last executing test programs: 4.373687839s ago: executing program 3 (id=491): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000040000000000000006000000850000004f0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.303218297s ago: executing program 3 (id=493): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x9b, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x1, 0x1, 0x7, 0xa0, 0x1, [{{0x9, 0x4, 0x0, 0xd, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x7, 0x24, 0x6, 0x0, 0x0, "122c"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x5, 0x9199, 0x6}, [@ncm={0x6, 0x24, 0x1a, 0x3, 0x20}, @acm={0x4, 0x24, 0x2, 0x8}, @acm={0x4, 0x24, 0x2, 0x2}, @mdlm_detail={0x15, 0x24, 0x13, 0x6, "325efb5ce90dfc71e0b27378ff805e7c40"}, @mdlm_detail={0x29, 0x24, 0x13, 0x8, "853617e64967dccb27aee1c08e927492063865bd217eb81134c964a1383e8e3ae40851d61c"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xd, 0x9, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x9, 0xdd}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x3, 0x42, 0x3, 0x40, 0xff}, 0xf7, &(0x7f0000000340)={0x5, 0xf, 0xf7, 0x4, [@generic={0xd3, 0x10, 0x4, "a879b3ef6c1fc717581e6d1dd55af4f1852395ceb63e7b5b5ca7564a68d675a2df1fe4afd69980440d422902affe377ab3366e60a02752547c119355478e17fb64608a7dd363fbeb8828252644a8b04c9d9e9c2c403178d4b46f1f4b1a40113504b6cc5e48961ab3724d63497565c2f6e15e97b4f1a39087e993477c386798b2828134202f26c42e5eb314bd89fa99ef5d8771c65dc69bf57e174a2f4849d025283f08bfb801897ff4d78804203785bf02c47f6112232d705e245df9d735850db082cda074b7e45f2ebc047346421695"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x2, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0xf9, 0x4}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0x9, 0x7, 0x3}]}, 0x6, [{0x1b, &(0x7f0000000200)=@string={0x1b, 0x3, "496a6da6a709a9386a9293a4c7fbbcb0f1b70a93840ec40b02"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1404}}, {0x2c, &(0x7f00000004c0)=@string={0x2c, 0x3, "035d74af2e87e12e735a3eaf7817fc562f2ec6d868ce01700e3016f6e457d5816657c1f117e231d356d2"}}, {0x40, &(0x7f0000000500)=@string={0x40, 0x3, "6dce74fb8cc2fb13f633f93bea7812403da696c7a73b28bf9bd53bb9731942f2cec157e5c645a122ec0268b5a85b412ec78fa10f5d5eee5cdc5afa078ccb"}}, {0x1a, &(0x7f0000000540)=@string={0x1a, 0x3, "af3facf10b94701f895a6c21cfda89a9fe0c31e049e0d0cf"}}, {0x74, &(0x7f0000000580)=@string={0x74, 0x3, "bfcb782d7be664d210c481706a80287770a512a1d180ece230712cf2d5cdcb08f2ba5be2223fac6370c07425ffda2f164949bb284e5d1937c1f3c5696b1f73ed9ec9f50dee918d653a5a526cd1a4254357d6f5d1d152e0e38472f7cc67618affdacc0e99e194a2041775c2aab18c4b1c2dff"}}]}) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) syz_open_procfs(r0, &(0x7f0000000140)='ns\x00') read(r1, &(0x7f0000000b80)=""/215, 0xd7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x32f, @tick=0xfffffffc, 0x0, {0x6}, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000006c0)={0x400, 0x2, 0xe}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x10, 0x7fff0002}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004440)=""/5) 3.533554998s ago: executing program 0 (id=499): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000084ffffffff00000000020000000600000000000000000000090300000000000000"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000180)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340)=0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000003f000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') read$char_usb(r8, &(0x7f0000000000)=""/178, 0xb2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r5) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x800, 0x0) 2.893552787s ago: executing program 1 (id=508): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x301, 0xfffffffc, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c000200084e00"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="000300000b000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e9, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.793431826s ago: executing program 1 (id=509): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0x2, 0x4001}, 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='exfat\x00', 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000001c0)=0xfffffff9, 0x4) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$rds(0x15, 0x5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000002380)=[0x0], 0x1}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) write$binfmt_aout(r1, 0x0, 0xc8) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000180), &(0x7f0000000280)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5) recvmmsg(r5, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x20, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0x0, 0x0, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000400000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) 2.552842181s ago: executing program 0 (id=510): socket$kcm(0x29, 0x2, 0x0) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000100)={0x6, 'nr0\x00', {0xe4}, 0x9}) (async) r1 = openat$ndctl0(0xffffff9c, &(0x7f00000001c0), 0x4200, 0x0) (async, rerun: 64) r2 = openat$nullb(0xffffff9c, &(0x7f0000000200), 0x8000, 0x0) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x882008, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache}, {@version_u}, {@cache_loose}], [{@obj_user={'obj_user', 0x3d, 'nr0\x00'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}}) (async) r3 = getpid() capset(&(0x7f00000002c0)={0x20071026, r3}, &(0x7f0000000300)={0x4, 0x8, 0x2430, 0x9, 0x1000000, 0xd}) (async) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) (async) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002380)={0x50, 0x0, r4, {0x7, 0x2b, 0x2, 0x51396102796e61db, 0x0, 0x2d4, 0xffff, 0x8, 0x0, 0x0, 0x1, 0x3}}, 0x50) (async) syz_open_dev$video(&(0x7f0000002400), 0x10000, 0x248080) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000002440)='trans=fd,', &(0x7f0000002480)='./file0\x00', r1) (async) write$vga_arbiter(r1, &(0x7f00000024c0)=@other={'decodes', ' ', 'none'}, 0xd) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000003c00)={0x0, 0xfffffffffffffffb, 0x14, 0x40, @scatter={0x9, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002500)=""/240, 0xf0}, {&(0x7f0000002600)=""/185, 0xb9}, {&(0x7f00000026c0)=""/45, 0x2d}, {&(0x7f0000002700)=""/39, 0x27}, {&(0x7f0000002740)=""/205, 0xcd}, {&(0x7f0000002840)=""/57, 0x39}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/104, 0x68}, {&(0x7f0000003900)=""/206, 0xce}]}, &(0x7f0000003a80)="68a2236897718f9b1e33bb0d1b9744223e31175b", &(0x7f0000003ac0)=""/232, 0x3, 0x2, 0x1, &(0x7f0000003bc0)}) close(r1) umount2(&(0x7f0000003c40)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) (async) listxattr(&(0x7f0000003c80)='./file1\x00', &(0x7f0000003cc0)=""/183, 0xb7) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003dc0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003e00)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003e40)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000003f40)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003f00)={&(0x7f0000003e80)={0x68, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xd}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xbd}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x37}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = add_key$keyring(&(0x7f0000003f80), &(0x7f0000003fc0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r9, &(0x7f0000004000)='encrypted\x00', &(0x7f0000004040)='wpan0\x00') pipe2$watch_queue(&(0x7f0000004080), 0x80) 2.552454864s ago: executing program 0 (id=511): r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x40001, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)={0x23}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0xde) (async) r2 = dup2(r1, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='nfs4\x00', 0x10000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8000, 0x40, 0x5, 0xffff, {{0x35, 0x4, 0x1, 0x4, 0xd4, 0x67, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@noop, @rr={0x7, 0x23, 0x40, [@dev={0xac, 0x14, 0x14, 0x23}, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010102, @multicast2, @loopback, @multicast2]}, @cipso={0x86, 0x41, 0x1, [{0x6, 0xd, "93842653a324d05d58edb7"}, {0x6, 0x7, "e8ca24e3ef"}, {0x2, 0x9, "17e9eb39140c9e"}, {0x2, 0xe, "e62924e3b0b0f3de7720a397"}, {0x7, 0x10, "e2c57de6fc9f8dd2ecc68b012497"}]}, @ssrr={0x89, 0xb, 0xd8, [@rand_addr=0x64010102, @private=0xa010100]}, @rr={0x7, 0x13, 0xfc, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010102]}, @timestamp_prespec={0x44, 0x3c, 0x4c, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@empty, 0x3}, {@broadcast}, {@empty, 0x6}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private=0xa010101, 0x4}]}]}}}}}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000280)={@multicast2, @multicast1, r4}, 0xc) (async) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) sched_setaffinity(r5, 0x8, &(0x7f0000000380)=0x4) (async) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f00000003c0)) (async) ioctl$KVM_CAP_HYPERV_SEND_IPI(r2, 0x4068aea3, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'vlan0\x00'}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bind$netlink(r1, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc) io_uring_register$IORING_UNREGISTER_NAPI(r2, 0x1c, &(0x7f0000000500), 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0x200}}]}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}}, 0x4000804) (async) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f00000006c0)={0x0, 0x1, 0xc, r4, 0x5}, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) sendmsg$inet(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000740)="a32df305f134865aad0c8ee95d622aff732db93715908749d0ecd34b649b77c53f3d0ce6cfb5446781972b7b6d559f7c105d2e5dadbae8885a82f6455100c07e7c5f4b", 0x43}], 0x1}, 0x48800) (async) r7 = open$dir(&(0x7f0000000880)='./file0\x00', 0x200ac0, 0x1d) renameat(r2, &(0x7f0000000840)='./file0/file0\x00', r7, &(0x7f00000008c0)='./file0\x00') (async) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(r2, &(0x7f0000002200)=[{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000900)="e71f69141f8dfe5c05bcec064e63f8d08b59518e0fc53009f8e5421d7abfde715e8413351395b35f670bd8950da80bc2ebec22db68fa2ecf0dc71bca5540d4d8e60d6cac150c0af47851c001887d1ec704c22461a2ca9a921ffea00efb317aa70f15720ee7095a2871b25b527f0f35d6cff9412f68d431135205431c7452b3c32a13cee5604133d440e412b1c46e36e52412598a7fbfb25a247f49c5e404bf8d168ecdc465cc8c", 