last executing test programs: 5.000460104s ago: executing program 0 (id=308): r0 = epoll_create1(0x0) pipe(&(0x7f0000000080)) memfd_create(&(0x7f0000000440)='\xf2\xb2\xb7\xf2M[H\xbc\xa9\xe06\xbd\x7fd\x8a6\'Vk\xcb8{\x90\xc9\xd3\x8f \x05&\xee\xa0f}\x0f\xaeS\xe0\x891n4\xa8D\x90\x9e\xa3J/\x19\xbb\xdf\x9bQ\xf0\xb3\xc2\xc2K\xc7y\x9e\x1fi\x15\xd0\xf1k=\xb7\xc9\x84\xf7\xbf\xb6Ya\x1ds1\xda\x89Q\xb0\x05z\x16\xe2\xe8D$\x1e\x1b\x9e\"\xf05p\xf02\'\xd7\x19\xcc\x9e\xde\x1a\x00\xff\x84\xc2\x101\xcac\x8e7\x96\x1f\x9b\x94\x9eKq&\x99\x8c](J\xe5E\xfe\x96\xd4\t\xf2q\x8czlV\xe0\x13>\xa5*\x8acI\x87?{\xfa\xca\nG\xe8Q\xfd\xbe\xe3e1F\xf3\"\xba=~\x0f\xc4\x9b\x13?1X\x83z\xbc\f\xd0\xa8\x9e\x81S\xfa\xa3\xa4\xacQ)\xdd\x86\rK.\xfa\xaf\x0f\x9bx\xce', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000262000/0x7000)=nil, 0x7000, 0x8, 0x10, r0, 0x21490000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$IPC_RMID(0x0, 0x0) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r6}, 0x10, &(0x7f0000000240)={&(0x7f0000000100)=@can={{}, 0xfc, 0x0, 0x0, 0x0, "5d5901d3284a3d58"}, 0x10}}, 0x0) r7 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x76b4, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x77b, &(0x7f0000000200), &(0x7f0000000040)=0x0, &(0x7f0000000700)) syz_io_uring_submit(r11, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) write$char_usb(r9, 0x0, 0x0) write$char_usb(r8, 0x0, 0x0) syz_usb_disconnect(r7) 3.513165268s ago: executing program 3 (id=316): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a32000000001400058008000140000000880800"], 0xa0}}, 0x0) 3.430100143s ago: executing program 3 (id=317): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x2, 0x2}}, @tipc=@id={0x1e, 0x3, 0x701d124ae8b98da8, {0x4e21}}, @isdn={0x22, 0x7, 0x7, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x6, 0xb4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x10f, &(0x7f0000000340)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f0000000280)) io_uring_enter(r4, 0x0, 0x0, 0x6, 0x0, 0x0) io_uring_enter(r4, 0x10b3, 0x5493, 0xb, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1e}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0xfe}, 0x9c) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x34325852}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x60, r8, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="091f9126df912b64081d10cb5eb8e586"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8264992288ce861a4a2a4adbefdb73a0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "103c52136cf37053"}]}]}, 0x60}}, 0xc0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.579274983s ago: executing program 3 (id=318): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xd}, @hci_ev_le_ltk_req={{}, {0xc8, 0x3, 0x40}}}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x9, 0x1, 0xd7861687b8cfee55, 0x4, 0x7f, 0x2, 0xa, 0x1779, 0x1, 0x0, 0x1, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8081, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1e6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000280), 0x722cbe6d2bced554, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x541c, &(0x7f0000000300)) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14}, &(0x7f0000002300), 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x58c, 0x3b4, 0x9403, 0x0, 0x0, 0x2c0, 0x4c4, 0x3d8, 0x3d8, 0x4c4, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x0, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {}, 0x2f, 0x0, 0x4}, 0x0, 0x28c, 0x3b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x9295, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x5fc, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffffffff, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0x0, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5e8) 1.900146161s ago: executing program 0 (id=324): pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x437}, 0x20}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000240)=0x39eb, 0x52) sendto$inet(r3, &(0x7f0000000700)="0c268a", 0x3, 0x0, 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x1c, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xb051}]}]}]}}]}, 0x44}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.625586557s ago: executing program 3 (id=325): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x28, 0x3, r2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x4}}) io_uring_enter(r2, 0x47ff, 0xd377, 0x5, 0x0, 0x0) (async) io_uring_enter(r2, 0x47ff, 0xd377, 0x5, 0x0, 0x0) timerfd_create(0x9, 0x800) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x4f3, 0x58, 0x8b, 0x2, 0x7, 'syz1\x00'}) sync() 1.540087812s ago: executing program 3 (id=327): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet6(0xa, 0x6, 0x8) dup(r1) (async) r2 = dup(r1) bind$unix(r2, &(0x7f00000001c0)=@abs={0xa, 0x2, 0xfffffffd}, 0x6e) (async) bind$unix(r2, &(0x7f00000001c0)=@abs={0xa, 0x2, 0xfffffffd}, 0x6e) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@cgroup=r2, 0x9, 0x1, 0x9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3}) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000100)=0x9, 0x4) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x11, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x11, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x5) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x7d) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800, 0xa20c, 0x2}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0xc0040100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xc0040100, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000000940)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000240)={0x60, 0x2, &(0x7f00008b0000/0x3000)=nil, &(0x7f00008e9000/0x4000)=nil, 0x670, 0x0, 0x0, 0x3, 0x40, 0x1, 0x0, 0xa}) (async) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f0000000240)={0x60, 0x2, &(0x7f00008b0000/0x3000)=nil, &(0x7f00008e9000/0x4000)=nil, 0x670, 0x0, 0x0, 0x3, 0x40, 0x1, 0x0, 0xa}) 1.410340897s ago: executing program 2 (id=329): set_mempolicy(0x8000, &(0x7f00000003c0)=0x8000000000000001, 0xe0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) 1.310484177s ago: executing program 2 (id=330): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0xe8, 0x30, 0x1, 0x0, 0x0, {}, [{0xd4, 0x1, [@m_ctinfo={0x88, 0x1c, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x100}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xa021}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}]}, {0x33, 0x6, "a25ebeedc7f6144e0a6dcd0cbdda0f49a5a078e17b050aee40696ff2f36aa91b923c048379f5b6ff0c988700a3e512"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') read$msr(r4, &(0x7f0000000040)=""/59, 0xffb5) 1.309171064s ago: executing program 1 (id=331): creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x6, 0x3, 0x0, 0x0, 0x1, 'b'}, 0xa, 0x0) 1.211287257s ago: executing program 1 (id=332): r0 = socket$packet(0x11, 0x1, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendfile(r3, r2, 0x0, 0x1000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x1, 0x1000, 0x8004, 0x4a02b031, 0x8001, 0x101, 0xf2, 0x1, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000001c0)={r6, 0xf8, "6bcb3be621024edba280462f107dd818146f26b4532a6febe5a3c31df6284e38017db31dd852bd2f5bf49fd8d945371d66d8c31fb263048763d809b4a4b53ce36f40cb9eed8d0f15fcb6867c4aae32a08e4d0116bdf3ff2e246002a134c04d54b30745a652d688b7104da16803ba7191ef52e8252b39813302a55aa9449e2121690e02c96e84d3362adb864d0e492a248ecd774da1a6cbbd62de688b5b2025c447ca896af2d4e0e41a93d90e0119f25ad2085e72eb060a91f46bf1417c82720cd1ccd3f4175fcc2d6055bc4beaa8f97bd0ff1d7b440b77c469ea098c85003a249d665cd46c1c6ca519c69a9928a31fa510f2c753af6ffc10"}, &(0x7f0000000100)=0x100) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10) socket(0x11, 0x803, 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x11, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r7, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @local}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) fcntl$lock(r8, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x40}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r12) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r12, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010025bd7000fedbdf252700000008000300", @ANYRES32=r14, @ANYBLOB="5a6728c7b204f6770bc2c2f57417c954e64cbe0a0f06005050505050000000"], 0x28}, 0x1, 0x0, 0x0, 0x8804}, 0x40804) fcntl$lock(r8, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2}) 1.206532519s ago: executing program 1 (id=333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppoe(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bond_slave_0\x00'}}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, 0x0, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) writev(r4, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b4", 0x9}, {0x0}], 0x2) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7fffffff}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000014) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, 0x0, &(0x7f00000000c0)}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e80), 0xffffffffffffffff) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x20040}, 0x20008850) 1.03922257s ago: executing program 0 (id=334): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9fde5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x819}]}, 0x40}}, 0x0) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) accept4$alg(r7, 0x0, 0x0, 0x0) getdents64(r2, &(0x7f0000001400)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$hpet(0xffffff9c, &(0x7f0000000200), 0x10000, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) shutdown(r8, 0x2) 744.125997ms ago: executing program 0 (id=335): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) sendmmsg$inet(r0, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000040)="563b646b458a3ea801ee7caba6f881f215aa16e53eb2a71c5e36bfc3ea34a5124439036b262fb2c955e60bad3e993942076471c3c735310783de6344418b8715b9e0aa045d080bbd84a739f78bfa13cf770f6f5659a5a2364056e9254d9e3f7995f92360bc754a08134faa454643e222dcc676fa81e1bd9ab5382bff7dd0cbad5b401e52601c87c4130999e83496747b8f3491511b569c14a62e4fe729d3c3bf4cf6f1979b485fe330e01e29008058777dbac1c0f5905fab4f21230f76ca56af1cd10a4e0964b899b620004cc245a22f98ad2860f2b2c203b19629af265669e746b80b2edde0d76f50", 0xe9}, {&(0x7f0000000140)}, {&(0x7f0000000180)="cb337b1496ebf2ad0e67af4218c5f562ebfd6df8c207e55c27efa2c3fa8564ad9f97456a18465556b505e785b4106486236659b22439876f8e94c29fa6f6e681110f971692a69d8befe3f6e5fafdf23b7f6517106c17f1d8f24da23bda827ae7c3badb9b34dbc652dba74dd4591abca0c3921769435ab7b9346600d2b8a5a10071841cda10b881", 0x87}, {&(0x7f0000000240)="94751eaa325c71aa603fc2f1f0bd9c22c9d4a4dbfd90391dcbe0c458937db050c76619a378bef16c1a4d0d848defcae316286c5b0cc85294e46eaab214c64e7b8ae895e79cb031668d822d0f7d491ce2b3666b0dbd36c3845a1e95e83c0b7d49aa5325b247bd3cbac69fb9e9e38f505e7f7367c5c8e08529db1ac041182e2668b82bf684a6ffde4ef58a757d14ba9abfb251a99e", 0x94}, {&(0x7f0000000300)="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", 0x1000}], 0x5, &(0x7f0000001340)=[@ip_ttl={{0x10, 0x0, 0x2, 0x200}}, @ip_tos_int={{0x10}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xd}}, @ip_ttl={{0x10, 0x0, 0x2, 0xffffffff}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x8000}}], 0x60}}, {{&(0x7f00000013c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000001400)="e9f7c4df98dac1bbe41bf9", 0xb}, {&(0x7f0000001440)="8e29a2a7bb6d018cf9ad650f44809386fe80e784b23e3baed931b95c34d9bc19ef7bdb10fb9c0fb8b56f044dad08292103ae02f2d4acbf750f5d98c01439213c9f03814242489875390040f5ee1d1dba140f31e8facf8dbfca88f225797b6cffc481bb166358b4b1efc4a9758cf49fa205a2c853020f26fc8377b7ea07727a251d39d63b3f8c8caf49abd3e27c87beacfd20b5298fc5be39bbbcc280753d383fe131fc1977a78aa66d298539e87349b3b11aca9070faea", 0xb7}, {&(0x7f0000001500)="c18cb23f25bb6754b3ef7b633ba9f9794f483bea6252a9d67085708b5b36469c28e78f39a93a6648ff5afb8fb25394c6826cdf9f17191049408a", 0x3a}, {&(0x7f0000001540)="1a7fec761e89db036b30ed6fe47c46ae9d62083840ed357b4b3b9e46413ccf9ad22413778c43560c7f8ea349f80d95dc8a6f80547c7a955f8f5d9d8953757ed42cd1a772fecd64970ee5e635a4caa83ca1e42bbbd50fa92fc91b359e066d7d0d9bdf393f77f333628ff7f541fce2e8e6a5475e31d1f8cea1a13f611d2f4c3e49f611114a85714ee646fd64be4d174307110f4eb2f7ceeeb556084f8058b7864f58f04e0112e60f5e738d89dd543b65c2bde38c074aa93c8aa9edbe7a1c5686b885e11b7a7a915ea793f2fa34428e3042f5d5c42970cbcd75866d5fc4a512171a17fa080cf8fe07ac829f6b84f350bb071b4416d3c7c5c8b4", 0xf8}, {&(0x7f0000001640)="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", 0xfc}, {&(0x7f0000001740)="559413b90ff5c2d706964804fe0795f75216bb19bd3d6f27d5e6f50e5db442b78641eb6d2190665d737fbb76e28055a2eb2775f2e245055370c106a8cdc141df4163c124de12ac7ce7167c7efbbfb9928b4ca7d2387b35de5cf5b46bbd5bea15392b8fd8b4d2f442325517e680731e5e89b35a403300e506950935ea63259b5c39ff19280e402e1bc0d28bda0405470358d6878917a805402b7d35fb0a44452da66e", 0xa2}, {&(0x7f0000001800)="88c8a6d8132c5b25a854d02ba4213b37789d422a7c1e7061b9458af790ff40aeeadbc298a937229192c168c3bc55c00b6e6deb78a7aa4f67b87ab049d8201cbe0048b9941002555578fe11f308657a5ac63b1420847e1f989bfbe13f9c518a81f6b7b3c4e0d298de2f423380a9cf797bccd94fdf5140858ea8f454726f6c41d2431e8aa14f7853b6f0a63cecc8cf1bb017652b86e44a88eb68eeb46690398d0d", 