201 800003c0 returned -14 [ 89.552887][ T6634] random: crng reseeded on system resumption [ 89.619188][ T6638] FAULT_INJECTION: forcing a failure. [ 89.619188][ T6638] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.625086][ T6638] CPU: 2 UID: 0 PID: 6638 Comm: syz.2.159 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 89.625103][ T6638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.625110][ T6638] Call Trace: [ 89.625114][ T6638] [ 89.625119][ T6638] dump_stack_lvl+0x16c/0x1f0 [ 89.625140][ T6638] should_fail_ex+0x512/0x640 [ 89.625158][ T6638] _copy_to_user+0x32/0xd0 [ 89.625177][ T6638] simple_read_from_buffer+0xcb/0x170 [ 89.625193][ T6638] proc_fail_nth_read+0x197/0x270 [ 89.625207][ T6638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.625221][ T6638] ? rw_verify_area+0xcf/0x680 [ 89.625234][ T6638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 89.625247][ T6638] vfs_read+0x1e4/0xc60 [ 89.625262][ T6638] ? fdget_pos+0x2a2/0x370 [ 89.625279][ T6638] ? __pfx_vfs_read+0x10/0x10 [ 89.625293][ T6638] ? find_held_lock+0x2b/0x80 [ 89.625308][ T6638] ? __fget_files+0x20e/0x3c0 [ 89.625327][ T6638] ksys_read+0x12a/0x250 [ 89.625342][ T6638] ? __pfx_ksys_read+0x10/0x10 [ 89.625358][ T6638] ? rcu_is_watching+0x12/0xc0 [ 89.625371][ T6638] __do_fast_syscall_32+0x7c/0x3a0 [ 89.625390][ T6638] do_fast_syscall_32+0x32/0x80 [ 89.625407][ T6638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 89.625420][ T6638] RIP: 0023:0xf7fc7579 [ 89.625430][ T6638] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 89.625452][ T6638] RSP: 002b:00000000f50e6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 89.625462][ T6638] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f50e6620 [ 89.625469][ T6638] RDX: 000000000000000f RSI: 00000000f7453ff4 RDI: 0000000000000000 [ 89.625475][ T6638] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 89.625481][ T6638] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 89.625487][ T6638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 89.625501][ T6638] [ 89.694976][ C2] hpet: Lost 3 RTC interrupts [ 89.858787][ T6645] netlink: 'syz.2.160': attribute type 10 has an invalid length. [ 89.906507][ T6645] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 90.020012][ T6648] input: syz1 as /devices/virtual/input/input5 [ 90.480488][ T6655] fuse: Bad value for 'group_id' [ 90.482385][ T6655] fuse: Bad value for 'group_id' [ 90.864826][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 91.684769][ T6669] netlink: 'syz.2.169': attribute type 1 has an invalid length. [ 91.687311][ T6669] netlink: 'syz.2.169': attribute type 1 has an invalid length. [ 91.702520][ C2] Unknown status report in ack skb [ 92.009634][ T6691] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 92.070024][ T6691] fuse: Bad value for 'rootmode' [ 92.077316][ T6691] 9pnet_fd: Insufficient options for proto=fd [ 92.819428][ T6713] netlink: 36 bytes leftover after parsing attributes in process `syz.2.183'. [ 92.862734][ T6710] syzkaller0: entered promiscuous mode [ 92.867394][ T6710] syzkaller0: entered allmulticast mode [ 92.870984][ T1244] syzkaller0: tun_net_xmit 48 [ 92.897548][ T6710] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 92.900120][ T6710] syzkaller0: Linktype set failed because interface is up [ 92.984012][ T40] audit: type=1326 audit(1750852950.444:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.2.184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7fc00000 [ 93.172792][ T6725] dummy0: entered promiscuous mode [ 93.175550][ T6725] dummy0: entered allmulticast mode [ 93.176539][ T6726] netlink: 40 bytes leftover after parsing attributes in process `syz.1.182'. [ 93.525945][ T6744] 9pnet_fd: Insufficient