0xa7}, {&(0x7f00000009c0)="8b042d52bfd2ad63d7ef82c757662ea68adb75a4124b7c1f807d0a10b3465cea6ae072bfe3a368023d9cf235c623fea8d3f14e5f5bdf043c9cfe140b21f78cb16455", 0x42}], 0x2, &(0x7f0000000a80)=[@assoc={0x10, 0x117, 0x4, 0x4}, @assoc={0x10, 0x117, 0x4, 0x2}, @op={0x10}, @iv={0x110, 0x117, 0x2, 0xff, "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"}, @iv={0x54, 0x117, 0x2, 0x41, "d88bde1843b739a92dff677b440018f20461c1132bce0226ec4bb05fbbcf6b87dd01f2aa952ced31836f4fe4f35fdf73d421536516a1c4f00734a6c13b81421412"}, @assoc={0x10, 0x117, 0x4, 0xd74500}, @op={0x10, 0x117, 0x3, 0x1}], 0x1b4, 0x8080}, {0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c40)="4b3065859af461d634be7f740bc226e9a85ecd36700ce98084a518bf9afe201e984bb18e61590b0df028cd186ceb55c653137e9021eececad06a7088bbf590358b4927ce138b8c94de819facd3db3196765a16a309d99f3fd5a86e457d485a5ad1836508eba069fa5bef547019b1405dadb87f6bfab5d56f8a57ea", 0x7b}, {&(0x7f0000000cc0)="6a81e317ec2b4ba637d61e0c0773069ddd854d04f3939e5a07ec40ec2226bb3a4d791ade64717b181b7a2e53d03cdfb28f8819c39fe24547e942141ed112b3f8648095fc141508701539e299ab2e53c8be0d087912c816a93dffdf80e3cb2fe82ffbde87e0424af1c8051abc3d29c27e52bfcd6a72711e959be438953b53ffe83e73bfab", 0x84}, {&(0x7f0000000d80)="5dad0f97e813731fe48caa52b4a801372c3e28a9d97b07400f3027d219102aa609d3fa23b753db9c2eaf7f51b7b3384dd7b2dd015e5f779434475fcedf6a29fc2382999f25331593cd2ca20c12861672fdbafcaf5abcd6796bf5809e7bc22ba74740ca97b6d10ee188ab9275ad8557081ffb841e689a54dabd2aebe10e0b6072a9bbe99f3e3bf9f8d1639e9ba7350066208231f8ad17dfe277b296d0577cad343c21b4290bc35b6ba2fee8d4c8a093281b218cbf6a96b3", 0xb7}], 0x3, &(0x7f0000000e80)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, {0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000ec0)="8e747a68ccde5ed220b924f97f8b4341e9bd484fb925451e46ae068adc3ea794c363621b391bee8496c94255", 0x2c}, {&(0x7f0000000f00)="9859498ab5d5ce451237fdb798ff003077216d728a8660d3fbe298732eef50138754a75397631a6fab19295ffaa0eea3fbf36d754148cdc301575d15161d71c4920c7ef207b88ee8630c6d484baae00f022eb397a2edeff6650963a4a1be4877d37298200ad3d3efba2ecec898a0549dde6cb1333890c8c470b0756b0c01a643de273ce7b0132cecadeb80063f30847dfe5f9e", 0x93}, {&(0x7f0000000fc0)="738b530fc7f6ee8906eee8c375488cf3b561b29859ebbb130e28f1e7fa8586d47bf75c975140a3c6fcd06c39d08c3391157d7c14dab065c35ade98b2bfa5b787", 0x40}, {&(0x7f0000001000)="c44b6bafd4e7da3219b9c0209fa2fd6ada93bfc2d704d948347d5ba257a56632416d6940", 0x24}], 0x4, &(0x7f0000001080)=[@iv={0x44, 0x117, 0x2, 0x34, "df7a37b34a4254d3a8f4e4fbc257383b8fd29e18e264e34ab0b0fc80962d8b3675e3a0c0436ca610ec3becfc588d9a1cbdfdd463"}, @assoc={0x10, 0x117, 0x4, 0x2}, @iv={0xac, 0x117, 0x2, 0x9c, "cc2bdb35b767094de87f3f81209369dc3e2f047e9d87a39dc67e9f5f6d31891da0bb618e6af550fc87de787d83882e689a2c7b73d04d48fc7dc935360fd7c9c727b7ef97583c0b8aeb7cc38b1199bc81f7fb916089be63f12d4a0d63153b8790525c69899b50d1da12b186245bc41a2b13016fd9e74546ef65bb6f6fd256b093ada4b312a1cdc69e13ad2da633c94f59727df191d9ab2f1534e61669"}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0x1010, 0x117, 0x2, 0x1000, "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"}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x74}], 0x1150, 0x4000800}], 0x3, 0x4080) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000002280)=0xb, 0x4) (async) r8 = add_key$keyring(&(0x7f00000023c0), &(0x7f0000002400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f00000022c0), &(0x7f0000002300)={'fscrypt:', @desc4}, &(0x7f0000002340)={0x0, "352ba5c77e3c5c6f49434f26decc9aac34febeca96c81c2fd36c9342fb5142ca5c94dba8d9aa7a7a914e531cb86a64c1c3892a4da6a73f1b3abad7fe14419016", 0x1d}, 0x48, r8) 2.423187259s ago: executing program 0 (id=512): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000040000000000000006000000850000004f0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.422528815s ago: executing program 0 (id=513): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x7a, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={r7, 0xa49a, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0xffe4, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$RTC_WKALM_RD(r8, 0x80287010, &(0x7f0000000040)) 2.223425457s ago: executing program 1 (id=515): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x28, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r2, 0x8, 0x12}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x10) (async) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000680)="0a6ca2e6f873351ee1ad7fe9db3b3fd0d1b91f", 0x13}], 0x1) 1.46529081s ago: executing program 0 (id=517): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="08000000000000008100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66}}, [@printk={@lld, {0x3, 0x0, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r4, 0x9483}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup3(r3, r5, 0x80000) read$char_usb(r7, &(0x7f0000000240)=""/59, 0x3b) r8 = dup(r6) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$vbi(0x0, 0x0, 0x2) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_usb_connect(0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) connect$pppoe(r10, &(0x7f0000000100)={0x18, 0x0, {0x2, @remote, 'wg2\x00'}}, 0x1e) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r10, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.398323506s ago: executing program 1 (id=519): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$can_j1939(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001e80)="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", 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 1.332290675s ago: executing program 1 (id=520): r0 = fsopen(&(0x7f0000000540)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, 0x0, 0x0) syz_emit_ethernet(0xda, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0088a800008100000086dd600b336c009c110000000000000000000000000000000000ff02000000000000000000000000000100004e22"], 0x0) openat$nmem0(0xffffff9c, 0x0, 0x301040, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r3, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$adsp1(0xffffff9c, &(0x7f0000000000), 0x4000, 0x0) mmap$dsp(&(0x7f000075f000/0x1000)=nil, 0x1000, 0x1000002, 0x4000010, r7, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.262142702s ago: executing program 2 (id=521): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fstat64(r2, &(0x7f0000000040)) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB='/'], 0x20) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000043040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) 1.261984358s ago: executing program 3 (id=522): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000004000000000000000014f1c4e20"], 0xd6) 1.103269323s ago: executing program 3 (id=523): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r1, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x44e, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYBLOB="ca1cb8f3"], 0x0) 1.101579949s ago: executing program 2 (id=524): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0a000000010001", 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x44}, 0x1, 0x2000000000000000}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) getpeername(r4, &(0x7f00000002c0)=@sco={0x1f, @none}, &(0x7f0000000240)=0x80) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02f14fd2d18e33aae0bd7000ffdbdf250800120000000300b26b6e000800001a06003200fbc30000ff7fd75648dcfde980fc000000000000fe8800000000000000000000000001010a010100000000000000000000000000975d449620fe3d8851b007bae8df1d0ff613894d1145f960736c0fe995c59e78e68dadeb99c6b766f605510873cd295ddf7452d2cf08040bfb7fa4940a4a76149766de716b150caec90f9e6d25cf89d3cb403fc1b1fe138f5490a3104231b2c622e7ec"], 0x50}}, 0x8894) getpeername(r5, 0x0, &(0x7f0000000400)) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x6, 0x6, 0x6, 0x9, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x11}, 0x4}}]}, 0x48}}, 0x4000000) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)="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", 0x19e}, {&(0x7f0000002040)="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", 0xe63}], 0x2}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="24d0f5c9c18111ed13be447a5a1ecc1bfbffffffffffffffb45a6d4f8603ba1b21f588faeb3d0d07000000000000d9106f25e1b46a0471e3f521ba473de639350c86fde20d550e0622e2c2cf0e00000094a8fd0a4ec7a0cfad680de987e64306302e93e36831ed54334112e14af2f2b8de796bcd4dcbb28095ddedcebe4069c3c63e6ba555c00bdf70db0488bba65f7e865b0c525b3eb1252e5634ef72f5bf375b14b469", 0xa4}, {&(0x7f0000000440)="1b66100564a7eef6f871fef01cf426e853531cbc00dbffbaf00e19589e", 0x1d}], 0x2}}], 0x2, 0x4000880) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f0000001300)=""/4089, 0xff9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}]}}) r8 = gettid() prlimit64(r8, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) 1.101280744s ago: executing program 3 (id=525): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4100}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 1.013462831s ago: executing program 3 (id=526): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{0x80, 0x1, [@m_ct={0x34, 0x2, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1f, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc0b45545, &(0x7f00000000c0)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='1', 0x1) accept4$alg(r4, 0x0, 0x0, 0x80000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x2000000, 0x0) syz_usb_disconnect(0xffffffffffffffff) r7 = syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/time_for_children\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75", @ANYRES8=r0, @ANYRES16=r7]) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 602.65268ms ago: executing program 1 (id=527): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 147.000694ms ago: executing program 2 (id=528): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x12, r0, 0x1a116000) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) mount$9p_virtio(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000140)={'trans=virtio,', {[{@cache_loose}, {@aname={'aname', 0x3d, ']\xb6%(#\'.'}}, {@noextend}, {@nodevmap}, {@privport}], [{@obj_role={'obj_role', 0x3d, '_(*}+]'}}, {@subj_user={'subj_user', 0x3d, '!!'