0xa0}, {&(0x7f00000018c0)="6069bf0e555060ac6335b37c2bfa", 0xe}, {&(0x7f0000001900)="aedc4433c215b6d6fe7f3ed435cbe1ebf809b5fc5b169b90ac63051ad784e84b6912ddd4ceab5659175af54b0c225ed15374a4826cf679add282f48eeeff5d080524102d4f9239b09c5daf2a30828e", 0x4f}, {&(0x7f0000001980)="77d5d63ee68a4f2a9f0cf6430035e390344897c223ae242884be35d5658adf65f9d01f", 0x23}], 0xa, &(0x7f0000001a40)=[@ip_ttl={{0x10, 0x0, 0x2, 0x718}}], 0x10}}], 0x2, 0x1) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001b40)={0xc, &(0x7f0000001ac0)={0x0, 0x2, 0x14, {0x14, 0x4, "188b9e9cc53f6dfe6887023c337035e324e7"}}, &(0x7f0000001b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}}, &(0x7f0000001d00)={0x1c, &(0x7f0000001b80)={0x0, 0x8}, &(0x7f0000001bc0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000001c00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001c40)={0x20, 0x0, 0x2e, {0x2c, "9d2950e376797a8daa1ba8bea95463266089231b84487685f2dab7c78f7c7e28324e6ac2d75471bc0dfae9e9"}}, &(0x7f0000001c80)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000001cc0)={0x20, 0x0, 0x1, 0x6}}) r1 = signalfd(r0, &(0x7f0000001d40)={[0x6, 0x1]}, 0x8) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x40, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x1) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendto$phonet(r0, &(0x7f0000002000)="ba1efe132152741a69ef9e754a838ba57658d6602b776068cea0f443ce0b2481ed", 0x21, 0x10, &(0x7f0000002040)={0x23, 0x7, 0x6, 0x4}, 0x10) timerfd_settime(r1, 0x0, &(0x7f0000002080)={{0x77359400}, {0x77359400}}, &(0x7f00000020c0)) mkdirat(r1, &(0x7f0000002100)='./file0\x00', 0x110) fcntl$setlease(r0, 0x400, 0x3) io_uring_enter(r1, 0x7f46, 0x50e2, 0x5, &(0x7f0000002140)={[0x3, 0xffffff01]}, 0x8) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x20, 0x4, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x808}, 0x40000) r4 = signalfd(r1, &(0x7f0000002280)={[0x1ff, 0x3]}, 0x8) mkdirat(r4, &(0x7f00000022c0)='./file0\x00', 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x60, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002480), r4) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x34, r6, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x24000000) r7 = getpgrp(0xffffffffffffffff) ioprio_set$pid(0x2, r7, 0x2007) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f0000002580)={0x6, 0x0, 0x1}) unshare(0x20000000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000002780)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002740)={&(0x7f0000002600)={0x11c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000) write$P9_RREMOVE(r4, &(0x7f00000027c0)={0x7, 0x7b, 0x1}, 0x7) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000002800), r8) 389.853872ms ago: executing program 1 (id=336): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9fde5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x819}]}, 0x40}}, 0x0) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) accept4$alg(r7, 0x0, 0x0, 0x0) getdents64(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$hpet(0xffffff9c, &(0x7f0000000200), 0x10000, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) shutdown(r8, 0x2) 295.163999ms ago: executing program 3 (id=337): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3b94, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x2}) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x40000}, 0x18) r3 = getpid() r4 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="74724bf52ecb2bd78a31fd9d7f98d1a226b7e855ce047e05be66646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = epoll_create(0x2) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000140)) signalfd4(r6, &(0x7f0000000000), 0x8, 0x0) process_vm_readv(r3, &(0x7f0000008400)=[{0x0}, {&(0x7f0000000480)=""/165, 0xa5}], 0x2, 0x0, 0x0, 0x0) ioperm(0x0, 0x6e, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18) mlockall(0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000002d00)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f00000005c0)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)=""/188, 0x1001}], 0x1}, 0x0) readv(r7, &(0x7f00000018c0)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/200, 0xc8}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'tunl0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) r11 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 291.004281ms ago: executing program 2 (id=338): ioctl$F2FS_IOC_COMPRESS_FILE(0xffffffffffffffff, 0xf518, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x3, [@func={0x7, 0x0, 0x0, 0xc, 0x1}, @enum={0x0, 0xa, 0x0, 0x6, 0x4, [{0xa, 0x9}, {0x6, 0x5ecf}, {0x3, 0x3}, {0xf, 0x8000}, {0x2, 0x1}, {0x2, 0x7fff}, {0xd, 0xff}, {0xd, 0x1}, {0xb, 0x343}, {0x6, 0x5}]}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0x7}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x2}, @var={0x5, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x5f]}}, &(0x7f00000000c0)=""/115, 0xaf, 0x73, 0x1, 0x8, 0x10000, @value}, 0x28) read(r0, &(0x7f0000000180)=""/148, 0x94) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async) socketpair(0x2a, 0x800, 0x9064, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e24, @broadcast}, 0x10) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc0) recvfrom$inet(r1, &(0x7f00000003c0)=""/74, 0x4a, 0x10040, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000480)={0xd, 0xf9}) (async) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000004c0)=0x5) (async) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000500), 0x202000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000540)={{0xf, 0xfc}, 0x0, 0x7ff, 0x7fffffff, {0xa, 0xf7}, 0x7f, 0x8}) r4 = openat$vcsa(0xffffff9c, &(0x7f00000005c0), 0x800, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000600)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc04c5609, &(0x7f0000000640)={0x8, 0x6, 0x4, 0x10000, 0x7ff, {0x0, 0xea60}, {0x4, 0x1, 0xb4, 0x6, 0x3, 0x81, "e3370338"}, 0x2, 0x4, {}, 0x1, 0x0, r5}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f00000006c0)={0x1b, 0x5, {0xffffffffffffffff}, {0x0}, 0x3, 0xffffff01}) capset(&(0x7f0000000700)={0x20071026, r7}, &(0x7f0000000740)={0x10001, 0x200, 0x986, 0x9, 0xc, 0x5}) (async) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000a80)={0x0}, &(0x7f0000000ac0)=0xc) sendmsg$netlink(r4, &(0x7f0000000b80)={&(0x7f0000000780)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)=[{&(0x7f00000007c0)={0x238, 0x26, 0x4, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x21a, 0xcf, 0x0, 0x1, [@typed={0x14, 0x5c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x25}}, @nested={0x4, 0x2f}, @nested={0x4, 0x90}, @generic="7c61a136b4403ebf2e480ce38384ef33e790fbd3afec3e521dcf648e36b66783429d43ee1f63da26f8768c1075257a3e02546bdd54f3430aab212e76534294e983f6d573d0987a6c1e359ac2b352b6e3ce9ce8df5717e8c26212b12ec400dca2c812e7c5b895f4b3765de761a050733952dd78cb4c662b5246b0b67b0700ff330bfd00acf3d2c6", @generic="b1a9d4a851feab50afa01911d826bf1b5192f7fa0f3399c3833c196d578ed4b83d11ee53fb29e7c3d9f9139450c52fbd166ecdce0a0a36d88f4e8766b7a453ef8a368f696f74c5d5ac257562bab58d316b5794dc763dd429a95364ce3340f210e624addcaa3d807d38ee2de9c691226118f67d6d00cd3d94afaa352d518b47ffd2932bc58d175881100780782fd5e868615942ea4da4a45de59ea9449334032b68671724af97efb336ba2177f989bbc484f0197e57975d1d5f9ec0885a453285e8482c401a61f0609382f80cec", @nested={0x4, 0xc6}, @generic="d5904a4549b56602dc71e2b33dad580754b997c04154489d5d2a1aa439cb3c8a9f4736f1aeca7287c155bdd24bd6010d9a65c027531f29a3a3dd6b103fc8f79be1c89b51c5f3e279f8485e3ad2dfe6246336f85d24f6bb9b5cb1d3f1e7945674aba2ba96d98e1d2d432b61df5ae6f039bdf499108bb9135aac351bf0be2215a420d60fd8567f88469faf8c53f818355c14cce2f03dc5728ed459", @typed={0x8, 0x5f, 0x0, 0x0, @uid=r8}]}, @typed={0xc, 0x44, 0x0, 0x0, @u64=0x2}]}, 0x238}, {&(0x7f0000000a00)={0x28, 0x1e, 0x2c908737ea05c209, 0x70bd27, 0x25dfdbfc, "", [@nested={0x18, 0x55, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid=r8}, @nested={0x4, 0x11}, @nested={0x4, 0x140}, @nested={0x4, 0x44}]}]}, 0x28}], 0x2, &(0x7f0000000b00)=[@rights={{0xc}}, @rights={{0x24, 0x1, 0x1, [r3, r9, r6, r5, r5, r2]}}, @rights={{0x28, 0x1, 0x1, [r1, r6, r2, r1, r0, r0, r5]}}, @cred={{0x18, 0x1, 0x2, {r10, r8, 0xee00}}}], 0x70, 0x90}, 0x1) (async) r11 = add_key$keyring(&(0x7f0000000bc0), &(0x7f0000000c00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f0000000c40)='cifs.idmap\x00', &(0x7f0000000c80)) (async) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000cc0)=0x0, &(0x7f0000000d00)=0x4) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000d40)={@local, @loopback, r12}, 0xc) capget(&(0x7f0000000d80)={0x20071026, r7}, &(0x7f0000000dc0)={0x2, 0x9, 0x37, 0xd51, 0x6, 0x84fa}) (async) r13 = openat$drirender128(0xffffff9c, &(0x7f0000000e00), 0xfdca0ffdfb6bb5f4, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000e80)={&(0x7f0000000e40)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc01c64b9, &(0x7f0000000f80)={&(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0], 0x8, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r13, 0xc01864c6, &(0x7f00000019c0)={&(0x7f0000001980)=[r14, r15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800}) 229.719701ms ago: executing program 2 (id=339): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000deff2300000000080eff95"], &(0x7f0000000180)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) listen(r3, 0x0) r4 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000007c0)={0x10000001}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=r8, @ANYBLOB="000000000000000001"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e00000000800000800000000600000000010000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000005000000040000000600"/28], 0x48) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000305000000000000000000002500", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c00028008000100", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB='\b\x00!\x00', @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x50}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES64=r10, @ANYRES16=r12, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r14, @ANYRESDEC=0x0], 0x398}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) sendmsg$inet(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, &(0x7f0000000100)) 229.131462ms ago: executing program 1 (id=340): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @bcast, 0x8}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xb6db, 0x20, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x2380}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000005c0), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000020000001400020070696d367265673000000000000000000900010073597a30000000000900030073797a3100000000"], 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="270e000000170000000004"], 0x14}, 0x1, 0x40030000000000, 0x0, 0x40000}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) r8 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xa, 0x2130, r3, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4bfa, &(0x7f0000000080)) request_key(&(0x7f0000000240)='pkcs7_test\x00', 0x0, &(0x7f0000000300)='N-%*),M\xd5A\x02\xef\xfc\xf2\xe2\xe2[\x05\xf7=\xeb\xd2\xb9\xf4\x04\xdf\x16\n\x04\xf6\xce<\xc8?/\b\a\"\x00\xcc\a0v\x9dX7!