options for proto=fd [ 93.695050][ T40] audit: type=1326 audit(1750852951.164:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6714 comm="syz.2.184" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fc7579 code=0x7fc00000 [ 94.283710][ T53] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 94.445160][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 94.453415][ T53] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 94.456331][ T53] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 94.459523][ T53] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 94.462723][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 94.470108][ T53] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 94.474471][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.477841][ T53] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 94.481050][ T53] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 94.485801][ T53] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 94.489000][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.494137][ T53] usb 7-1: config 0 descriptor?? [ 94.708134][ T53] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 95.087695][ T53] usb 7-1: USB disconnect, device number 4 [ 95.093809][ T53] usblp0: removed [ 95.239391][ T6772] netlink: 'syz.1.196': attribute type 10 has an invalid length. [ 95.247792][ T6772] FAULT_INJECTION: forcing a failure. [ 95.247792][ T6772] name failslab, interval 1, probability 0, space 0, times 0 [ 95.253287][ T6772] CPU: 3 UID: 0 PID: 6772 Comm: syz.1.196 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 95.253310][ T6772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.253321][ T6772] Call Trace: [ 95.253327][ T6772] [ 95.253333][ T6772] dump_stack_lvl+0x16c/0x1f0 [ 95.253364][ T6772] should_fail_ex+0x512/0x640 [ 95.253393][ T6772] should_failslab+0xc2/0x120 [ 95.253410][ T6772] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 95.253437][ T6772] ? __alloc_skb+0x2b2/0x380 [ 95.253466][ T6772] __alloc_skb+0x2b2/0x380 [ 95.253508][ T6772] ? __pfx___alloc_skb+0x10/0x10 [ 95.253531][ T6772] ? rt6_nlmsg_size+0xaf/0x450 [ 95.253549][ T6772] ? rt6_get_route_info+0x9d0/0x9e0 [ 95.253573][ T6772] inet6_rt_notify+0x10d/0x4b0 [ 95.253601][ T6772] fib6_del+0xf5a/0x1770 [ 95.253625][ T6772] ? __pfx_fib6_del+0x10/0x10 [ 95.253642][ T6772] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.253672][ T6772] ? fib6_ifdown+0xcd/0x8f0 [ 95.253691][ T6772] fib6_clean_node+0x424/0x5b0 [ 95.253707][ T6772] ? __pfx_fib6_clean_node+0x10/0x10 [ 95.253720][ T6772] ? __lock_acquire+0xb8a/0x1c90 [ 95.253753][ T6772] fib6_walk_continue+0x452/0x8d0 [ 95.253785][ T6772] fib6_walk+0x182/0x370 [ 95.253811][ T6772] ? __pfx_fib6_ifdown+0x10/0x10 [ 95.253827][ T6772] fib6_clean_tree+0xd4/0x110 [ 95.253854][ T6772] ? __pfx_fib6_clean_tree+0x10/0x10 [ 95.253886][ T6772] ? __pfx_fib6_clean_node+0x10/0x10 [ 95.253905][ T6772] ? __pfx_fib6_ifdown+0x10/0x10 [ 95.253932][ T6772] ? __pfx_fib6_ifdown+0x10/0x10 [ 95.253950][ T6772] __fib6_clean_all+0x107/0x2d0 [ 95.253983][ T6772] rt6_disable_ip+0x2ec/0x990 [ 95.254006][ T6772] ? __mutex_trylock_common+0xe9/0x250 [ 95.254031][ T6772] ? __pfx___mutex_trylock_common+0x10/0x10 [ 95.254063][ T6772] ? __pfx_rt6_disable_ip+0x10/0x10 [ 95.254089][ T6772] ? rcu_is_watching+0x12/0xc0 [ 95.254113][ T6772] addrconf_ifdown.isra.0+0x11d/0x1a90 [ 95.254136][ T6772] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 95.254169][ T6772] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 95.254201][ T6772] addrconf_notify+0x220/0x19e0 [ 95.254223][ T6772] ? ip6mr_device_event+0x1bc/0x230 [ 95.254252][ T6772] notifier_call_chain+0xb9/0x410 [ 95.254272][ T6772] ? __pfx_addrconf_notify+0x10/0x10 [ 95.254300][ T6772] call_netdevice_notifiers_info+0xbe/0x140 [ 95.254323][ T6772] __dev_notify_flags+0x1f7/0x2e0 [ 95.254349][ T6772] ? __pfx___dev_notify_flags+0x10/0x10 [ 95.254369][ T6772] ? __dev_change_flags+0x3d5/0x720 [ 95.254394][ T6772] ? __pfx___dev_change_flags+0x10/0x10 [ 95.254421][ T6772] ? __pfx_validate_linkmsg+0x10/0x10 [ 95.254451][ T6772] netif_change_flags+0x108/0x160 [ 95.254482][ T6772] do_setlink.constprop.0+0xb53/0x4380 [ 95.254510][ T6772] ? __pfx_console_unlock+0x10/0x10 [ 95.254531][ T6772] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 95.254562][ T6772] ? __wake_up_klogd.part.0+0x99/0xf0 [ 95.254592][ T6772] ? __lock_acquire+0xb8a/0x1c90 [ 95.254625][ T6772] ? __mutex_trylock_common+0xe9/0x250 [ 95.254651][ T6772] ? __pfx___mutex_trylock_common+0x10/0x10 [ 95.254675][ T6772] ? __pfx___might_resched+0x10/0x10 [ 95.254695][ T6772] ? rcu_is_watching+0x12/0xc0 [ 95.254713][ T6772] ? trace_contention_end+0xdd/0x130 [ 95.254737][ T6772] ? __mutex_lock+0x1ca/0xb90 [ 95.254764][ T6772] ? rcu_is_watching+0x12/0xc0 [ 95.254780][ T6772] ? rtnl_newlink+0x600/0x2000 [ 95.254804][ T6772] ? trace_cap_capable+0x18d/0x200 [ 95.254823][ T6772] ? __pfx___mutex_lock+0x10/0x10 [ 95.254849][ T6772] ? apparmor_capable+0x114/0x1d0 [ 95.254876][ T6772] ? netlink_ns_capable+0xfa/0x130 [ 95.254908][ T6772] rtnl_newlink+0x1446/0x2000 [ 95.254944][ T6772] ? __pfx_rtnl_newlink+0x10/0x10 [ 95.254969][ T6772] ? kasan_quarantine_put+0x10a/0x240 [ 95.254994][ T6772] ? lockdep_hardirqs_on+0x7c/0x110 [ 95.255022][ T6772] ? kmem_cache_free+0x2d1/0x4d0 [ 95.255055][ T6772] ? kfree_skbmem+0x1a4/0x1f0 [ 95.255085][ T6772] ? __lock_acquire+0x622/0x1c90 [ 95.255114][ T6772] ? rcu_is_watching+0x12/0xc0 [ 95.255132][ T6772] ? trace_cap_capable+0x18d/0x200 [ 95.255155][ T6772] ? find_held_lock+0x2b/0x80 [ 95.255173][ T6772] ? __pfx_rtnl_newlink+0x10/0x10 [ 95.255197][ T6772] ? __pfx_rtnl_newlink+0x10/0x10 [ 95.255223][ T6772] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 95.255250][ T6772] ? __pfx_rtnl_newlink+0x10/0x10 [ 95.255278][ T6772] rtnetlink_rcv_msg+0x95b/0xe90 [ 95.255308][ T6772] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 95.255342][ T6772] ? ref_tracker_free+0x37c/0x830 [ 95.255373][ T6772] netlink_rcv_skb+0x158/0x420 [ 95.255394][ T6772] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 95.255424][ T6772] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.255453][ T6772] ? netlink_deliver_tap+0x1ae/0xd30 [ 95.255476][ T6772] netlink_unicast+0x53a/0x7f0 [ 95.255498][ T6772] ? __pfx_netlink_unicast+0x10/0x10 [ 95.255525][ T6772] netlink_sendmsg+0x8d1/0xdd0 [ 95.255550][ T6772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.255571][ T6772] ? __import_iovec+0x1dd/0x650 [ 95.255604][ T6772] ____sys_sendmsg+0xa98/0xc70 [ 95.255624][ T6772] ? gfs2_release_folio+0x390/0x720 [ 95.255649][ T6772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.255667][ T6772] ? get_compat_msghdr+0x11a/0x170 [ 95.255706][ T6772] ___sys_sendmsg+0x134/0x1d0 [ 95.255735][ T6772] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.255776][ T6772] ? find_held_lock+0x2b/0x80 [ 95.255809][ T6772] __sys_sendmsg+0x16d/0x220 [ 95.255835][ T6772] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.255873][ T6772] ? rcu_is_watching+0x12/0xc0 [ 95.255895][ T6772] __do_fast_syscall_32+0x7c/0x3a0 [ 95.255925][ T6772] do_fast_syscall_32+0x32/0x80 [ 95.255953][ T6772] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.255976][ T6772] RIP: 0023:0xf712e579 [ 95.255993][ T6772] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 95.256010][ T6772] RSP: 002b:00000000f511e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 95.256029][ T6772] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000040 [ 95.256045][ T6772] RDX: 000000000404c080 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.256055][ T6772] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.256065][ T6772] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 95.256074][ T6772] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.256098][ T6772] [ 95.525396][ T6772] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 95.903072][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.202'. [ 97.076651][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 97.399264][ T40] audit: type=1800 audit(1750852954.864:21): pid=6834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.217" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 97.415728][ T6834] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 97.418282][ T6834] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.423405][ T6834] vhci_hcd vhci_hcd.0: Device attached [ 97.429484][ T6838] vhci_hcd: connection closed [ 97.430877][ T6191] vhci_hcd: stop threads [ 97.436790][ T6191] vhci_hcd: release socket [ 97.438350][ T6191] vhci_hcd: disconnect device [ 97.693607][ T6055] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 97.846249][ T6055] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.850878][ T6055] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.856292][ T6055] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 97.859561][ T6055] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.863931][ T6055] usb 7-1: config 0 descriptor?? [ 98.029444][ T6845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.219'. [ 98.199072][ T40] audit: type=1326 audit(1750852955.664:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6835 comm="syz.0.218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 98.288531][ T6055] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 98.293633][ T29] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 98.306544][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 98.575057][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 98.582963][ T29] usb 8-1: config 0 has an invalid interface number: 69 but max is 0 [ 98.585758][ T29] usb 8-1: config 0 has no interface number 0 [ 98.591363][ T29] usb 8-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2 [ 98.594698][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.597619][ T29] usb 8-1: Product: syz [ 98.599124][ T29] usb 8-1: Manufacturer: syz [ 98.600746][ T29] usb 8-1: SerialNumber: syz [ 98.604931][ T29] usb 8-1: config 0 descriptor?? [ 98.611090][ T29] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.69/input/input6 [ 98.616805][ T54] usb 7-1: USB disconnect, device number 5 [ 98.812068][ T54] usb 8-1: USB disconnect, device number 2 [ 98.813130][ T5340] bcm5974 8-1:0.69: could not read from device [ 98.820908][ T5340] bcm5974 8-1:0.69: could not read from device [ 99.466143][ T40] audit: type=1326 audit(1750852956.934:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.1.236" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffe0000 [ 99.664739][ T838] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 99.833654][ T838] usb 8-1: Using ep0 maxpacket: 32 [ 99.837097][ T838] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 99.840078][ T838] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 99.842989][ T838] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 99.846431][ T838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.849621][ T838] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.853161][ T838] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.858550][ T838] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 99.861525][ T838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.865746][ T838] usb 8-1: config 0 descriptor?? [ 100.049247][ T40] audit: type=1326 audit(1750852957.514:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6876 comm="syz.2.231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7fc00000 [ 100.075277][ T838] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 100.097088][ T6898] binder: 6897:6898 ioctl c0306201 80000100 returned -14 [ 100.242619][ T5941] ================================================================== [ 100.245592][ T40] audit: type=1326 audit(1750852957.704:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.242" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 100.246251][ T5941] BUG: KASAN: slab-out-of-bounds in __list_del_entry_valid_or_report+0x1d4/0x200 [ 100.255969][ T40] audit: type=1326 audit(1750852957.704:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.242" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 100.257479][ T5941] Read of size 8 at addr ffff88806cdf3558 by task syz-executor/5941 [ 100.268052][ T40] audit: type=1326 audit(1750852957.704:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.242" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 100.270710][ T5941] [ 100.270722][ T5941] CPU: 2 UID: 0 PID: 5941 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 100.270737][ T5941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.270744][ T5941] Call Trace: [ 100.270748][ T5941] [ 100.270753][ T5941] dump_stack_lvl+0x116/0x1f0 [ 100.270774][ T5941] print_report+0xcd/0x680 [ 100.270785][ T5941] ? __virt_addr_valid+0x81/0x610 [ 100.270802][ T5941] ? __phys_addr+0xe8/0x180 [ 100.270813][ T5941] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 100.270825][ T5941] kasan_report+0xe0/0x110 [ 100.270835][ T5941] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 100.270847][ T5941] __list_del_entry_valid_or_report+0x1d4/0x200 [ 100.270859][ T5941] bt_accept_unlink+0x34/0x2e0 [ 100.270875][ T5941] l2cap_sock_teardown_cb+0x1a3/0x3c0 [ 100.270888][ T5941] l2cap_chan_del+0xbd/0x8f0 [ 100.270902][ T5941] l2cap_conn_del+0x37a/0x730 [ 100.270916][ T5941] ? hci_cmd_sync_dequeue+0x191/0x1f0 [ 100.270928][ T5941] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 100.270942][ T5941] l2cap_disconn_cfm+0x96/0xd0 [ 100.270956][ T5941] hci_conn_hash_flush+0x10b/0x260 [ 100.270969][ T5941] hci_dev_close_sync+0x602/0x11d0 [ 100.270981][ T5941] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 100.270992][ T5941] ? up_write+0x1b2/0x520 [ 100.271009][ T5941] hci_dev_do_close+0x2e/0x90 [ 100.271020][ T5941] hci_unregister_dev+0x213/0x620 [ 100.271031][ T5941] ? __pfx_vhci_release+0x10/0x10 [ 100.271048][ T5941] vhci_release+0x79/0xf0 [ 100.271063][ T5941] __fput+0x402/0xb70 [ 100.271076][ T5941] task_work_run+0x14d/0x240 [ 100.271093][ T5941] ? __pfx_task_work_run+0x10/0x10 [ 100.271111][ T5941] do_exit+0x86c/0x2bd0 [ 100.271126][ T5941] ? do_raw_spin_lock+0x12c/0x2b0 [ 100.271143][ T5941] ? __pfx_do_exit+0x10/0x10 [ 100.271157][ T5941] ? rcu_is_watching+0x12/0xc0 [ 100.271169][ T5941] do_group_exit+0xd3/0x2a0 [ 100.271184][ T5941] __ia32_sys_exit_group+0x3e/0x50 [ 100.271199][ T5941] ia32_sys_call+0xd56/0x1c40 [ 100.271212][ T5941] __do_fast_syscall_32+0x7c/0x3a0 [ 100.271230][ T5941] do_fast_syscall_32+0x32/0x80 [ 100.271249][ T5941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.271269][ T5941] RIP: 0023:0xf70de579 [ 100.271283][ T5941] Code: Unable to access opcode bytes at 0xf70de54f. [ 100.271291][ T5941] RSP: 002b:00000000ffa472ac EFLAGS: 00000286 ORIG_RAX: 00000000000000fc [ 100.271309][ T5941] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00000000ffa472f8 [ 100.271320][ T5941] RDX: 0000000000000000 RSI: 0000000000001388 RDI: 00000000f72114c6 [ 100.271331][ T5941] RBP: 00000000f7443ff4 R08: 0000000000000000 R09: 0000000000000000 [ 100.271341][ T5941] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 100.271353][ T5941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.271368][ T5941] [ 100.271372][ T5941] [ 100.283190][ T40] audit: type=1326 audit(1750852957.704:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.242" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 100.285575][ T5941] Allocated by task 6535: [ 100.285585][ T5941] kasan_save_stack+0x33/0x60 [ 100.285615][ T5941] kasan_save_track+0x14/0x30 [ 100.285630][ T5941] __kasan_kmalloc+0xaa/0xb0 [ 100.285644][ T5941] xfrm_policy_alloc+0x9f/0x420 [ 100.285657][ T5941] xfrm_policy_construct+0x30/0x610 [ 100.285669][ T5941] xfrm_add_policy+0x295/0x850 [ 100.285681][ T5941] xfrm_user_rcv_msg+0x4fe/0xb60 [ 100.287088][ T40] audit: type=1326 audit(1750852957.704:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.242" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 100.287766][ T5941] netlink_rcv_skb+0x158/0x420 [ 100.289395][ T40] audit: type=1326 audit(1750852957.704:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.242" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 100.290854][ T5941] xfrm_netlink_rcv+0x71/0x90 [ 100.292509][ T40] audit: type=1326 audit(1750852957.704:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.2.242" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 100.293971][ T5941] netlink_unicast+0x53a/0x7f0 [ 100.293988][ T5941] netlink_sendmsg+0x8d1/0xdd0 [ 100.294001][ T5941] ____sys_sendmsg+0xa98/0xc70 [ 100.294012][ T5941] ___sys_sendmsg+0x134/0x1d0 [ 100.435435][ T5941] __sys_sendmsg+0x16d/0x220 [ 100.435459][ T5941] __do_fast_syscall_32+0x7c/0x3a0 [ 100.435476][ T5941] do_fast_syscall_32+0x32/0x80 [ 100.435492][ T5941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.435506][ T5941] [ 100.435509][ T5941] The buggy address belongs to the object at ffff88806cdf3000 [ 100.435509][ T5941] which belongs to the cache kmalloc-2k of size 2048 [ 100.435518][ T5941] The buggy address is located 336 bytes to the right of [ 100.435518][ T5941] allocated 1032-byte region [ffff88806cdf3000, ffff88806cdf3408) [ 100.435528][ T5941] [ 100.435531][ T5941] The buggy address belongs to the physical page: [ 100.435536][ T5941] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806cdf1000 pfn:0x6cdf0 [ 100.435546][ T5941] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 100.435555][ T5941] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff) [ 100.435566][ T5941] page_type: f5(slab) [ 100.435576][ T5941] raw: 04fff00000000240 ffff88801b842f00 ffffea0001ae6810 ffffea0001102610 [ 100.435586][ T5941] raw: ffff88806cdf1000 0000000000080004 00000000f5000000 0000000000000000 [ 100.435596][ T5941] head: 04fff00000000240 ffff88801b842f00 ffffea0001ae6810 ffffea0001102610 [ 100.435605][ T5941] head: ffff88806cdf1000 0000000000080004 00000000f5000000 0000000000000000 [ 100.435615][ T5941] head: 04fff00000000003 ffffea0001b37c01 00000000ffffffff 00000000ffffffff [ 100.435624][ T5941] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 100.435630][ T5941] page dumped because: kasan: bad access detected [ 100.435635][ T5941] page_owner tracks the page as allocated [ 100.435639][ T5941] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6008, tgid 6008 (kworker/0:5), ts 56184047076, free_ts 56055221560 [ 100.435658][ T5941] post_alloc_hook+0x1c0/0x230 [ 100.435673][ T5941] get_page_from_freelist+0x1321/0x3890 [ 100.435688][ T5941] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 100.435703][ T5941] alloc_pages_mpol+0x1fb/0x550 [ 100.435713][ T5941] new_slab+0x23b/0x330 [ 100.435731][ T5941] ___slab_alloc+0xd9c/0x1940 [ 100.435743][ T5941] __slab_alloc.constprop.0+0x56/0xb0 [ 100.435756][ T5941] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 100.435778][ T5941] kmalloc_reserve+0xef/0x2c0 [ 100.435793][ T5941] __alloc_skb+0x166/0x380 [ 100.435813][ T5941] mld_newpack.isra.0+0x18e/0xa20 [ 100.435835][ T5941] add_grhead+0x299/0x340 [ 100.435853][ T5941] add_grec+0x112a/0x1680 [ 100.435871][ T5941] mld_ifc_work+0x41f/0xca0 [ 100.435890][ T5941] process_one_work+0x9cc/0x1b70 [ 100.435912][ T5941] worker_thread+0x6c8/0xf10 [ 100.435933][ T5941] page last free pid 5952 tgid 5952 stack trace: [ 100.435941][ T5941] __free_frozen_pages+0x7fe/0x1180 [ 100.435959][ T5941] __put_partials+0x16d/0x1c0 [ 100.435978][ T5941] qlist_free_all+0x4d/0x120 [ 100.435997][ T5941] kasan_quarantine_reduce+0x195/0x1e0 [ 100.436018][ T5941] __kasan_slab_alloc+0x69/0x90 [ 100.436042][ T5941] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 100.436064][ T5941] __alloc_skb+0x2b2/0x380 [ 100.436083][ T5941] netlink_ack+0x15d/0xb80 [ 100.436098][ T5941] netlink_rcv_skb+0x332/0x420 [ 100.436112][ T5941] netlink_unicast+0x53a/0x7f0 [ 100.436127][ T5941] netlink_sendmsg+0x8d1/0xdd0 [ 100.436142][ T5941] __sys_sendto+0x4a0/0x520 [ 100.436163][ T5941] __ia32_compat_sys_socketcall+0x625/0x770 [ 100.436180][ T5941] __do_fast_syscall_32+0x7c/0x3a0 [ 100.436205][ T5941] do_fast_syscall_32+0x32/0x80 [ 100.436228][ T5941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.436248][ T5941] [ 100.436251][ T5941] Memory state around the buggy address: [ 100.436260][ T5941] ffff88806cdf3400: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.436273][ T5941] ffff88806cdf3480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.436285][ T5941] >ffff88806cdf3500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.436295][ T5941] ^ [ 100.436303][ T5941] ffff88806cdf3580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.436314][ T5941] ffff88806cdf3600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.436323][ T5941] ================================================================== [ 100.436591][ C2] vkms_vblank_simulate: vblank timer overrun [ 100.593238][ C2] vkms_vblank_simulate: vblank timer overrun [ 100.598096][ T5941] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 100.598114][ T5941] CPU: 3 UID: 0 PID: 5941 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 100.598138][ T5941] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 100.598149][ T5941] Call Trace: [ 100.598155][ T5941] [ 100.598162][ T5941] dump_stack_lvl+0x3d/0x1f0 [ 100.598192][ T5941] panic+0x71c/0x800 [ 100.598216][ T5941] ? __pfx_panic+0x10/0x10 [ 100.598238][ T5941] ? irqentry_exit+0x3b/0x90 [ 100.598262][ T5941] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.598286][ T5941] ? preempt_schedule_thunk+0x16/0x30 [ 100.598307][ T5941] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 100.598327][ T5941] ? preempt_schedule_common+0x44/0xc0 [ 100.598351][ T5941] ? check_panic_on_warn+0x1f/0xb0 [ 100.598377][ T5941] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 100.598394][ T5941] check_panic_on_warn+0xab/0xb0 [ 100.598418][ T5941] end_report+0x107/0x170 [ 100.598445][ T5941] kasan_report+0xee/0x110 [ 100.598462][ T5941] ? __list_del_entry_valid_or_report+0x1d4/0x200 [ 100.598484][ T5941] __list_del_entry_valid_or_report+0x1d4/0x200 [ 100.598504][ T5941] bt_accept_unlink+0x34/0x2e0 [ 100.598529][ T5941] l2cap_sock_teardown_cb+0x1a3/0x3c0 [ 100.641295][ T5941] l2cap_chan_del+0xbd/0x8f0 [ 100.642793][ T5941] l2cap_conn_del+0x37a/0x730 [ 100.644656][ T5941] ? hci_cmd_sync_dequeue+0x191/0x1f0 [ 100.646747][ T5941] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 100.648773][ T5941] l2cap_disconn_cfm+0x96/0xd0 [ 100.650545][ T5941] hci_conn_hash_flush+0x10b/0x260 [ 100.652726][ T5941] hci_dev_close_sync+0x602/0x11d0 [ 100.654494][ T5941] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 100.656363][ T5941] ? up_write+0x1b2/0x520 [ 100.657806][ T5941] hci_dev_do_close+0x2e/0x90 [ 100.659426][ T5941] hci_unregister_dev+0x213/0x620 [ 100.661352][ T5941] ? __pfx_vhci_release+0x10/0x10 [ 100.663017][ T5941] vhci_release+0x79/0xf0 [ 100.664836][ T5941] __fput+0x402/0xb70 [ 100.666606][ T5941] task_work_run+0x14d/0x240 [ 100.668528][ T5941] ? __pfx_task_work_run+0x10/0x10 [ 100.670675][ T5941] do_exit+0x86c/0x2bd0 [ 100.672050][ T5941] ? do_raw_spin_lock+0x12c/0x2b0 [ 100.673728][ T5941] ? __pfx_do_exit+0x10/0x10 [ 100.675265][ T5941] ? rcu_is_watching+0x12/0xc0 [ 100.676826][ T5941] do_group_exit+0xd3/0x2a0 [ 100.678404][ T5941] __ia32_sys_exit_group+0x3e/0x50 [ 100.680186][ T5941] ia32_sys_call+0xd56/0x1c40 [ 100.681718][ T5941] __do_fast_syscall_32+0x7c/0x3a0 [ 100.683388][ T5941] do_fast_syscall_32+0x32/0x80 [ 100.685392][ T5941] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 100.687477][ T5941] RIP: 0023:0xf70de579 [ 100.688823][ T5941] Code: Unable to access opcode bytes at 0xf70de54f. [ 100.691010][ T5941] RSP: 002b:00000000ffa472ac EFLAGS: 00000286 ORIG_RAX: 00000000000000fc [ 100.693772][ T5941] RAX: ffffffffffffffda RBX: 0000000000000043 RCX: 00000000ffa472f8 [ 100.696439][ T5941] RDX: 0000000000000000 RSI: 0000000000001388 RDI: 00000000f72114c6 [ 100.699248][ T5941] RBP: 00000000f7443ff4 R08: 0000000000000000 R09: 0000000000000000 [ 100.701898][ T5941] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 100.704627][ T5941] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.707592][ T5941] [ 100.709498][ T5941] Kernel Offset: disabled [ 100.710998][ T5941] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:02:37 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff81a22045 RBX=0000000000000001 RCX=ffffc9000e4c0000 RDX=ffffc9000e4bf801 RSI=ffffc9000e4bf8e8 RDI=ffffc9000e4bf8e8 RBP=ffffc9000e4bf5d0 RSP=ffffc9000e4bf510 R8 =ffffffff914b25a2 R9 =0000000000000000 R10=0000000000000000 R11=000000000001216b R12=ffffc9000e4bf5d8 R13=ffffc9000e4bf588 R14=ffffc9000e4bf8f0 R15=ffffc9000e4bf5bc RIP=ffffffff816a7cc3 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097560000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855820d5 RDI=ffffffff9b06ca00 RBP=ffffffff9b06c9c0 RSP=ffffc9000067f880 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000035 R14=ffffffff9b06c9c0 R15=ffffffff85582070 RIP=ffffffff855820ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097660000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74c6188 CR3=0000000027b4c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000041 RCX=ffffffff819b0b22 RDX=ffff888025a68000 RSI=ffffffff819b0b10 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000356f780 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff920006adef2 R13=0000000000000000 R14=ffff88801c734880 R15=ffffc9000356f848 RIP=ffffffff819b0b12 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097760000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057d8a4c0 CR3=000000006916d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff888023f9ec40 RCX=0000000000000002 RDX=0000000000000020 RSI=0000000000000000 RDI=ffff888023f9ed90 RBP=0000000000000000 RSP=ffffc90007f77a68 R8 =0000000000000001 R9 =0000000000000000 R10=ffff888023f9ed80 R11=0000000000000001 R12=0000000000000002 R13=ffff888023f9ecb0 R14=ffffc90007f77c10 R15=0000000000000000 RIP=ffffffff8b7cbfd0 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097860000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c349f10 CR3=0000000027b4c000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000