\x9b\x9a\xd2}\xbc,\x97\xf6\xb8\xc4`\xe2\xf6r*\x89T\x00\xd5\xf7\xd6\x03L\xc4l\xcb', 0xfffffffffffffff8) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x10000000, 0x6}, 0xc) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r10, 0x80087601, 0x1000000000000) r11 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) 150.350281ms ago: executing program 0 (id=341): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-twofish-avx)\x00'}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b80)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) r3 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x214300, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'wg1\x00', @local}) 149.26695ms ago: executing program 2 (id=342): r0 = socket$packet(0x11, 0x1, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendfile(r3, r2, 0x0, 0x1000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x1, 0x1000, 0x8004, 0x4a02b031, 0x8001, 0x101, 0xf2, 0x1, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000001c0)={r6, 0xf8, "6bcb3be621024edba280462f107dd818146f26b4532a6febe5a3c31df6284e38017db31dd852bd2f5bf49fd8d945371d66d8c31fb263048763d809b4a4b53ce36f40cb9eed8d0f15fcb6867c4aae32a08e4d0116bdf3ff2e246002a134c04d54b30745a652d688b7104da16803ba7191ef52e8252b39813302a55aa9449e2121690e02c96e84d3362adb864d0e492a248ecd774da1a6cbbd62de688b5b2025c447ca896af2d4e0e41a93d90e0119f25ad2085e72eb060a91f46bf1417c82720cd1ccd3f4175fcc2d6055bc4beaa8f97bd0ff1d7b440b77c469ea098c85003a249d665cd46c1c6ca519c69a9928a31fa510f2c753af6ffc10"}, &(0x7f0000000100)=0x100) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10) socket(0x11, 0x803, 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x11, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r7, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @local}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) fcntl$lock(r8, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x40}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r12) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r12, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010025bd7000fedbdf252700000008000300", @ANYRES32=r14, @ANYBLOB="5a6728c7b204f6770bc2c2f57417c954e64cbe0a0f06005050505050000000"], 0x28}, 0x1, 0x0, 0x0, 0x8804}, 0x40804) fcntl$lock(r8, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2}) 138.400465ms ago: executing program 2 (id=343): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xd}, @hci_ev_le_ltk_req={{}, {0xc8, 0x3, 0x40}}}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x9, 0x1, 0xd7861687b8cfee55, 0x4, 0x7f, 0x2, 0xa, 0x1779, 0x1, 0x0, 0x1, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8081, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1e6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000280), 0x722cbe6d2bced554, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x541c, &(0x7f0000000300)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14}, &(0x7f0000002300), 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x58c, 0x3b4, 0x9403, 0x0, 0x0, 0x2c0, 0x4c4, 0x3d8, 0x3d8, 0x4c4, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x0, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {}, 0x2f, 0x0, 0x4}, 0x0, 0x28c, 0x3b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x9295, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x5fc, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffffffff, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0x0, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5e8) 341.616µs ago: executing program 0 (id=344): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xd}, @hci_ev_le_ltk_req={{}, {0xc8, 0x3, 0x40}}}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x9, 0x1, 0xd7861687b8cfee55, 0x4, 0x7f, 0x2, 0xa, 0x1779, 0x1, 0x0, 0x1, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8081, 0x0) write$binfmt_elf64(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1e6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000280), 0x722cbe6d2bced554, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x541c, &(0x7f0000000300)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14}, &(0x7f0000002300), 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001ac0)=@raw={'raw\x00', 0x3c1, 0x3, 0x58c, 0x3b4, 0x9403, 0x0, 0x0, 0x2c0, 0x4c4, 0x3d8, 0x3d8, 0x4c4, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x0, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {}, 0x2f, 0x0, 0x4}, 0x0, 0x28c, 0x3b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x9295, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x5fc, 0x1, 0x0, 'syz0\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xffffffff, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0x0, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x5e8) 0s ago: executing program 1 (id=345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000f80)={0x10}, 0x5}, {&(0x7f00000021c0)={0x10}, 0x10}], 0x2}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x3c, r4, 0x1, 0x70bd29, 0x200004, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x22}]}, 0x3c}}, 0x20) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRESOCT=r0, @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x20008015}, 0x81) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000040)="0000000000000040ff6943b87902f5d9f27dbafff200000000861f4104", 0x1d, r8) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x0, 0xffffffffffffffff}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e40)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r11) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) sync() clock_gettime(0x0, &(0x7f0000000140)) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:43094' (ED25519) to the list of known hosts. [ 32.538361][ T5857] cgroup: Unknown subsys name 'net' [ 32.661562][ T5857] cgroup: Unknown subsys name 'cpuset' [ 32.664947][ T5857] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.470150][ T5857] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.920800][ T5942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.923931][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.926950][ T5942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.929582][ T5942] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.931668][ T5942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.934646][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.937001][ T5942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.939153][ T5942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.942103][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.944156][ T5942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.945198][ T5952] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.947492][ T5942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.948779][ T5952] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.950526][ T5942] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.952975][ T5952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.954650][ T5942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.956653][ T5952] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.960200][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.961148][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.962697][ T5953] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 35.963234][ T5954] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.963745][ T5954] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.963849][ T5954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.972642][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.107066][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 36.151938][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 36.174696][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 36.185659][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.187734][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.190461][ T5949] bridge_slave_0: entered allmulticast mode [ 36.192606][ T5949] bridge_slave_0: entered promiscuous mode [ 36.220874][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.223004][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.225073][ T5949] bridge_slave_1: entered allmulticast mode [ 36.227189][ T5949] bridge_slave_1: entered promiscuous mode [ 36.292370][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.296123][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.322700][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 36.349455][ T5949] team0: Port device team_slave_0 added [ 36.351311][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.353361][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.355440][ T5940] bridge_slave_0: entered allmulticast mode [ 36.357815][ T5940] bridge_slave_0: entered promiscuous mode [ 36.360587][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.362641][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.364663][ T5940] bridge_slave_1: entered allmulticast mode [ 36.366746][ T5940] bridge_slave_1: entered promiscuous mode [ 36.387528][ T5949] team0: Port device team_slave_1 added [ 36.422257][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.424294][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.426335][ T5938] bridge_slave_0: entered allmulticast mode [ 36.428420][ T5938] bridge_slave_0: entered promiscuous mode [ 36.441292][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.446397][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.455910][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.457969][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.460530][ T5938] bridge_slave_1: entered allmulticast mode [ 36.462675][ T5938] bridge_slave_1: entered promiscuous mode [ 36.472726][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.474763][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.482150][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.521647][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.524606][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.526647][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.534273][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.546558][ T5940] team0: Port device team_slave_0 added [ 36.549219][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.553937][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.556056][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.558140][ T5939] bridge_slave_0: entered allmulticast mode [ 36.560822][ T5939] bridge_slave_0: entered promiscuous mode [ 36.563353][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.565448][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.567519][ T5939] bridge_slave_1: entered allmulticast mode [ 36.569734][ T5939] bridge_slave_1: entered promiscuous mode [ 36.572554][ T5940] team0: Port device team_slave_1 added [ 36.621145][ T5938] team0: Port device team_slave_0 added [ 36.630585][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.633427][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.635410][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.642621][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.646900][ T5938] team0: Port device team_slave_1 added [ 36.649053][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.651196][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.658328][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.669597][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.682726][ T5949] hsr_slave_0: entered promiscuous mode [ 36.684747][ T5949] hsr_slave_1: entered promiscuous mode [ 36.701363][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.703382][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.710727][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.722437][ T5939] team0: Port device team_slave_0 added [ 36.738572][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.741574][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.748826][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.752815][ T5939] team0: Port device team_slave_1 added [ 36.763119][ T5940] hsr_slave_0: entered promiscuous mode [ 36.765061][ T5940] hsr_slave_1: entered promiscuous mode [ 36.766871][ T5940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.769161][ T5940] Cannot create hsr debugfs directory [ 36.788634][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.790684][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.797751][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.802053][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.804004][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.812407][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.862931][ T5938] hsr_slave_0: entered promiscuous mode [ 36.864897][ T5938] hsr_slave_1: entered promiscuous mode [ 36.866743][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.868858][ T5938] Cannot create hsr debugfs directory [ 36.891943][ T5939] hsr_slave_0: entered promiscuous mode [ 36.893944][ T5939] hsr_slave_1: entered promiscuous mode [ 36.895792][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.897934][ T5939] Cannot create hsr debugfs directory [ 37.034064][ T5949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.041220][ T5949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.045616][ T5949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.053117][ T5949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.067791][ T5940] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.072140][ T5940] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.076583][ T5940] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.081904][ T5940] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.088575][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.090716][ T5949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.093068][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.095143][ T5949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.105627][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.109202][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.113047][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.116040][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.131456][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.133527][ T5940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.135669][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.137695][ T5940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.158560][ T222] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.161806][ T222] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.165701][ T222] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.168175][ T222] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.188113][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.192203][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.198459][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.202405][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.213437][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.220002][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.240606][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.244266][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.251163][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.253188][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.255987][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.258006][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.262781][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.264776][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.271763][ T222] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.273799][ T222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.290223][ T5940] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.293181][ T5940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.316666][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.327524][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.331766][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.336627][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.338720][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.349041][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.351174][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.362927][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.371295][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.373350][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.376601][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.378808][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.384694][ T5939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.397075][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.408256][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.428667][ T5940] veth0_vlan: entered promiscuous mode [ 37.433545][ T5940] veth1_vlan: entered promiscuous mode [ 37.446033][ T5949] veth0_vlan: entered promiscuous mode [ 37.452124][ T5940] veth0_macvtap: entered promiscuous mode [ 37.454324][ T5949] veth1_vlan: entered promiscuous mode [ 37.458642][ T5940] veth1_macvtap: entered promiscuous mode [ 37.465525][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.474029][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.478900][ T5949] veth0_macvtap: entered promiscuous mode [ 37.484954][ T5949] veth1_macvtap: entered promiscuous mode [ 37.488924][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.499049][ T5940] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.501799][ T5940] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.504324][ T5940] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.506859][ T5940] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.524234][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.526861][ T5939] veth0_vlan: entered promiscuous mode [ 37.529936][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.533229][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.536886][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.541568][ T5939] veth1_vlan: entered promiscuous mode [ 37.554324][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.558163][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.562340][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.576689][ T5939] veth0_macvtap: entered promiscuous mode [ 37.584315][ T5939] veth1_macvtap: entered promiscuous mode [ 37.586747][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.589078][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.596988][ T5949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.600229][ T5949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.602751][ T5949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.605235][ T5949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.617570][ T5938] veth0_vlan: entered promiscuous mode [ 37.621452][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.623719][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.623757][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.628792][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.631766][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.634757][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.638249][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.641026][ T5938] veth1_vlan: entered promiscuous mode [ 37.648655][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.652002][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.654850][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.657834][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.661717][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.673560][ T5939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.674616][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.676468][ T5939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.682995][ T5939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.685493][ T5939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.706325][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.709049][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.728990][ T5938] veth0_macvtap: entered promiscuous mode [ 37.737727][ T5938] veth1_macvtap: entered promiscuous mode [ 37.741157][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.743427][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.743918][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.748491][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.752015][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.755022][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.757792][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.760922][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.764549][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.775250][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.778285][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.781322][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.784567][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.787381][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.790842][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.794406][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.797598][ T5938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.800712][ T5938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.803235][ T5938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.805849][ T5938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.817458][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.820684][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.846748][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.849056][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.849519][ T222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.853454][ T222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.860304][ T6007] : entered promiscuous mode [ 37.873010][ T222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.875857][ T222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.994339][ T6013] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.031997][ T5947] Bluetooth: hci1: command tx timeout [ 38.033517][ T5953] Bluetooth: hci0: command tx timeout [ 38.033914][ T5947] Bluetooth: hci2: command tx timeout [ 38.035662][ T5953] Bluetooth: hci3: command tx timeout [ 38.089453][ T6013] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.102075][ T6022] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 38.194150][ T6014] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 38.196040][ T6014] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 38.200373][ T6014] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 38.203635][ T6014] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 38.205497][ T6014] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 38.208806][ T6014] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 38.212773][ T6014] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 38.214538][ T6014] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 38.272840][ T6014] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 38.279443][ T6013] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.287568][ T6014] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 38.291282][ T6014] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 38.310140][ T6026] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 38.317461][ T6014] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 38.344618][ T6013] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.648202][ T6028] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 38.651202][ T6028] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 38.653712][ T6028] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 38.656132][ T6028] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 38.658610][ T6028] geneve2: entered promiscuous mode [ 38.660431][ T6028] geneve2: entered allmulticast mode [ 39.252324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 39.252404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 39.354723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 39.354809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 39.451255][ T6063] ax25_connect(): syz.3.10 uses autobind, please contact jreuter@yaina.de [ 39.675397][ T6070] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 39.937849][ T6074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12'. [ 39.944164][ T6074] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 40.199359][ T5303] Bluetooth: hci2: command 0x040f tx timeout [ 40.269389][ T5303] Bluetooth: hci1: command 0x040f tx timeout [ 40.279333][ T5303] Bluetooth: hci0: command 0x040f tx timeout [ 40.330362][ T6079] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 40.349825][ T5303] Bluetooth: hci3: command 0x041b tx timeout [ 40.403096][ T6077] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 40.405517][ T6077] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 40.407832][ T6077] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 40.410285][ T6077] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 40.479673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 41.153000][ T6088] ax25_connect(): syz.1.16 uses autobind, please contact jreuter@yaina.de [ 41.538125][ T6094] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 41.808867][ T6097] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 42.011358][ T6013] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.020212][ T6013] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.027672][ T6013] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.034243][ T6013] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.123406][ T6107] uprobe: syz.3.21:6107 failed to unregister, leaking uprobe [ 42.129425][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 42.322356][ T6111] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 42.399358][ T6109] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 42.402106][ T6109] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 42.404509][ T6109] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 42.407053][ T6109] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 42.531086][ T6118] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 42.607547][ T6122] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 43.041133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 43.041250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 43.143566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 43.143689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 43.205769][ T6115] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 43.207993][ T6115] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 43.210011][ T6115] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 43.211804][ T6115] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 43.263050][ T6129] ax25_connect(): syz.3.26 uses autobind, please contact jreuter@yaina.de [ 43.362418][ T6135] syz.0.27 uses obsolete (PF_INET,SOCK_PACKET) [ 43.453752][ T6140] syz.2.29: attempt to access beyond end of device [ 43.453752][ T6140] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 43.560101][ T6146] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 43.591788][ T6141] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 43.593639][ T6141] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 43.595605][ T6141] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 43.598002][ T6141] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 43.835338][ T6160] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 43.835849][ T6161] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 1 [ 43.841879][ T6162] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 2 [ 43.844695][ T6163] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 3 [ 44.520151][ T6156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 44.522495][ T6156] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 44.524826][ T6156] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 44.529746][ T6156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 44.538887][ T6167] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 45.066643][ T6179] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 45.127501][ T6177] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 45.132535][ T6183] ax25_connect(): syz.2.37 uses autobind, please contact jreuter@yaina.de [ 45.309437][ T6176] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 45.311447][ T6176] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 45.313149][ T6176] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 45.320786][ T6176] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 45.567305][ T6192] Zero length message leads to an empty skb [ 45.792167][ T6199] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 45.795300][ T6198] ax25_connect(): syz.2.43 uses autobind, please contact jreuter@yaina.de [ 46.081589][ T6210] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 46.243794][ T6204] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 46.250425][ T6204] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 46.257772][ T6204] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 46.263692][ T6204] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 46.927394][ T6237] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 46.942424][ T6238] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 1 [ 46.945531][ T6239] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 2 [ 46.948351][ T6240] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 3 [ 47.322621][ T6245] ax25_connect(): syz.1.53 uses autobind, please contact jreuter@yaina.de [ 47.586306][ T6232] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 47.589956][ T6232] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 47.592278][ T6232] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 47.594287][ T6232] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 47.855912][ T6263] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.858849][ T6263] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 47.878712][ T6264] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 47.927733][ T6263] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.931143][ T6263] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 47.980904][ T6260] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 47.983128][ T6260] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 47.985524][ T6260] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 47.987402][ T6260] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 48.019930][ T6263] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.022886][ T6263] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 48.085157][ T6263] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.088226][ T6263] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 48.157543][ T6269] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 48.201361][ T6263] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 48.203772][ T6263] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 48.208037][ T6263] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 48.210731][ T6263] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 48.215426][ T6263] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 48.217724][ T6263] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 48.222146][ T6263] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 48.224480][ T6263] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 48.396906][ T6272] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 49.251542][ T6288] ax25_connect(): syz.3.65 uses autobind, please contact jreuter@yaina.de [ 49.336428][ T5303] Bluetooth: hci1: unexpected event for opcode 0x040e [ 49.365417][ T6292] /dev/nullb0: Can't open blockdev [ 49.523891][ T6297] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 0 [ 49.527606][ T6298] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 1 [ 49.539507][ T6299] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 2 [ 49.543060][ T6301] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 0, id = 3 [ 49.633501][ T6303] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 50.030299][ T5953] Bluetooth: hci3: command 0x041b tx timeout [ 50.030313][ T5948] Bluetooth: hci0: command 0x040f tx timeout [ 50.056659][ T6285] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 50.059078][ T6285] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 50.062684][ T6285] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 50.064832][ T6285] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 50.160058][ T6317] FAULT_INJECTION: forcing a failure. [ 50.160058][ T6317] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.164286][ T6317] CPU: 2 UID: 0 PID: 6317 Comm: syz.2.72 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 50.167201][ T6317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 50.170136][ T6317] Call Trace: [ 50.171077][ T6317] [ 50.171888][ T6317] dump_stack_lvl+0x16c/0x1f0 [ 50.173741][ T6317] should_fail_ex+0x497/0x5b0 [ 50.175244][ T6317] _copy_from_user+0x2e/0xd0 [ 50.176527][ T6317] alg_setsockopt+0x46d/0xf50 [ 50.177878][ T6317] ? __pfx_alg_setsockopt+0x10/0x10 [ 50.179364][ T6317] ? __pfx_alg_setsockopt+0x10/0x10 [ 50.180858][ T6317] do_sock_setsockopt+0x222/0x480 [ 50.182454][ T6317] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 50.184341][ T6317] ? lock_acquire+0x2f/0xb0 [ 50.185655][ T6317] __sys_setsockopt+0x1a0/0x230 [ 50.187086][ T6317] __ia32_sys_setsockopt+0xbc/0x160 [ 50.188568][ T6317] ? lockdep_hardirqs_on+0x7c/0x110 [ 50.190064][ T6317] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 50.191991][ T6317] __do_fast_syscall_32+0x73/0x120 [ 50.194012][ T6317] do_fast_syscall_32+0x32/0x80 [ 50.195956][ T6317] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 50.197814][ T6317] RIP: 0023:0xf7f86579 [ 50.198967][ T6317] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 50.204776][ T6317] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 50.207114][ T6317] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000117 [ 50.209341][ T6317] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.211435][ T6317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 50.214303][ T6317] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 50.216422][ T6317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.218597][ T6317] [ 50.257113][ T6318] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 51.034552][ T6333] netlink: 'syz.0.76': attribute type 16 has an invalid length. [ 51.036872][ T6333] netlink: 'syz.0.76': attribute type 3 has an invalid length. [ 51.039143][ T6333] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.76'. [ 51.127515][ T6339] ax25_connect(): syz.3.78 uses autobind, please contact jreuter@yaina.de [ 51.309753][ T5303] Bluetooth: hci2: command 0x040f tx timeout [ 51.342630][ T6352] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 51.408407][ T6358] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 51.436937][ T6349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 51.438950][ T6349] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 51.440869][ T6349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 51.442763][ T6349] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 51.669961][ T6366] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 51.672519][ T6367] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 52.398242][ T6373] input: syz0 as /devices/virtual/input/input5 [ 52.488206][ T6376] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 52.580562][ T6374] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 52.582558][ T6374] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 52.584485][ T6374] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 52.586476][ T6374] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 52.751571][ T6378] syz.0.88: attempt to access beyond end of device [ 52.751571][ T6378] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 52.777526][ T6383] ax25_connect(): syz.1.90 uses autobind, please contact jreuter@yaina.de [ 53.235560][ T6401] ax25_connect(): syz.1.101 uses autobind, please contact jreuter@yaina.de [ 53.263836][ T6402] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 53.345900][ T6395] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.347761][ T6395] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.349919][ T6395] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 53.351778][ T6395] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.570684][ T6411] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 53.644546][ T6407] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.646897][ T6407] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.649707][ T6407] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 53.652118][ T6407] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.817226][ T6417] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 53.844382][ T6420] ax25_connect(): syz.0.98 uses autobind, please contact jreuter@yaina.de [ 54.678351][ T6432] syz.1.100: attempt to access beyond end of device [ 54.678351][ T6432] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 54.890051][ T6440] ax25_connect(): syz.1.105 uses autobind, please contact jreuter@yaina.de [ 54.952925][ T6445] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 55.105394][ T6437] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 55.108840][ T6437] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 55.111215][ T6437] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 55.113652][ T6437] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 55.219843][ T6454] input: syz0 as /devices/virtual/input/input6 [ 55.792769][ T6463] ax25_connect(): syz.1.108 uses autobind, please contact jreuter@yaina.de [ 55.987427][ T6469] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 56.142595][ T6473] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 56.223496][ T6471] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.227993][ T6471] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.239479][ T6471] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.241937][ T6471] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.489435][ T6479] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 56.781175][ T6485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.115'. [ 56.789909][ T6485] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 56.861926][ T6490] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 57.036887][ T6492] ax25_connect(): syz.3.117 uses autobind, please contact jreuter@yaina.de [ 57.069418][ T6493] uprobe: syz.1.118:6493 failed to unregister, leaking uprobe [ 57.657232][ T6510] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 57.734988][ T6507] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 57.737053][ T6507] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.739486][ T6507] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 57.742507][ T6507] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.212019][ T6527] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 58.257731][ T6530] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 58.526588][ T6533] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 58.591877][ T6533] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 58.594512][ T6533] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 58.597040][ T6533] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 58.599767][ T6533] geneve2: entered promiscuous mode [ 58.601302][ T6533] geneve2: entered allmulticast mode [ 58.872048][ T6528] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.874393][ T6528] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.876716][ T6528] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.879051][ T6528] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.887736][ T6544] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 59.511533][ T6556] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 59.880575][ T6566] ax25_connect(): syz.2.139 uses autobind, please contact jreuter@yaina.de [ 60.269471][ T5948] Bluetooth: hci2: command 0x040f tx timeout [ 60.434410][ T6575] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 60.533206][ T6572] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 60.535138][ T6572] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 60.536981][ T6572] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 60.538912][ T6572] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 60.618170][ T6582] FAULT_INJECTION: forcing a failure. [ 60.618170][ T6582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.627859][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.3.134 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 60.631483][ T6582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.635085][ T6582] Call Trace: [ 60.636305][ T6582] [ 60.637446][ T6582] dump_stack_lvl+0x16c/0x1f0 [ 60.639523][ T6582] should_fail_ex+0x497/0x5b0 [ 60.641223][ T6582] _copy_to_user+0x32/0xd0 [ 60.642796][ T6582] simple_read_from_buffer+0xd0/0x160 [ 60.644690][ T6582] proc_fail_nth_read+0x198/0x270 [ 60.646432][ T6582] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.648578][ T6582] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.650489][ T6582] vfs_read+0x1df/0xbe0 [ 60.651753][ T6582] ? __fget_files+0x1fc/0x3a0 [ 60.653416][ T6582] ? __pfx___mutex_lock+0x10/0x10 [ 60.655129][ T6582] ? __pfx_vfs_read+0x10/0x10 [ 60.656374][ T6582] ? __fget_files+0x206/0x3a0 [ 60.657819][ T6582] ksys_read+0x12b/0x250 [ 60.659037][ T6582] ? __pfx_ksys_read+0x10/0x10 [ 60.660454][ T6582] __do_fast_syscall_32+0x73/0x120 [ 60.661922][ T6582] do_fast_syscall_32+0x32/0x80 [ 60.663319][ T6582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.665117][ T6582] RIP: 0023:0xf7ff7579 [ 60.666289][ T6582] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 60.671843][ T6582] RSP: 002b:00000000f5146590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 60.674221][ T6582] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5146620 [ 60.676471][ T6582] RDX: 000000000000000f RSI: 00000000f7483ff4 RDI: 0000000000000000 [ 60.678735][ T6582] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 60.680971][ T6582] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 60.683222][ T6582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.685360][ T6582] [ 60.786160][ T6590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.138'. [ 60.957090][ T6601] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 61.065099][ T6595] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 61.067100][ T6595] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 61.068987][ T6595] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.071871][ T6595] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 61.243553][ T6606] ax25_connect(): syz.1.143 uses autobind, please contact jreuter@yaina.de [ 61.338178][ T6607] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 61.411164][ T6607] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 61.484718][ T6618] binder: BINDER_SET_CONTEXT_MGR already set [ 61.486579][ T6618] binder: 6617:6618 ioctl 4018620d 20004a80 returned -16 [ 61.708652][ T6629] netlink: 44 bytes leftover after parsing attributes in process `syz.2.149'. [ 61.912998][ T6639] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 61.983111][ T6634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 61.985200][ T6634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 61.986991][ T6634] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.989118][ T6634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 62.027046][ T6642] ax25_connect(): syz.1.153 uses autobind, please contact jreuter@yaina.de [ 62.831473][ T6653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.156'. [ 62.838503][ T6650] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 63.152845][ T6660] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 63.217259][ T6670] netlink: 820 bytes leftover after parsing attributes in process `syz.2.159'. [ 63.246690][ T6672] netlink: 44 bytes leftover after parsing attributes in process `syz.3.160'. [ 63.274651][ T6670] process 'syz.2.159' launched './file0' with NULL argv: empty string added [ 63.403195][ T6682] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 63.504309][ T6677] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 63.506434][ T6677] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 63.508388][ T6677] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 63.510770][ T6677] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 63.566185][ T6691] netlink: 'syz.2.162': attribute type 10 has an invalid length. [ 63.696937][ T6698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.163'. [ 63.785292][ T6691] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 64.477503][ T6711] ax25_connect(): syz.3.165 uses autobind, please contact jreuter@yaina.de [ 64.737902][ T6719] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 65.070004][ T6740] netlink: 32 bytes leftover after parsing attributes in process `syz.1.170'. [ 65.281209][ T6734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 65.469389][ T5948] Bluetooth: hci2: command 0x040f tx timeout [ 65.549337][ T5948] Bluetooth: hci0: command 0x040f tx timeout [ 65.551640][ T5948] Bluetooth: hci3: command 0x041b tx timeout [ 65.553903][ T5948] Bluetooth: hci1: command 0x040f tx timeout [ 65.878718][ T6777] fuse: Bad value for 'user_id' [ 65.880475][ T6777] fuse: Bad value for 'user_id' [ 65.988258][ T6783] netlink: 32 bytes leftover after parsing attributes in process `syz.3.179'. [ 66.169575][ T39] audit: type=1326 audit(1735293628.295:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.0.181" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 66.175683][ T39] audit: type=1326 audit(1735293628.295:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.0.181" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 66.181874][ T39] audit: type=1326 audit(1735293628.295:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.0.181" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 66.188881][ T39] audit: type=1326 audit(1735293628.295:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.0.181" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 66.191512][ T6799] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 66.197893][ T39] audit: type=1326 audit(1735293628.295:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.0.181" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 66.204079][ T39] audit: type=1326 audit(1735293628.295:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.0.181" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 66.296148][ T6794] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.298098][ T6794] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.300123][ T6794] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 66.301946][ T6794] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.307718][ T39] audit: type=1326 audit(1735293628.425:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.0.181" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 66.319327][ T39] audit: type=1326 audit(1735293628.425:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.0.181" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 66.326878][ T39] audit: type=1326 audit(1735293628.425:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.0.181" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 66.332939][ T39] audit: type=1326 audit(1735293628.425:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.0.181" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f14579 code=0x7ffc0000 [ 66.549331][ T1486] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.588252][ T6806] syz.2.186: attempt to access beyond end of device [ 66.588252][ T6806] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 66.592376][ T6806] syz.2.186: attempt to access beyond end of device [ 66.592376][ T6806] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 66.593015][ T6804] nbd2: detected capacity change from 0 to 67108884 [ 66.596090][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 66.604010][ T6806] block nbd2: Send control failed (result -89) [ 66.606153][ T6806] block nbd2: Request send failed, requeueing [ 66.608859][ T5953] block nbd2: Receive control failed (result -32) [ 66.609809][ T5379] block nbd2: Dead connection, failed to find a fallback [ 66.614347][ T5379] block nbd2: shutting down sockets [ 66.615973][ T5379] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.619212][ T5950] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.622020][ T5950] Buffer I/O error on dev nbd2, logical block 0, async page read [ 66.624728][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0 [ 66.625187][ T5950] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.630551][ T5950] Buffer I/O error on dev nbd2, logical block 1, async page read [ 66.632867][ T5950] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.635456][ T5950] Buffer I/O error on dev nbd2, logical block 2, async page read [ 66.635913][ T6806] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.637756][ T5950] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.637770][ T5950] Buffer I/O error on dev nbd2, logical block 3, async page read [ 66.648303][ T5950] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.651100][ T5950] Buffer I/O error on dev nbd2, logical block 0, async page read [ 66.653566][ T5950] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.656152][ T5950] Buffer I/O error on dev nbd2, logical block 1, async page read [ 66.658389][ T5950] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.662164][ T5950] Buffer I/O error on dev nbd2, logical block 2, async page read [ 66.664404][ T5950] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.666955][ T5950] Buffer I/O error on dev nbd2, logical block 3, async page read [ 66.669186][ T5950] Buffer I/O error on dev nbd2, logical block 0, async page read [ 66.671508][ T5950] Buffer I/O error on dev nbd2, logical block 1, async page read [ 66.674950][ T5950] ldm_validate_partition_table(): Disk read failed. [ 66.677426][ T5950] Dev nbd2: unable to read RDB block 0 [ 66.679692][ T5950] nbd2: unable to read partition table [ 66.680677][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1, location=1 [ 66.684068][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 66.687486][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 66.692105][ T5950] ldm_validate_partition_table(): Disk read failed. [ 66.692651][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777220, location=16777220 [ 66.694283][ T5950] Dev nbd2: unable to read RDB block 0 [ 66.698995][ T5950] nbd2: unable to read partition table [ 66.701228][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776964, location=16776964 [ 66.705369][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777219, location=16777219 [ 66.709296][ T1486] usb 5-1: Using ep0 maxpacket: 32 [ 66.710168][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776963, location=16776963 [ 66.714009][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777218, location=16777218 [ 66.717030][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776962, location=16776962 [ 66.717544][ T1486] usb 5-1: config 0 has no interfaces? [ 66.720230][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777070, location=16777070 [ 66.721739][ T1486] usb 5-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 66.724929][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776814, location=16776814 [ 66.727564][ T1486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.730712][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777068, location=16777068 [ 66.735835][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776812, location=16776812 [ 66.738786][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 66.740889][ T1486] usb 5-1: config 0 descriptor?? [ 66.743293][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 66.746079][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388609, location=8388609 [ 66.749025][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388353, location=8388353 [ 66.752259][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388608, location=8388608 [ 66.755720][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388352, location=8388352 [ 66.758675][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388607, location=8388607 [ 66.763639][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388351, location=8388351 [ 66.766986][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388459, location=8388459 [ 66.770253][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388203, location=8388203 [ 66.773198][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388457, location=8388457 [ 66.776140][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388201, location=8388201 [ 66.779095][ T6806] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 66.782215][ T6806] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 67.006053][ T25] usb 5-1: USB disconnect, device number 2 [ 67.290959][ T6815] netlink: 596 bytes leftover after parsing attributes in process `syz.1.188'. [ 67.292565][ T6816] netlink: 32 bytes leftover after parsing attributes in process `syz.3.189'. [ 67.397040][ T6820] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 67.433501][ T6821] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 67.552654][ T6823] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.556241][ T6823] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.210095][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 68.269420][ T5953] Bluetooth: hci2: command 0x040f tx timeout [ 68.316836][ T6831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.352782][ T5953] Bluetooth: hci1: command 0x040f tx timeout [ 68.359302][ T5953] Bluetooth: hci3: command 0x041b tx timeout [ 68.359573][ T5948] Bluetooth: hci0: command 0x040f tx timeout [ 68.415738][ T6834] vti0: entered promiscuous mode [ 68.486480][ T6830] syz.2.193 (6830) used greatest stack depth: 21072 bytes left [ 69.357915][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 69.819341][ T6004] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 69.969353][ T6004] usb 7-1: Using ep0 maxpacket: 32 [ 69.987479][ T6004] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 58604, setting to 1024 [ 69.992909][ T6004] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 70.002927][ T6004] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 70.005596][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.007862][ T6004] usb 7-1: Product: syz [ 70.009074][ T6004] usb 7-1: Manufacturer: syz [ 70.011534][ T6004] usb 7-1: SerialNumber: syz [ 70.017597][ T6850] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 70.235794][ T6004] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 70.271130][ T6004] usb 7-1: USB disconnect, device number 2 [ 70.290777][ T6004] usblp0: removed [ 70.312481][ T6873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.203'. [ 70.350046][ T5948] Bluetooth: hci2: command 0x040f tx timeout [ 70.418612][ T6882] ax25_connect(): syz.1.206 uses autobind, please contact jreuter@yaina.de [ 70.429553][ T5948] Bluetooth: hci3: command 0x041b tx timeout [ 70.431615][ T5953] Bluetooth: hci1: command 0x040f tx timeout [ 70.432109][ T5948] Bluetooth: hci0: command 0x040f tx timeout [ 70.633059][ T6890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.208'. [ 70.699308][ T6004] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 70.752262][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.754263][ T1412] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.849292][ T6004] usb 7-1: Using ep0 maxpacket: 8 [ 70.852798][ T6004] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 70.855135][ T6004] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 70.857481][ T6004] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 70.860784][ T6004] usb 7-1: config 250 has no interface number 0 [ 70.862620][ T6004] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 70.865830][ T6004] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 70.868729][ T6004] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 56576, setting to 1024 [ 70.872203][ T6004] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 70.875164][ T6004] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 70.878905][ T6004] usb 7-1: config 250 interface 228 has no altsetting 0 [ 70.883628][ T6004] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 70.886289][ T6004] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 70.888659][ T6004] usb 7-1: Product: syz [ 70.890121][ T6004] usb 7-1: SerialNumber: syz [ 70.896753][ T6004] hub 7-1:250.228: bad descriptor, ignoring hub [ 70.898604][ T6004] hub 7-1:250.228: probe with driver hub failed with error -5 [ 71.240842][ T6895] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 71.375626][ T6895] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 71.920952][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'. [ 71.925043][ T6901] unsupported nlmsg_type 40 [ 71.962914][ T6004] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 72.168480][ T6899] capability: warning: `syz.2.204' uses deprecated v2 capabilities in a way that may be insecure [ 72.330026][ T6911] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 72.333513][ T6908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.406594][ T6908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.410031][ T6905] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 72.411899][ T6905] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 72.413723][ T6905] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 72.415523][ T6905] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 72.448879][ T6917] ax25_connect(): syz.3.216 uses autobind, please contact jreuter@yaina.de [ 72.449888][ T6915] sp0: Synchronizing with TNC [ 72.483228][ T6908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.538934][ T6908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.633082][ T6908] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.637946][ T6908] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.645047][ T6908] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.646121][ T39] kauditd_printk_skb: 78 callbacks suppressed [ 72.646128][ T39] audit: type=1326 audit(1735293634.765:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.3.218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.652833][ T6908] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.658727][ T39] audit: type=1326 audit(1735293634.775:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.3.218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.665250][ T39] audit: type=1326 audit(1735293634.775:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.3.218" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.671424][ T39] audit: type=1326 audit(1735293634.775:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.3.218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.677847][ T39] audit: type=1326 audit(1735293634.775:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.3.218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.683998][ T39] audit: type=1326 audit(1735293634.775:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.3.218" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.690072][ T39] audit: type=1326 audit(1735293634.775:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.3.218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.696299][ T39] audit: type=1326 audit(1735293634.775:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.3.218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.702482][ T39] audit: type=1326 audit(1735293634.785:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.3.218" exe="/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.708487][ T39] audit: type=1326 audit(1735293634.785:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6922 comm="syz.3.218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x7ffc0000 [ 72.845499][ T6934] Driver unsupported XDP return value 0 on prog (id 121) dev N/A, expect packet loss! [ 72.950661][ T6004] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 73.150510][ T6004] usb 8-1: unable to get BOS descriptor or descriptor too short [ 73.164243][ T6004] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 73.166570][ T6004] usb 8-1: can't read configurations, error -71 [ 73.420781][ T6943] capability: warning: `syz.1.223' uses 32-bit capabilities (legacy support in use) [ 73.706120][ T6960] bridge1: entered promiscuous mode [ 73.711180][ T6961] bridge2: entered promiscuous mode [ 73.844052][ T6969] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 74.359342][ T5303] Bluetooth: hci2: command 0x040f tx timeout [ 74.402364][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.232'. [ 74.439411][ T5948] Bluetooth: hci0: command 0x040f tx timeout [ 74.439450][ T5953] Bluetooth: hci1: command 0x040f tx timeout [ 74.441224][ T5303] Bluetooth: hci3: command 0x041b tx timeout [ 74.909978][ T5303] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 74.924738][ T1137] tipc: Subscription rejected, illegal request [ 75.522092][ T5983] usb 7-1: USB disconnect, device number 3 [ 75.525655][ T5983] usblp0: removed [ 75.775518][ T7015] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 75.866772][ T7013] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.868665][ T7013] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.870871][ T7013] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.873516][ T7013] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.886052][ T9] cfg80211: failed to load regulatory.db [ 76.734353][ T7028] netlink: 24 bytes leftover after parsing attributes in process `syz.0.245'. [ 77.869450][ T5948] Bluetooth: hci1: command 0x040f tx timeout [ 77.869497][ T5303] Bluetooth: hci2: command 0x040f tx timeout [ 77.877062][ T7044] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 77.949426][ T5948] Bluetooth: hci3: command 0x041b tx timeout [ 77.949442][ T5303] Bluetooth: hci0: command 0x040f tx timeout [ 77.959943][ T7041] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 77.962461][ T7041] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 77.964317][ T7041] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 77.966664][ T7041] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.174822][ T39] kauditd_printk_skb: 68 callbacks suppressed [ 78.174834][ T39] audit: type=1804 audit(1735293640.295:168): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.249" name="/newroot/67/file0/file0" dev="9p" ino=42206991 res=1 errno=0 [ 78.636951][ T7061] netlink: 596 bytes leftover after parsing attributes in process `syz.3.253'. [ 78.869760][ T7064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.529297][ T7068] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 79.529760][ T7067] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 79.772984][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 80.024130][ T5303] Bluetooth: hci2: command 0x040f tx timeout [ 80.029402][ T5303] Bluetooth: hci3: command 0x041b tx timeout [ 80.039368][ T5303] Bluetooth: hci0: command 0x040f tx timeout [ 80.039380][ T5948] Bluetooth: hci1: command 0x040f tx timeout [ 80.515172][ T7091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.988336][ T7096] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 81.240676][ T7104] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 81.801293][ T7112] ax25_connect(): syz.0.266 uses autobind, please contact jreuter@yaina.de [ 81.885465][ T7119] netlink: 596 bytes leftover after parsing attributes in process `syz.2.267'. [ 81.997139][ T7122] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 82.026058][ T7126] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 82.029295][ T5303] Bluetooth: hci2: command 0x040f tx timeout [ 82.067172][ T7127] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 82.110862][ T5303] Bluetooth: hci0: command 0x040f tx timeout [ 82.112924][ T5303] Bluetooth: hci3: command 0x041b tx timeout [ 82.130843][ T7123] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 82.132971][ T7123] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 82.135286][ T7123] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 82.137306][ T7123] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 82.450587][ T7139] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 82.590014][ T7135] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 82.592999][ T7135] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 82.594957][ T7135] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 82.596822][ T7135] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 82.800908][ T7150] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 82.991491][ T7166] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 83.089381][ T7160] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.128230][ T7160] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.162770][ T7160] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.164682][ T7160] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.497597][ T7184] netlink: 56 bytes leftover after parsing attributes in process `syz.2.285'. [ 83.500838][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 83.504595][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 83.507983][ T7184] netlink: 48 bytes leftover after parsing attributes in process `syz.2.285'. [ 83.801786][ T7208] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 83.899893][ T7203] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.901824][ T7203] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.903656][ T7203] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.906142][ T7203] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 84.115255][ T7216] netlink: 24 bytes leftover after parsing attributes in process `syz.3.294'. [ 85.042575][ T7240] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 85.045049][ T7240] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 85.047498][ T7240] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 85.089305][ T7244] serio: Serial port ptm0 [ 85.372769][ T7252] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 85.473410][ T7250] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.475287][ T7250] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.477174][ T7250] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.479736][ T7250] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.510928][ T7254] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 85.514171][ T7254] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 85.541960][ T65] IPVS: starting estimator thread 0... [ 85.629403][ T7259] IPVS: using max 41 ests per chain, 98400 per kthread [ 85.838748][ T7267] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.954487][ T7268] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 86.070991][ T7276] vti0: entered promiscuous mode [ 86.151335][ T7280] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 86.236989][ T7280] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 86.939415][ T1447] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.102622][ T1447] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.105318][ T1447] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 87.108218][ T1447] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.111037][ T1447] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 87.114411][ T1447] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 87.118598][ T1447] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.121527][ T1447] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.123818][ T1447] usb 5-1: Product: syz [ 87.125080][ T1447] usb 5-1: Manufacturer: syz [ 87.129067][ T1447] cdc_wdm 5-1:1.0: skipping garbage [ 87.130939][ T1447] cdc_wdm 5-1:1.0: skipping garbage [ 87.134329][ T1447] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 87.136267][ T1447] cdc_wdm 5-1:1.0: Unknown control protocol [ 87.408102][ T7307] ieee802154 phy0 wpan0: encryption failed: -22 [ 87.451254][ C2] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 87.451511][ T65] usb 5-1: USB disconnect, device number 3 [ 87.453814][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 87.453827][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 87.455493][ T7284] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 87.465667][ T7287] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 87.479317][ T5948] Bluetooth: hci2: command 0x040f tx timeout [ 87.549388][ T5948] Bluetooth: hci0: command 0x040f tx timeout [ 87.549494][ T5953] Bluetooth: hci1: command 0x040f tx timeout [ 87.549539][ T5303] Bluetooth: hci3: command 0x041b tx timeout [ 88.968805][ T7333] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 89.083822][ T7337] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 89.087810][ T7336] netlink: 'syz.2.320': attribute type 2 has an invalid length. [ 89.113984][ T7339] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 89.141287][ T39] audit: type=1326 audit(1735293651.265:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.2.323" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x0 [ 89.193450][ T7334] siw: device registration error -23 [ 89.244374][ T7343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.323'. [ 89.278552][ T7334] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 89.560315][ T5953] Bluetooth: hci2: command 0x040f tx timeout [ 89.629370][ T5953] Bluetooth: hci0: command 0x040f tx timeout [ 89.639425][ T5953] Bluetooth: hci3: command 0x041b tx timeout [ 89.936317][ T7358] ax25_connect(): syz.1.328 uses autobind, please contact jreuter@yaina.de [ 90.028913][ T7363] mkiss: ax0: crc mode is auto. [ 90.174354][ T39] audit: type=1800 audit(1735293652.295:170): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.331" name="/newroot/93/file0" dev="tmpfs" ino=525 res=0 errno=0 [ 90.217969][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.332'. [ 91.195509][ T7402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.339'. [ 91.198784][ T7402] netlink: 'syz.2.339': attribute type 5 has an invalid length. [ 91.200616][ T7404] ax25_connect(): syz.1.340 uses autobind, please contact jreuter@yaina.de [ 91.292380][ T7415] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 91.294767][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'. [ 91.400083][ T7405] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 91.402152][ T7405] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 91.405367][ T7405] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 91.457946][ T7434] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 91.588907][ T7437] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 93.389456][ T5303] Bluetooth: hci2: command 0x040f tx timeout [ 93.469437][ T5303] Bluetooth: hci0: command 0x040f tx timeout [ 93.470878][ T5948] Bluetooth: hci1: command 0x040f tx timeout [ 93.479404][ T5948] Bluetooth: hci3: command 0x041b tx timeout [ 93.484547][ T7405] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.486420][ T7405] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000020: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 93.490486][ T7405] KASAN: maybe wild-memory-access in range [0xdead000000000100-0xdead000000000107] [ 93.494762][ T7405] CPU: 1 UID: 0 PID: 7405 Comm: syz.3.337 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 93.497811][ T7405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.500997][ T7405] RIP: 0010:l2cap_conn_del+0x3dd/0x730 [ 93.502640][ T7405] Code: 8b 40 20 48 89 df ff d0 0f 1f 00 4c 89 f7 e8 8a fd f7 00 4d 8d b4 24 80 04 00 00 48 89 df e8 fa 3e ff ff 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 0f 85 24 02 00 00 49 8b 84 24 80 04 00 00 4c 89 e3 [ 93.508232][ T7405] RSP: 0018:ffffc9000e01f310 EFLAGS: 00010a02 [ 93.510065][ T7405] RAX: 1bd5a00000000020 RBX: ffff8880682e5000 RCX: ffffc9000cf11000 [ 93.512369][ T7405] RDX: 0000000000080000 RSI: ffffffff8a237ce6 RDI: 0000000000000005 [ 93.514693][ T7405] RBP: ffff8880219de000 R08: 0000000000000005 R09: 0000000000000001 [ 93.516977][ T7405] R10: 0000000000000002 R11: 0000000000000000 R12: deacfffffffffc80 [ 93.519425][ T7405] R13: dffffc0000000000 R14: dead000000000100 R15: 0000000000000068 [ 93.522416][ T7405] FS: 0000000000000000(0000) GS:ffff88802b500000(0063) knlGS:00000000f5125b40 [ 93.525009][ T7405] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 93.526957][ T7405] CR2: 0000000020032000 CR3: 000000004b88e000 CR4: 0000000000352ef0 [ 93.529586][ T7405] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.531988][ T7405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.534355][ T7405] Call Trace: [ 93.535351][ T7405] [ 93.536262][ T7405] ? die_addr+0x3b/0xa0 [ 93.537531][ T7405] ? exc_general_protection+0x155/0x230 [ 93.539247][ T7405] ? asm_exc_general_protection+0x26/0x30 [ 93.541169][ T7405] ? l2cap_conn_del+0x3d6/0x730 [ 93.542748][ T7405] ? l2cap_conn_del+0x3dd/0x730 [ 93.544202][ T7405] l2cap_connect_cfm+0x7aa/0xf10 [ 93.545724][ T7405] ? kasan_quarantine_put+0x10a/0x240 [ 93.547371][ T7405] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.548947][ T7405] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 93.551135][ T7405] ? kfree+0x14f/0x4b0 [ 93.552615][ T7405] ? hci_conn_failed+0x235/0x3e0 [ 93.554083][ T7405] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 93.555675][ T7405] hci_conn_failed+0x225/0x3e0 [ 93.557074][ T7405] ? __pfx_hci_conn_failed+0x10/0x10 [ 93.558649][ T7405] ? lock_acquire+0x2f/0xb0 [ 93.559992][ T7405] ? hci_abort_conn_sync+0x172/0x1030 [ 93.561571][ T7405] hci_abort_conn_sync+0x968/0x1030 [ 93.563111][ T7405] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 93.564749][ T7405] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 93.566699][ T7405] ? __pfx_lock_release+0x10/0x10 [ 93.568164][ T7405] ? trace_lock_acquire+0x14e/0x1f0 [ 93.569727][ T7405] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 93.571660][ T7405] hci_disconnect_all_sync.constprop.0+0x104/0x3c0 [ 93.573559][ T7405] hci_suspend_sync+0x772/0xab0 [ 93.575003][ T7405] ? __pfx_hci_suspend_sync+0x10/0x10 [ 93.576601][ T7405] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 93.578309][ T7405] ? __wake_up+0x3f/0x60 [ 93.579801][ T7405] hci_suspend_dev+0x27d/0x5e0 [ 93.581720][ T7405] hci_suspend_notifier+0x28d/0x2f0 [ 93.583534][ T7405] notifier_call_chain+0xb7/0x410 [ 93.585028][ T7405] ? __pfx_hci_suspend_notifier+0x10/0x10 [ 93.586768][ T7405] blocking_notifier_call_chain_robust+0xc9/0x170 [ 93.588640][ T7405] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 93.590683][ T7405] pm_notifier_call_chain_robust+0x27/0x60 [ 93.592387][ T7405] snapshot_open+0x189/0x2b0 [ 93.593769][ T7405] ? __pfx_snapshot_open+0x10/0x10 [ 93.595256][ T7405] misc_open+0x35a/0x420 [ 93.596530][ T7405] ? __pfx_misc_open+0x10/0x10 [ 93.597967][ T7405] chrdev_open+0x237/0x6a0 [ 93.599414][ T7405] ? __pfx_apparmor_file_open+0x10/0x10 [ 93.601632][ T7405] ? __pfx_chrdev_open+0x10/0x10 [ 93.603204][ T7405] do_dentry_open+0xf59/0x1ea0 [ 93.604624][ T7405] ? __pfx_chrdev_open+0x10/0x10 [ 93.606089][ T7405] ? inode_permission+0xdd/0x5f0 [ 93.607580][ T7405] vfs_open+0x82/0x3f0 [ 93.608796][ T7405] ? may_open+0x1f2/0x400 [ 93.610088][ T7405] path_openat+0x1e6a/0x2d60 [ 93.611437][ T7405] ? __pfx_path_openat+0x10/0x10 [ 93.612896][ T7405] ? __pfx___lock_acquire+0x10/0x10 [ 93.614425][ T7405] ? lock_acquire.part.0+0x11b/0x380 [ 93.615969][ T7405] ? find_held_lock+0x2d/0x110 [ 93.617396][ T7405] do_filp_open+0x20c/0x470 [ 93.618758][ T7405] ? __pfx_do_filp_open+0x10/0x10 [ 93.620696][ T7405] ? find_held_lock+0x2d/0x110 [ 93.622509][ T7405] ? alloc_fd+0x41f/0x760 [ 93.623821][ T7405] do_sys_openat2+0x17a/0x1e0 [ 93.625216][ T7405] ? __pfx_do_sys_openat2+0x10/0x10 [ 93.626904][ T7405] __ia32_compat_sys_openat+0x16e/0x210 [ 93.628748][ T7405] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 93.630586][ T7405] __do_fast_syscall_32+0x73/0x120 [ 93.632102][ T7405] do_fast_syscall_32+0x32/0x80 [ 93.633532][ T7405] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.635348][ T7405] RIP: 0023:0xf7ff7579 [ 93.636537][ T7405] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 93.642291][ T7405] RSP: 002b:00000000f512555c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 93.645299][ T7405] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000340 [ 93.647944][ T7405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.650504][ T7405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.652978][ T7405] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 93.655248][ T7405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.657519][ T7405] [ 93.658418][ T7405] Modules linked in: [ 93.659748][ T7405] ---[ end trace 0000000000000000 ]--- [ 93.661404][ T7405] RIP: 0010:l2cap_conn_del+0x3dd/0x730 [ 93.663010][ T7405] Code: 8b 40 20 48 89 df ff d0 0f 1f 00 4c 89 f7 e8 8a fd f7 00 4d 8d b4 24 80 04 00 00 48 89 df e8 fa 3e ff ff 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 0f 85 24 02 00 00 49 8b 84 24 80 04 00 00 4c 89 e3 [ 93.668557][ T7405] RSP: 0018:ffffc9000e01f310 EFLAGS: 00010a02 [ 93.670328][ T7405] RAX: 1bd5a00000000020 RBX: ffff8880682e5000 RCX: ffffc9000cf11000 [ 93.672514][ T7405] RDX: 0000000000080000 RSI: ffffffff8a237ce6 RDI: 0000000000000005 [ 93.674755][ T7405] RBP: ffff8880219de000 R08: 0000000000000005 R09: 0000000000000001 [ 93.676995][ T7405] R10: 0000000000000002 R11: 0000000000000000 R12: deacfffffffffc80 [ 93.679321][ T7405] R13: dffffc0000000000 R14: dead000000000100 R15: 0000000000000068 [ 93.681582][ T7405] FS: 0000000000000000(0000) GS:ffff88802b400000(0063) knlGS:00000000f5125b40 [ 93.684147][ T7405] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 93.686028][ T7405] CR2: 000000002ed03ffc CR3: 000000004b88e000 CR4: 0000000000352ef0 [ 93.688286][ T7405] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.690593][ T7405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.692822][ T7405] Kernel panic - not syncing: Fatal exception [ 93.695142][ T7405] Kernel Offset: disabled [ 93.696369][ T7405] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:00:55 Registers: info registers vcpu 0 CPU#0 RAX=000000000052667c RBX=0000000000000000 RCX=ffffffff8b1a3819 RDX=ffffed1005686fee RSI=ffffffff8bb16f80 RDI=ffffffff81702e79 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901ce3d0 R15=0000000000000000 RIP=ffffffff8b1a4bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002ed03ffc CR3=0000000051d40000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008c00000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85142ed0 RDI=ffffffff9a667240 RBP=ffffffff9a667200 RSP=ffffc9000e01ec98 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6d203a4e4153414b R12=0000000000000000 R13=0000000000000020 R14=fffffbfff34cce9a R15=dffffc0000000000 RIP=ffffffff85142ef7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020032000 CR3=000000004b88e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000024000000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000fbe7c RBX=0000000000000002 RCX=ffffffff8b1a3819 RDX=ffffed10056c6fee RSI=ffffffff8bb16f80 RDI=ffffffff81702e79 RBP=ffffed10036ef000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000001 R12=0000000000000002 R13=ffff88801b778000 R14=ffffffff901ce3d0 R15=0000000000000000 RIP=ffffffff8b1a4bff RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f51ab2b9 CR3=00000000226c6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7433ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000012e703 RBX=0000000000000003 RCX=ffffffff8b1a3819 RDX=0000000000000000 RSI=ffffffff8b4cd280 RDI=ffffffff8bb17000 RBP=ffffed10036ef488 RSP=ffffc9000049fe08 R8 =0000000000000001 R9 =ffffed10056e6fed R10=ffff88802b737f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801b77a440 R14=ffffffff901ce3d0 R15=0000000000000000 RIP=ffffffff8b1a4bff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002ed02ffc CR3=00000000656e8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000