}}, {@uid_gt={'uid>', r1}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@euid_eq={'euid', 0x3d, r1}}, {@measure}, {@flag='silent'}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000240)) mount$9p_unix(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x3010, &(0x7f0000000340)={'trans=unix,', {[{@nodevmap}, {@access_uid={'access', 0x3d, r1}}], [{@subj_role={'subj_role', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@uid_lt={'uid<', r1}}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) (async) removexattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.opaque\x00') r2 = accept4$tipc(r0, &(0x7f0000000480), &(0x7f00000004c0)=0x10, 0x800) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000500)={0x42, 0x1, 0x1}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r0) (async) r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000580), 0x321800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000005c0)={{0x2, 0x2, 0x80, 0x2, 0x400000}}) socket$tipc(0x1e, 0x2, 0x0) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000600)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000640)={0x1, 0x7, 0x3}) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000680)) (async) bind(r0, &(0x7f00000006c0)=@qipcrtr={0x2a, 0x0, 0x7ffe}, 0x80) close(r0) (async) r4 = shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x3000) shmdt(r4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000b00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000780)={0x33c, 0x9, 0x8, 0x3, 0x70bd29, 0x25dfdbfe, {0xa}, [@nested={0x9b, 0x7c, 0x0, 0x1, [@nested={0x4, 0x2b}, @nested={0x4, 0xda}, @typed={0xc, 0x136, 0x0, 0x0, @u64=0x2}, @generic="687f55507dfa3778ebc4d96d543faf4818ebb41bd118d04fc65ab2de7f15e606e61ae26c3acbea0d6871e2bff579184c1aa0bd07d17e7553eda08a44bf986282bf5d05175f58dae03393e0a1421553782520d2dd06745cdf69687fb8ef9dce3de838d3038b02d1d9d76090e97aa64c8bf7914bdbf3c0cc01c2e813484a9ff9", @nested={0x4, 0x86}]}, @generic="1f471b6b323835013e745459414665ef602682cc1e0f6db6ed15f799360cc4905c6c9165547f457a8282fe298e240e64adef10cef751c36e80dc1115422e1b3241e1792c2d55c599f8bef04909b65113155f6363eec71d233e34901648eae57c27e11fcef8bea6bfc9343d21b7c46859e6271aa371264faa9c70b49d74bcfdadd031e58c3cb7484e0ad51ce4c0eef21860713b14dfd783a04986de164dd61a3b455a251e22d9523ad81921b5fc6400898e0bc546be09346c4223faa5185f474dbfa160758fd1eae7b04af4ff5beb05894836980aa87a", @generic="c2d3ea22c60d3a218699dc6472ac06606e2977a1f911725dcdedfb0ccd0fd9b1a1ae9cd01ae66db0fcded96960cdcc2c19abbc221ee27ab8cfe4441d4b3a8e3ad38473d5aab55d31be0b32ffb14695c52f826578f88d866bd6784fcb9d06bb93d28eeb3590f119467b42c6668134298ab1178ec6babd023d7e026c3d3d3fb1fe65822f3c01f7d0056781940d363d8bcf891c63b0beca63999a3cf89764f235e8cefb311e6c5e761d30820f8225ca2cacfbd1c6ea80a4c457502ff92a36a29725186a9c2999844ea5397be38ae04f3f17385b1176b3", @generic="9ce5e0e2f04a0657cb72feb2b0fe16467472ddd9113517305af69eed42b8c6b63ef6b1f38a0862d2752462539a9a4da134eab4dbc04ac3912f75b16a37ad14203b690617305cb96ed251e86c1a115e8cfd8af4cd8b4363c7522bf35c687c692c0d01f638c23bae00c0", @nested={0x77, 0xa, 0x0, 0x1, [@generic="92a719f8a2523c627379f34569920fbe0183206d25c06ce01f44197dfc2254438c69087e7ce5d735d48aeaf373123ea9b36645fa1a883189a691dd4959e935a4723f7e2653bfc375a1f058", @nested={0x4, 0x14a}, @nested={0x4, 0x137}, @typed={0x14, 0xce, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x4, 0x40}, @typed={0x8, 0x1c, 0x0, 0x0, @uid=r1}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) setxattr$trusted_overlay_upper(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80), &(0x7f0000000bc0)={0x0, 0xfb, 0x5b, 0x1, 0xfc, "ef5ae45046b3fabfdd48c98b5f619449", "c2888473f26e465a8cdf696a35d290874d4d6ca4a069524449fd01f78687c1f74453a3b63b0a8c8391c723a9ebf9f4bf553805c1b99138e34a3cbe5c7cdbcb8c750270ad9a79"}, 0x5b, 0x1) (async) r6 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT_ANY(r6, 0xf, &(0x7f0000000c40)=""/121) openat$ttyprintk(0xffffff9c, &(0x7f0000000cc0), 0x101000, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000013c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001380)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0xa4, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x69, 0x6, "9eaaa1e733d317900bff61c6c0c9952981024291be97e136c60a9621902714c06f9a09cd5469cd5aabe2ebffaf47d92894f5690bd3fe2ba38b837dd59458343bc1d3aada9e78cda581bc765b90dc8e54263c7c296fc200458e3afe4b83eb14db2f1d5b3319"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0xe8, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'geneve1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x571ab307}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x6c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x50e9c049}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x603d771c}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge_slave_0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40b8c274}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfe4d1a0}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_NEWSET={0x468, 0x9, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPRESSIONS={0x104, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x48, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x40, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x3e}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x80}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xa4}]}}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_SET_EXPRESSIONS={0x2a4, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}]}}}, {0x284, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x274, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x228, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x99, 0x1, "782b17f90c2c95a002168fe1d8cbbc4f49a17f824024903942965f2e64273ccd269dfd2d0769d4e4c4a6b42ae45124429fc6991e84567a0a30c77107b36e79947ef76b4f6bd36f43750724c6eb2005667b017ca9b22702d35c54603a1a489201e31063085fcd8c70d1f086b9286f0258105df005831362566c9df537b5198785d591be91e92209772cb8800091827ada58078194b7"}, @NFTA_DATA_VALUE={0x9d, 0x1, "40b7f297cf49339fe243d999d9373cf97e4c28669e176af1cb8b17a44242a1d566831bba85a78f5b306a647f60e1db965dfc43f8a13a2f6ca0db8559bc8ca66519f8a7b06a58a473a1d3d7c30f801fd558b1079c79d53caaec315ed2f26d859cb9cf0604ba5dc830b788622a7a0132182ce0ac01abe7cd3447bb575855d4492d9483e5a4a50b191914e54869c4e0f68a43edcfe23e758040ca"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_RANGE_FROM_DATA={0x48, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x41, 0x1, "131f1fd5e3ad667f9e5f7ac698d88170e5a461927d7d524fc620bef36f3dcb8d4aa909ada0fab86721f3c2a926e36d5ad4f1d6bf2dae983a4f26d378ee"}]}]}}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}], {0x14}}, 0x61c}}, 0x11) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000001400)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001480)=@generic={&(0x7f0000001440)='./file0\x00', 0x0, 0x18}, 0x14) 93.404482ms ago: executing program 2 (id=529): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20000, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 93.208668ms ago: executing program 2 (id=530): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="020300020c00000000000000000000000200080008000000d700000000000000030006003c00000002004e20ac141400000000000000000002000100000000000000092000000080030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) 0s ago: executing program 2 (id=531): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r1, &(0x7f0000000700)={@void, @void, @eth={@local, @local, @void, {@mpls_mc={0x8848, {[], @generic=')>'}}}}}, 0x10) r2 = openat$tun(0xffffff9c, &(0x7f0000000080), 0x5ea80, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) write$tun(r2, &(0x7f0000000840)=ANY=[], 0xfce) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001580)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:21713' (ED25519) to the list of known hosts. [ 41.908423][ T5921] cgroup: Unknown subsys name 'net' [ 42.065266][ T5921] cgroup: Unknown subsys name 'cpuset' [ 42.069762][ T5921] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.920448][ T5921] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.117480][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.122389][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.125612][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.128952][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.131716][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.134672][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.138100][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.138783][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.141925][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.142661][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.143358][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.144011][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.146460][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.148998][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.152414][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.154745][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.157095][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.159841][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.160676][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.161886][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.388350][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 46.462228][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 46.510429][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 46.581141][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.583964][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.586405][ T5940] bridge_slave_0: entered allmulticast mode [ 46.589140][ T5940] bridge_slave_0: entered promiscuous mode [ 46.611934][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.614253][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.616587][ T5940] bridge_slave_1: entered allmulticast mode [ 46.619220][ T5940] bridge_slave_1: entered promiscuous mode [ 46.693016][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.711417][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 46.723664][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.726724][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.729093][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.731401][ T5950] bridge_slave_0: entered allmulticast mode [ 46.734523][ T5950] bridge_slave_0: entered promiscuous mode [ 46.771458][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.774082][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.776425][ T5950] bridge_slave_1: entered allmulticast mode [ 46.779088][ T5950] bridge_slave_1: entered promiscuous mode [ 46.838325][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.840714][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.843237][ T5947] bridge_slave_0: entered allmulticast mode [ 46.845854][ T5947] bridge_slave_0: entered promiscuous mode [ 46.865090][ T5940] team0: Port device team_slave_0 added [ 46.881464][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.884932][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.887148][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.889480][ T5947] bridge_slave_1: entered allmulticast mode [ 46.892164][ T5947] bridge_slave_1: entered promiscuous mode [ 46.895405][ T5940] team0: Port device team_slave_1 added [ 46.913989][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.000021][ T5950] team0: Port device team_slave_0 added [ 47.016012][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.018343][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.026704][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.030869][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.033387][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.035723][ T5939] bridge_slave_0: entered allmulticast mode [ 47.038426][ T5939] bridge_slave_0: entered promiscuous mode [ 47.042457][ T5950] team0: Port device team_slave_1 added [ 47.045735][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.049149][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.051438][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.060550][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.064589][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.066948][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.069308][ T5939] bridge_slave_1: entered allmulticast mode [ 47.072128][ T5939] bridge_slave_1: entered promiscuous mode [ 47.102262][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.149883][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.152192][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.160363][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.178019][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.194240][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.196720][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.206988][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.214090][ T5947] team0: Port device team_slave_0 added [ 47.217978][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.239170][ T5940] hsr_slave_0: entered promiscuous mode [ 47.241595][ T5940] hsr_slave_1: entered promiscuous mode [ 47.245980][ T5947] team0: Port device team_slave_1 added [ 47.275887][ T5939] team0: Port device team_slave_0 added [ 47.300109][ T5939] team0: Port device team_slave_1 added [ 47.386173][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.388466][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.396713][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.400902][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.405655][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.417991][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.452408][ T5950] hsr_slave_0: entered promiscuous mode [ 47.455119][ T5950] hsr_slave_1: entered promiscuous mode [ 47.457746][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.460894][ T5950] Cannot create hsr debugfs directory [ 47.463808][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.466440][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.474796][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.479075][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.482268][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.492985][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.624603][ T5947] hsr_slave_0: entered promiscuous mode [ 47.626902][ T5947] hsr_slave_1: entered promiscuous mode [ 47.629006][ T5947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.631442][ T5947] Cannot create hsr debugfs directory [ 47.639620][ T5939] hsr_slave_0: entered promiscuous mode [ 47.642337][ T5939] hsr_slave_1: entered promiscuous mode [ 47.644498][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.646900][ T5939] Cannot create hsr debugfs directory [ 47.879998][ T5940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.886497][ T5940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.890818][ T5940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.898944][ T5940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.923361][ T5950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.927760][ T5950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.934346][ T5950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.938950][ T5950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.977282][ T5939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.981664][ T5939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.986002][ T5939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.990767][ T5939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.053610][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.061340][ T5947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.066454][ T5947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.075001][ T5947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.080453][ T5947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.112273][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.123109][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.125589][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.134072][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.148094][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.150476][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.153793][ T5953] Bluetooth: hci0: command tx timeout [ 48.175444][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.186163][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.195881][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.198257][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.211781][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.214144][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.231495][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.232301][ T5953] Bluetooth: hci1: command tx timeout [ 48.233920][ T5946] Bluetooth: hci2: command tx timeout [ 48.241870][ T5946] Bluetooth: hci3: command tx timeout [ 48.252428][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.256777][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.259149][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.268613][ T5950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.272556][ T5950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.282277][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.284882][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.319986][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.327519][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.329967][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.345222][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.347585][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.367665][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.397625][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.415500][ T5940] veth0_vlan: entered promiscuous mode [ 48.421590][ T5940] veth1_vlan: entered promiscuous mode [ 48.437194][ T5950] veth0_vlan: entered promiscuous mode [ 48.449088][ T5950] veth1_vlan: entered promiscuous mode [ 48.457374][ T5940] veth0_macvtap: entered promiscuous mode [ 48.465576][ T5940] veth1_macvtap: entered promiscuous mode [ 48.483717][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.490187][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.496620][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.499400][ T5950] veth0_macvtap: entered promiscuous mode [ 48.504007][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.510430][ T5950] veth1_macvtap: entered promiscuous mode [ 48.519925][ T5940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.523146][ T5940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.525979][ T5940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.528804][ T5940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.547931][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.551395][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.556770][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.570188][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.573656][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.577397][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.585320][ T5950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.588151][ T5950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.590891][ T5950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.593808][ T5950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.601254][ T5939] veth0_vlan: entered promiscuous mode [ 48.608719][ T5939] veth1_vlan: entered promiscuous mode [ 48.616615][ T5947] veth0_vlan: entered promiscuous mode [ 48.638924][ T5947] veth1_vlan: entered promiscuous mode [ 48.670200][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.673200][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.680085][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.682678][ T5939] veth0_macvtap: entered promiscuous mode [ 48.683018][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.698803][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.698990][ T5939] veth1_macvtap: entered promiscuous mode [ 48.701333][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.713244][ T5947] veth0_macvtap: entered promiscuous mode [ 48.719699][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.722944][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.726211][ T5947] veth1_macvtap: entered promiscuous mode [ 48.734398][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.737873][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.741043][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.744496][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.748808][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.754233][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.757619][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.760800][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.764587][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.768190][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.768728][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.777561][ T5939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.780406][ T5939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.784498][ T5939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.788176][ T5939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.813031][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.816647][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.819692][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.823823][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.826927][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.830543][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.835192][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.844596][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.849240][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.852888][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.863731][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.867381][ T5947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.870957][ T5947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.874283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 48.878706][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.890770][ T5947] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.895017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.900221][ T5947] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.904686][ T5947] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.908691][ T5947] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.913596][ T6005] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 49.051055][ T6009] bridge_slave_0: left allmulticast mode [ 49.054679][ T6009] bridge_slave_0: left promiscuous mode [ 49.058926][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.066473][ T6009] bridge_slave_1: left allmulticast mode [ 49.068346][ T6009] bridge_slave_1: left promiscuous mode [ 49.070260][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.080471][ T6009] bond0: (slave bond_slave_0): Releasing backup interface [ 49.095774][ T6009] bond0: (slave bond_slave_1): Releasing backup interface [ 49.118709][ T6009] team0: Port device team_slave_0 removed [ 49.129101][ T6009] team0: Port device team_slave_1 removed [ 49.132378][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.134812][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.138719][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.141085][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.158538][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.181895][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.269506][ T6010] wireguard0: entered promiscuous mode [ 49.288518][ T6010] wireguard0: entered allmulticast mode [ 49.314189][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.316893][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.338616][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.341292][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.356809][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.359382][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.402647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.521998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.641194][ T6022] netlink: 'syz.1.5': attribute type 1 has an invalid length. [ 49.791228][ T6024] bridge_slave_0: left allmulticast mode [ 49.793810][ T6024] bridge_slave_0: left promiscuous mode [ 49.796477][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.810809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!! [ 49.823955][ T6024] bridge_slave_1: left allmulticast mode [ 49.825835][ T6024] bridge_slave_1: left promiscuous mode [ 49.827739][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.940599][ T6024] bond0: (slave bond_slave_0): Releasing backup interface [ 50.046330][ T6030] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 50.057125][ T6024] bond0: (slave bond_slave_1): Releasing backup interface [ 50.074134][ T6024] team0: Port device team_slave_0 removed [ 50.079235][ T6024] team0: Port device team_slave_1 removed [ 50.083601][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.087607][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.097302][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.099767][ T6024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.208534][ T6036] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8'. [ 50.215354][ T6036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 50.242470][ T5946] Bluetooth: hci0: command tx timeout [ 50.312410][ T5946] Bluetooth: hci3: command tx timeout [ 50.314289][ T5946] Bluetooth: hci2: command tx timeout [ 50.316113][ T5946] Bluetooth: hci1: command tx timeout [ 50.461950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.613668][ T40] audit: type=1804 audit(1746603988.853:2): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.9" name="/newroot/2/file1" dev="fuse" ino=1 res=1 errno=0 [ 50.621057][ T40] audit: type=1800 audit(1746603988.853:3): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9" name="/" dev="fuse" ino=1 res=0 errno=0 [ 50.852195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.048897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.052290][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.112054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.753572][ T6065] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET) [ 51.843012][ T6065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15'. [ 51.900093][ T6071] netlink: 80 bytes leftover after parsing attributes in process `syz.1.16'. [ 51.903200][ T6071] netlink: 80 bytes leftover after parsing attributes in process `syz.1.16'. [ 51.957845][ T6073] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.143238][ T6082] lo speed is unknown, defaulting to 1000 [ 52.145314][ T6082] lo speed is unknown, defaulting to 1000 [ 52.150484][ T6082] lo speed is unknown, defaulting to 1000 [ 52.158173][ T6082] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 52.168869][ T6082] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 52.195816][ T6082] lo speed is unknown, defaulting to 1000 [ 52.200491][ T6082] lo speed is unknown, defaulting to 1000 [ 52.204306][ T6082] lo speed is unknown, defaulting to 1000 [ 52.207998][ T6082] lo speed is unknown, defaulting to 1000 [ 52.212218][ T6082] lo speed is unknown, defaulting to 1000 [ 52.322649][ T5953] Bluetooth: hci0: command tx timeout [ 52.402040][ T5953] Bluetooth: hci1: command tx timeout [ 52.402499][ T5946] Bluetooth: hci2: command tx timeout [ 52.402826][ T5305] Bluetooth: hci3: command tx timeout [ 52.441157][ T6090] process 'syz.1.21' launched '/dev/fd/7' with NULL argv: empty string added [ 52.621715][ T6092] Bluetooth: MGMT ver 1.23 [ 52.700174][ T6097] netlink: 'syz.1.22': attribute type 1 has an invalid length. [ 52.858922][ T835] lo speed is unknown, defaulting to 1000 [ 53.365796][ T6116] ip6tnl1: entered promiscuous mode [ 53.367923][ T6116] ip6tnl1: entered allmulticast mode [ 53.370503][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.30'. [ 53.405136][ T6116] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 53.899699][ T6127] netlink: 'syz.1.31': attribute type 4 has an invalid length. [ 53.944720][ T66] lo speed is unknown, defaulting to 1000 [ 53.946971][ T66] syz2: Port: 1 Link DOWN [ 53.977813][ T6137] lo speed is unknown, defaulting to 1000 [ 54.108559][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34'. [ 54.392911][ T5946] Bluetooth: hci0: command tx timeout [ 54.471889][ T5946] Bluetooth: hci1: command tx timeout [ 54.472050][ T5953] Bluetooth: hci2: command tx timeout [ 54.484053][ T5953] Bluetooth: hci3: command tx timeout [ 54.654238][ T6169] ip6tnl1: entered promiscuous mode [ 54.656027][ T6169] ip6tnl1: entered allmulticast mode [ 54.660157][ T6169] team0: Device ip6tnl1 is of different type [ 54.897577][ T6181] netlink: 'syz.1.40': attribute type 1 has an invalid length. [ 54.963961][ T6190] exFAT-fs (nullb0): invalid boot record signature [ 54.966187][ T6190] exFAT-fs (nullb0): failed to read boot sector [ 54.968270][ T6190] exFAT-fs (nullb0): failed to recognize exfat type [ 55.135397][ T6203] syz.1.50 (6203) used greatest stack depth: 19816 bytes left [ 55.178198][ T6205] netlink: 'syz.2.49': attribute type 1 has an invalid length. [ 55.306409][ T6210] bridge_slave_0: left allmulticast mode [ 55.308433][ T6210] bridge_slave_0: left promiscuous mode [ 55.310384][ T6210] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.320463][ T6210] bridge_slave_1: left allmulticast mode [ 55.327314][ T6210] bridge_slave_1: left promiscuous mode [ 55.333948][ T6210] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.400107][ T6210] bond0: (slave bond_slave_0): Releasing backup interface [ 55.415397][ T6213] netlink: 'syz.0.52': attribute type 32 has an invalid length. [ 55.417872][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 55.421119][ T6213] netlink: 'syz.0.52': attribute type 32 has an invalid length. [ 55.426765][ T6210] bond0: (slave bond_slave_1): Releasing backup interface [ 55.475070][ T6210] team0: Port device team_slave_0 removed [ 55.481023][ T6210] team0: Port device team_slave_1 removed [ 55.485245][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.485632][ T6215] Zero length message leads to an empty skb [ 55.489893][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.497818][ T6210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.500590][ T6210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.567900][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 55.865339][ T6226] wireguard0: entered promiscuous mode [ 55.867866][ T6226] wireguard0: entered allmulticast mode [ 56.586613][ T6265] sctp: [Deprecated]: syz.3.70 (pid 6265) Use of int in maxseg socket option. [ 56.586613][ T6265] Use struct sctp_assoc_value instead [ 56.831840][ T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 56.982499][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 56.986651][ T34] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 56.986672][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.986683][ T34] usb 8-1: Product: syz [ 56.986690][ T34] usb 8-1: Manufacturer: syz [ 56.986702][ T34] usb 8-1: SerialNumber: syz [ 56.990246][ T34] r8152-cfgselector 8-1: Unknown version 0x0000 [ 56.990265][ T34] r8152-cfgselector 8-1: config 0 descriptor?? [ 57.018604][ T6270] netlink: 'syz.2.72': attribute type 1 has an invalid length. [ 57.031161][ T40] audit: type=1804 audit(1746603995.263:4): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.73" name="/newroot/20/file0" dev="tmpfs" ino=124 res=1 errno=0 [ 57.178719][ T6278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.75'. [ 57.208157][ T34] r8152-cfgselector 8-1: Unknown version 0x0000 [ 57.214363][ T34] r8152-cfgselector 8-1: bad CDC descriptors [ 57.220883][ T6280] netlink: 'syz.1.76': attribute type 4 has an invalid length. [ 57.223573][ T6280] netlink: 17 bytes leftover after parsing attributes in process `syz.1.76'. [ 57.226789][ T34] r8152-cfgselector 8-1: USB disconnect, device number 2 [ 57.412846][ T6291] netlink: 'syz.0.81': attribute type 10 has an invalid length. [ 57.422314][ T6291] veth0_vlan: left promiscuous mode [ 57.425902][ T6291] veth0_vlan: entered promiscuous mode [ 57.430025][ T6291] team0: Device veth0_vlan failed to register rx_handler [ 57.471809][ T6294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.82'. [ 57.509013][ T6300] input: syz1 as /devices/virtual/input/input5 [ 57.655372][ T6306] lo speed is unknown, defaulting to 1000 [ 57.729779][ T6307] ip6tnl1: entered promiscuous mode [ 57.731531][ T6307] ip6tnl1: entered allmulticast mode [ 57.736987][ T6307] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 58.097105][ T6316] netlink: 'syz.2.87': attribute type 4 has an invalid length. [ 58.433217][ T6336] netlink: 'syz.0.96': attribute type 3 has an invalid length. [ 58.435805][ T6336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.557585][ T6345] capability: warning: `syz.1.100' uses deprecated v2 capabilities in a way that may be insecure [ 58.701357][ T6348] ip6tnl1: entered promiscuous mode [ 58.703249][ T6348] ip6tnl1: entered allmulticast mode [ 58.706783][ T6348] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 58.912212][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.915403][ T6352] netlink: 'syz.2.101': attribute type 32 has an invalid length. [ 58.917878][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 58.965774][ T6354] exFAT-fs (nullb0): invalid boot record signature [ 58.968327][ T6354] exFAT-fs (nullb0): failed to read boot sector [ 58.970640][ T6354] exFAT-fs (nullb0): failed to recognize exfat type [ 59.071832][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 59.075558][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 218, changing to 11 [ 59.079681][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8247, setting to 1024 [ 59.083848][ T34] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 59.087237][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.092095][ T34] usb 5-1: config 0 descriptor?? [ 59.226589][ T6357] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 59.230254][ T65] Bluetooth: hci4: Frame reassembly failed (-84) [ 59.232634][ T65] Bluetooth: hci4: Frame reassembly failed (-84) [ 59.300848][ T34] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 59.505097][ T29] usb 5-1: USB disconnect, device number 2 [ 59.507029][ C1] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 59.556805][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.110'. [ 59.570995][ T6371] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.575222][ T6371] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.579040][ T6371] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.582998][ T6371] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.588143][ T6371] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.590995][ T6371] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.594091][ T6371] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.597010][ T6371] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.633169][ T6372] bond1: entered promiscuous mode [ 59.635091][ T6372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.678331][ T6374] bond1: (slave veth3): making interface the new active one [ 59.680815][ T6374] veth3: entered promiscuous mode [ 59.703168][ T6374] bond1: (slave veth3): Enslaving as an active interface with an up link [ 59.761871][ T6369] bond1: (slave veth3): Releasing backup interface [ 59.761887][ T6369] veth3: left promiscuous mode [ 60.953416][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 60.967127][ T6400] trusted_key: encrypted_key: master key parameter '' is invalid [ 61.272269][ T5953] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 61.272753][ T5946] Bluetooth: hci4: command 0x1003 tx timeout [ 61.332044][ T6405] wireguard0: entered promiscuous mode [ 61.333877][ T6405] wireguard0: entered allmulticast mode [ 61.359009][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 61.558752][ T6423] netlink: 20 bytes leftover after parsing attributes in process `syz.0.127'. [ 61.781841][ T6008] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 61.931891][ T6008] usb 8-1: Using ep0 maxpacket: 8 [ 61.962096][ T6008] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 61.964644][ T6008] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 61.967984][ T6008] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 61.971095][ T6008] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 61.986733][ T6008] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 61.990211][ T6008] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.008835][ T6008] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.011702][ T6008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.127636][ T6439] validate_nla: 2 callbacks suppressed [ 62.127648][ T6439] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 62.147058][ T6439] bond0: entered promiscuous mode [ 62.148753][ T6439] bond_slave_0: entered promiscuous mode [ 62.150601][ T6439] bond_slave_1: entered promiscuous mode [ 62.153207][ T6439] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 62.157122][ T6439] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 62.161153][ T6436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.133'. [ 62.286191][ T6008] usb 8-1: GET_CAPABILITIES returned 0 [ 62.288262][ T6008] usbtmc 8-1:16.0: can't read capabilities [ 62.430407][ C3] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 62.436599][ T6421] usbtmc 8-1:16.0: Unable to send data, error -71 [ 62.531863][ T1332] usb 8-1: USB disconnect, device number 3 [ 62.854324][ T6470] ip6tnl1: entered promiscuous mode [ 62.856403][ T6470] ip6tnl1: entered allmulticast mode [ 62.861156][ T6470] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 62.945857][ T6477] netlink: 'syz.0.146': attribute type 32 has an invalid length. [ 62.948579][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 62.952395][ T6477] netlink: 'syz.0.146': attribute type 32 has an invalid length. [ 63.054094][ T6482] /dev/nullb0: Can't open blockdev [ 63.211896][ T835] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 63.461830][ T835] usb 5-1: Using ep0 maxpacket: 8 [ 63.466656][ T835] usb 5-1: config 0 has no interfaces? [ 63.470947][ T835] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 63.474760][ T835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.477762][ T835] usb 5-1: Product: syz [ 63.479374][ T835] usb 5-1: Manufacturer: syz [ 63.491829][ T835] usb 5-1: SerialNumber: syz [ 63.510183][ T6488] ip6tnl1: entered promiscuous mode [ 63.512078][ T6488] ip6tnl1: entered allmulticast mode [ 63.515722][ T6488] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 63.521116][ T835] usb 5-1: config 0 descriptor?? [ 63.672590][ T6478] netlink: 'syz.2.145': attribute type 4 has an invalid length. [ 63.700297][ T6491] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.737900][ T835] usb 5-1: USB disconnect, device number 3 [ 63.913851][ T29] libceph: connect (1)[c::]:6789 error -101 [ 63.917049][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 63.924345][ T29] libceph: connect (1)[c::]:6789 error -101 [ 63.927705][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 63.961192][ T6493] ceph: No mds server is up or the cluster is laggy [ 64.206534][ T6500] netlink: 'syz.3.152': attribute type 1 has an invalid length. [ 64.225220][ T6500] bond2: entered promiscuous mode [ 64.227817][ T6500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.294874][ T6500] veth5: entered promiscuous mode [ 64.296887][ T6500] bond2: (slave veth5): Enslaving as an active interface with an up link [ 64.571836][ T5983] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 64.731966][ T5983] usb 5-1: Using ep0 maxpacket: 8 [ 64.737033][ T5983] usb 5-1: config 0 has no interfaces? [ 64.740629][ T5983] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 64.744264][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.747743][ T5983] usb 5-1: Product: syz [ 64.750156][ T5983] usb 5-1: Manufacturer: syz [ 64.761788][ T5983] usb 5-1: SerialNumber: syz [ 64.765396][ T5983] usb 5-1: config 0 descriptor?? [ 64.813835][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 65.085750][ T9] usb 5-1: USB disconnect, device number 4 [ 65.247720][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 65.292573][ T6534] wireguard0: entered promiscuous mode [ 65.294392][ T6534] wireguard0: entered allmulticast mode [ 65.501889][ T5983] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 65.508157][ T6538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.164'. [ 65.697244][ T5983] usb 7-1: string descriptor 0 read error: -71 [ 65.699371][ T5983] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 65.704144][ T5983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.708652][ T5983] usb 7-1: can't set config #1, error -71 [ 65.711160][ T5983] usb 7-1: USB disconnect, device number 2 [ 66.323091][ T6567] ip6tnl1: entered promiscuous mode [ 66.325395][ T6567] ip6tnl1: entered allmulticast mode [ 66.330547][ T6567] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 66.798811][ T6569] netlink: 'syz.2.174': attribute type 4 has an invalid length. [ 66.842593][ T6576] netlink: 'syz.3.177': attribute type 1 has an invalid length. [ 66.885374][ T6576] bond3: entered promiscuous mode [ 66.888857][ T6576] 8021q: adding VLAN 0 to HW filter on device bond3 [ 66.934546][ T6576] veth7: entered promiscuous mode [ 66.937561][ T6576] bond3: (slave veth7): Enslaving as an active interface with an up link [ 66.983691][ T6583] Cannot find add_set index 3 as target [ 67.005444][ T6585] netlink: 20 bytes leftover after parsing attributes in process `syz.3.181'. [ 67.024817][ T6586] netlink: 'syz.0.179': attribute type 1 has an invalid length. [ 67.055893][ T6590] netlink: 'syz.1.180': attribute type 1 has an invalid length. [ 67.066374][ T6586] bond2: entered promiscuous mode [ 67.073265][ T6586] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.096658][ T6590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.101918][ T6590] netlink: 'syz.1.180': attribute type 1 has an invalid length. [ 67.160903][ T6586] bond2: (slave veth3): making interface the new active one [ 67.163619][ T6586] veth3: entered promiscuous mode [ 67.166275][ T6586] bond2: (slave veth3): Enslaving as an active interface with an up link [ 67.211633][ T6586] bridge_slave_0: left allmulticast mode [ 67.214337][ T6586] bridge_slave_0: left promiscuous mode [ 67.216964][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.228564][ T6586] bridge_slave_1: left allmulticast mode [ 67.230620][ T6586] bridge_slave_1: left promiscuous mode [ 67.234233][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.239155][ T6598] exFAT-fs (nullb0): invalid boot record signature [ 67.241336][ T6598] exFAT-fs (nullb0): failed to read boot sector [ 67.244343][ T6598] exFAT-fs (nullb0): failed to recognize exfat type [ 67.244995][ T6586] bond0: (slave bond_slave_0): Releasing backup interface [ 67.251106][ T6586] bond_slave_0: left promiscuous mode [ 67.254874][ T6586] bond0: (slave bond_slave_1): Releasing backup interface [ 67.261148][ T6586] bond_slave_1: left promiscuous mode [ 67.274409][ T6586] team0: Port device team_slave_0 removed [ 67.286657][ T6586] team0: Port device team_slave_1 removed [ 67.289684][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.292604][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.296868][ T6586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.299499][ T6586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.309557][ T6586] bond1: (slave macvlan2): Releasing backup interface [ 67.312840][ T6586] bond0: left promiscuous mode [ 67.316439][ T6586] bond2: (slave veth3): Releasing backup interface [ 67.318580][ T6586] veth3: left promiscuous mode [ 67.466919][ T40] audit: type=1800 audit(1746604005.703:5): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.186" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 67.516947][ T6605] netlink: 3 bytes leftover after parsing attributes in process `syz.3.187'. [ 67.520202][ T6605] 0X: renamed from caif0 [ 67.529526][ T6605] 0X: entered allmulticast mode [ 67.535327][ T6605] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 67.643502][ T6617] netlink: 'syz.2.190': attribute type 1 has an invalid length. [ 67.672159][ T6617] bond0: entered promiscuous mode [ 67.674155][ T6617] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 67.677950][ T6617] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 68.583425][ T6650] @: renamed from hsr0 (while UP) [ 68.752013][ T6659] overlayfs: missing 'lowerdir' [ 69.002064][ T6662] ip6tnl1: entered promiscuous mode [ 69.003884][ T6662] ip6tnl1: entered allmulticast mode [ 69.007568][ T6662] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 69.049911][ T6656] ip6tnl1: entered promiscuous mode [ 69.052314][ T6656] ip6tnl1: entered allmulticast mode [ 69.057498][ T6656] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 69.145658][ T6665] bond3: entered promiscuous mode [ 69.147806][ T6665] 8021q: adding VLAN 0 to HW filter on device bond3 [ 69.176831][ T6665] veth5: entered promiscuous mode [ 69.179357][ T6665] bond3: (slave veth5): Enslaving as an active interface with an up link [ 69.295867][ T6673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.212'. [ 69.338528][ T6684] exFAT-fs (nullb0): invalid boot record signature [ 69.340859][ T6684] exFAT-fs (nullb0): failed to read boot sector [ 69.343407][ T6684] exFAT-fs (nullb0): failed to recognize exfat type [ 69.558895][ T6693] lo speed is unknown, defaulting to 1000 [ 69.716679][ T6689] netlink: 'syz.0.217': attribute type 4 has an invalid length. [ 69.903589][ T6720] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 69.945606][ T6720] bond4: entered promiscuous mode [ 69.947527][ T6720] 8021q: adding VLAN 0 to HW filter on device bond4 [ 70.098819][ T6720] bond4: (slave veth9): making interface the new active one [ 70.101339][ T6720] veth9: entered promiscuous mode [ 70.105054][ T6720] bond4: (slave veth9): Enslaving as an active interface with an up link [ 70.164321][ T6730] IPVS: set_ctl: invalid protocol: 59 172.20.20.24:20002 [ 70.191177][ T6720] bond2: (slave veth5): Releasing backup interface [ 70.212744][ T6720] veth5: left promiscuous mode [ 70.221159][ T6720] bond3: (slave veth7): Releasing backup interface [ 70.230675][ T6720] veth7: left promiscuous mode [ 70.241387][ T6720] bond4: (slave veth9): Releasing backup interface [ 70.243982][ T6720] veth9: left promiscuous mode [ 70.490127][ T6739] 9pnet_fd: p9_fd_create_unix (6739): problem connecting socket: ./file0/file0: -2 [ 70.872862][ T6752] netlink: 'syz.3.237': attribute type 1 has an invalid length. [ 70.884569][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.886731][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.899449][ T6752] bond0: entered promiscuous mode [ 70.901511][ T6752] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 70.905816][ T6752] bond5: (slave macvlan2): Enslaving as a backup interface with a down link [ 71.029463][ T6756] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 71.301042][ T6772] bond2: entered promiscuous mode [ 71.303020][ T6772] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.326524][ T6772] veth3: entered promiscuous mode [ 71.328506][ T6772] bond2: (slave veth3): Enslaving as an active interface with an up link [ 71.514375][ T6789] exFAT-fs (nullb0): invalid boot record signature [ 71.517092][ T6789] exFAT-fs (nullb0): failed to read boot sector [ 71.519841][ T6789] exFAT-fs (nullb0): failed to recognize exfat type [ 71.790720][ T6818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.261'. [ 72.095186][ T6820] netlink: 'syz.0.259': attribute type 4 has an invalid length. [ 72.235953][ T6841] netlink: 'syz.3.267': attribute type 1 has an invalid length. [ 72.309086][ T6841] bond6: entered promiscuous mode [ 72.311323][ T6841] 8021q: adding VLAN 0 to HW filter on device bond6 [ 72.376264][ T6843] bond6: (slave veth11): making interface the new active one [ 72.378897][ T6843] veth11: entered promiscuous mode [ 72.381887][ T6843] bond6: (slave veth11): Enslaving as an active interface with an up link [ 72.465077][ T6843] bond5: (slave macvlan2): Releasing backup interface [ 72.469545][ T6843] bond0: left promiscuous mode [ 72.496437][ T6843] bond6: (slave veth11): Releasing backup interface [ 72.518824][ T6843] veth11: left promiscuous mode [ 73.126212][ T6867] netlink: 'syz.3.276': attribute type 10 has an invalid length. [ 73.128812][ T6867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.276'. [ 73.138930][ T6867] team0: Port device geneve0 added [ 73.244305][ T6876] gfs2: Unknown parameter 'barrierer0' [ 73.434879][ T6888] netlink: 'syz.3.283': attribute type 4 has an invalid length. [ 73.573835][ T6895] overlayfs: upper fs does not support tmpfile. [ 73.872300][ T6911] ip6tnl1: entered promiscuous mode [ 73.874153][ T6911] ip6tnl1: entered allmulticast mode [ 73.877643][ T6911] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 74.672301][ T6922] netlink: 'syz.0.294': attribute type 4 has an invalid length. [ 75.498001][ T6967] lo speed is unknown, defaulting to 1000 [ 75.582833][ T6972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.311'. [ 75.695307][ T6988] exFAT-fs (nullb0): invalid boot record signature [ 75.698238][ T6988] exFAT-fs (nullb0): failed to read boot sector [ 75.700988][ T6988] exFAT-fs (nullb0): failed to recognize exfat type [ 75.918630][ T6989] binder: 6985:6989 ioctl c0046209 0 returned -22 [ 76.670725][ T7005] wireguard0: entered promiscuous mode [ 76.674563][ T7005] wireguard0: entered allmulticast mode [ 76.768557][ T7013] ip6tnl1: entered promiscuous mode [ 76.771192][ T7013] ip6tnl1: entered allmulticast mode [ 76.797594][ T7013] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 77.125505][ T7047] netlink: 'syz.2.334': attribute type 1 has an invalid length. [ 77.148982][ T7047] bond2: entered promiscuous mode [ 77.151278][ T7047] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.207959][ T7047] bond2: (slave veth3): making interface the new active one [ 77.211873][ T7047] veth3: entered promiscuous mode [ 77.214325][ T7047] bond2: (slave veth3): Enslaving as an active interface with an up link [ 77.317907][ T7042] netlink: 'syz.0.335': attribute type 4 has an invalid length. [ 77.342717][ T7047] bond1: (slave macvlan2): Releasing backup interface [ 77.349135][ T7047] bond0: left promiscuous mode [ 77.385392][ T7047] bond2: (slave veth3): Releasing backup interface [ 77.391460][ T7047] veth3: left promiscuous mode [ 78.015883][ T7103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.344'. [ 78.108113][ T7109] bond7: entered promiscuous mode [ 78.110025][ T7109] 8021q: adding VLAN 0 to HW filter on device bond7 [ 78.143536][ T7109] veth13: entered promiscuous mode [ 78.146780][ T7109] bond7: (slave veth13): Enslaving as an active interface with an up link [ 78.169940][ T7112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.348'. [ 78.285750][ T7125] netlink: 'syz.3.353': attribute type 4 has an invalid length. [ 78.288923][ T7125] netlink: 'syz.3.353': attribute type 4 has an invalid length. [ 78.350546][ T7134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.356'. [ 78.406166][ T7139] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 78.469536][ T7145] warning: `syz.2.355' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.523340][ T7145] netlink: 'syz.2.355': attribute type 10 has an invalid length. [ 78.526040][ T7145] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 78.528715][ T7145] bond0: (slave wlan1): refused to change device type [ 78.565345][ T7137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.357'. [ 78.639067][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 78.648090][ T7154] afs: Unknown parameter 'dyn' [ 78.652212][ T7154] overlayfs: overlapping lowerdir path [ 78.683256][ T7155] netlink: 'syz.1.361': attribute type 1 has an invalid length. [ 78.707612][ T7155] bond0: entered promiscuous mode [ 78.709592][ T7155] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 78.714505][ T7155] bond3: (slave macvlan2): Enslaving as a backup interface with a down link [ 79.213240][ T7172] fuse: Invalid rootmode [ 79.262033][ T7176] hpfs: Bad magic ... probably not HPFS [ 79.478352][ T7186] netlink: 'syz.3.375': attribute type 1 has an invalid length. [ 79.581265][ T7183] netlink: 'syz.2.374': attribute type 4 has an invalid length. [ 79.742657][ T7205] pim6reg: entered allmulticast mode [ 79.841234][ T7210] lo speed is unknown, defaulting to 1000 [ 80.041378][ T7213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'. [ 81.117626][ T64] cfg80211: failed to load regulatory.db [ 81.159817][ T7244] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.625357][ T7264] exFAT-fs (nullb0): invalid boot record signature [ 81.628302][ T7264] exFAT-fs (nullb0): failed to read boot sector [ 81.631140][ T7264] exFAT-fs (nullb0): failed to recognize exfat type [ 81.754403][ T7256] wireguard0: entered promiscuous mode [ 81.756685][ T7256] wireguard0: entered allmulticast mode [ 81.842319][ T7268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.402'. [ 81.873181][ T7269] ip6tnl1: entered promiscuous mode [ 81.875415][ T7269] ip6tnl1: entered allmulticast mode [ 81.879832][ T7269] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 81.999692][ T7271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.403'. [ 82.915313][ T7289] lo speed is unknown, defaulting to 1000 [ 83.010918][ T34] hid-generic 0292:FFFFFFF2:0001.0002: unknown main item tag 0x5 [ 83.015377][ T34] hid-generic 0292:FFFFFFF2:0001.0002: reserved main item tag 0xe [ 83.017970][ T34] hid-generic 0292:FFFFFFF2:0001.0002: unknown main item tag 0x4 [ 83.020536][ T34] hid-generic 0292:FFFFFFF2:0001.0002: item fetching failed at offset 18/79 [ 83.025111][ T34] hid-generic 0292:FFFFFFF2:0001.0002: probe with driver hid-generic failed with error -22 [ 83.037082][ T7303] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=327709 (655418 ns) > initial count (524320 ns). Using initial count to start timer. [ 83.216938][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 83.232420][ T7323] bond3: entered promiscuous mode [ 83.234301][ T7323] 8021q: adding VLAN 0 to HW filter on device bond3 [ 83.299466][ T7323] veth5: entered promiscuous mode [ 83.302947][ T7323] bond3: (slave veth5): Enslaving as an active interface with an up link [ 83.314626][ T7319] cgroup: fork rejected by pids controller in /syz0 [ 83.811421][ T7771] 9pnet_fd: Insufficient options for proto=fd [ 83.820774][ T7771] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 83.829275][ T7771] overlayfs: failed to set xattr on upper [ 83.834290][ T7771] overlayfs: ...falling back to redirect_dir=nofollow. [ 83.838982][ T7771] overlayfs: ...falling back to index=off. [ 83.843727][ T7771] overlayfs: ...falling back to uuid=null. [ 83.847915][ T7771] overlayfs: ...falling back to xino=off. [ 83.979409][ T8132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.427'. [ 84.053390][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.428'. [ 84.211617][ T8528] exFAT-fs (nullb0): invalid boot record signature [ 84.213854][ T8528] exFAT-fs (nullb0): failed to read boot sector [ 84.215924][ T8528] exFAT-fs (nullb0): failed to recognize exfat type [ 84.627153][ T8534] wireguard0: entered promiscuous mode [ 84.639546][ T8534] wireguard0: entered allmulticast mode [ 84.654266][ T8530] netlink: 'syz.1.435': attribute type 4 has an invalid length. [ 85.132377][ T8545] ip6tnl1: entered promiscuous mode [ 85.144301][ T8545] ip6tnl1: entered allmulticast mode [ 85.184223][ T8545] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 85.571645][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 85.583125][ T8562] bond4: entered promiscuous mode [ 85.585154][ T8562] 8021q: adding VLAN 0 to HW filter on device bond4 [ 85.611788][ T8562] veth5: entered promiscuous mode [ 85.613860][ T8562] bond4: (slave veth5): Enslaving as an active interface with an up link [ 85.663696][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.445'. [ 85.969951][ T8574] netlink: 'syz.0.447': attribute type 1 has an invalid length. [ 86.034705][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 86.037066][ T65] Bluetooth: hci4: Frame reassembly failed (-84) [ 86.541639][ T8587] netlink: 16 bytes leftover after parsing attributes in process `syz.3.450'. [ 86.620274][ T8601] netlink: 'syz.3.455': attribute type 1 has an invalid length. [ 86.626438][ T8601] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.455'. [ 86.843365][ T8612] ip6tnl1: entered promiscuous mode [ 86.845196][ T8612] ip6tnl1: entered allmulticast mode [ 86.849059][ T8612] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 87.042429][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 87.209534][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'. [ 87.811831][ T5983] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 87.971820][ T5983] usb 7-1: Using ep0 maxpacket: 32 [ 87.976070][ T5983] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 87.988046][ T5983] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 87.990974][ T5983] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 87.993812][ T5983] usb 7-1: Product: syz [ 87.995196][ T5983] usb 7-1: Manufacturer: syz [ 87.996731][ T5983] usb 7-1: SerialNumber: syz [ 88.003621][ T5983] usb 7-1: config 0 descriptor?? [ 88.005791][ T8637] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 88.072055][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 88.084549][ T8654] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 88.094588][ T8654] CIFS: Unable to determine destination address [ 88.139138][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 88.294381][ T8652] ip6tnl1: entered promiscuous mode [ 88.296394][ T8652] ip6tnl1: entered allmulticast mode [ 88.299689][ T8652] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 88.337356][ T5983] usb 7-1: USB disconnect, device number 3 [ 88.774134][ T8667] FAULT_INJECTION: forcing a failure. [ 88.774134][ T8667] name failslab, interval 1, probability 0, space 0, times 1 [ 88.778301][ T8667] CPU: 2 UID: 0 PID: 8667 Comm: syz.0.474 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 88.778314][ T8667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.778320][ T8667] Call Trace: [ 88.778324][ T8667] [ 88.778327][ T8667] dump_stack_lvl+0x16c/0x1f0 [ 88.778345][ T8667] should_fail_ex+0x512/0x640 [ 88.778358][ T8667] ? __kmalloc_noprof+0xbf/0x510 [ 88.778370][ T8667] ? sock_kmalloc+0x111/0x170 [ 88.778382][ T8667] should_failslab+0xc2/0x120 [ 88.778394][ T8667] __kmalloc_noprof+0xd2/0x510 [ 88.778404][ T8667] ? do_raw_spin_lock+0x12c/0x2b0 [ 88.778422][ T8667] sock_kmalloc+0x111/0x170 [ 88.778435][ T8667] hash_alloc_result+0xd7/0x150 [ 88.778450][ T8667] hash_sendmsg+0x6df/0xfb0 [ 88.778470][ T8667] ____sys_sendmsg+0xa95/0xc70 [ 88.778483][ T8667] ? gfs2_create_inode+0x1be0/0x32c0 [ 88.778495][ T8667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.778508][ T8667] ? get_compat_msghdr+0x11a/0x170 [ 88.778523][ T8667] ___sys_sendmsg+0x134/0x1d0 [ 88.778535][ T8667] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.778560][ T8667] __sys_sendmsg+0x16d/0x220 [ 88.778571][ T8667] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.778587][ T8667] ? rcu_is_watching+0x12/0xc0 [ 88.778598][ T8667] __do_fast_syscall_32+0x73/0x120 [ 88.778613][ T8667] do_fast_syscall_32+0x32/0x80 [ 88.778627][ T8667] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 88.778639][ T8667] RIP: 0023:0xf7fe3579 [ 88.778646][ T8667] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 88.778655][ T8667] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 88.778665][ T8667] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000380 [ 88.778671][ T8667] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.778676][ T8667] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 88.778681][ T8667] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 88.778686][ T8667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 88.778698][ T8667] [ 88.963767][ T8680] __nla_validate_parse: 1 callbacks suppressed [ 88.963778][ T8680] netlink: 20 bytes leftover after parsing attributes in process `syz.0.479'. [ 88.997897][ T8684] netlink: 'syz.0.481': attribute type 2 has an invalid length. [ 89.039703][ T8687] netlink: 'syz.2.480': attribute type 1 has an invalid length. [ 89.149935][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 89.163234][ T8698] bond9: entered promiscuous mode [ 89.165605][ T8698] 8021q: adding VLAN 0 to HW filter on device bond9 [ 89.187308][ T8698] veth15: entered promiscuous mode [ 89.189397][ T8698] bond9: (slave veth15): Enslaving as an active interface with an up link [ 89.411356][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 89.414681][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 89.556773][ T8712] netlink: 'syz.0.489': attribute type 4 has an invalid length. [ 89.671880][ T7138] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 89.826194][ T7138] usb 8-1: config 1 interface 0 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 89.836734][ T7138] usb 8-1: config 1 interface 0 altsetting 13 bulk endpoint 0x3 has invalid maxpacket 8 [ 89.840125][ T7138] usb 8-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.844556][ T7138] usb 8-1: config 1 interface 0 has no altsetting 0 [ 90.211306][ T8734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.498'. [ 90.498983][ T8740] ip6tnl1: entered promiscuous mode [ 90.500938][ T8740] ip6tnl1: entered allmulticast mode [ 90.503930][ T8740] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 90.546340][ T8747] FAULT_INJECTION: forcing a failure. [ 90.546340][ T8747] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 90.551275][ T8747] CPU: 3 UID: 0 PID: 8747 Comm: syz.1.502 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 90.551295][ T8747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.551304][ T8747] Call Trace: [ 90.551311][ T8747] [ 90.551316][ T8747] dump_stack_lvl+0x16c/0x1f0 [ 90.551333][ T8747] should_fail_ex+0x512/0x640 [ 90.551349][ T8747] _copy_to_user+0x32/0xd0 [ 90.551364][ T8747] simple_read_from_buffer+0xcb/0x170 [ 90.551380][ T8747] proc_fail_nth_read+0x197/0x270 [ 90.551394][ T8747] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.551408][ T8747] ? rw_verify_area+0xcf/0x680 [ 90.551427][ T8747] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 90.551440][ T8747] vfs_read+0x1de/0xc70 [ 90.551450][ T8747] ? __pfx___mutex_lock+0x10/0x10 [ 90.551464][ T8747] ? __pfx_vfs_read+0x10/0x10 [ 90.551476][ T8747] ? __fget_files+0x20e/0x3c0 [ 90.551494][ T8747] ksys_read+0x12a/0x240 [ 90.551503][ T8747] ? __pfx_ksys_read+0x10/0x10 [ 90.551511][ T8747] ? rcu_is_watching+0x12/0xc0 [ 90.551521][ T8747] ? rcu_is_watching+0x12/0xc0 [ 90.551532][ T8747] __do_fast_syscall_32+0x73/0x120 [ 90.551546][ T8747] do_fast_syscall_32+0x32/0x80 [ 90.551560][ T8747] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 90.551572][ T8747] RIP: 0023:0xf7f55579 [ 90.551580][ T8747] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 90.551589][ T8747] RSP: 002b:00000000f5076590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 90.551598][ T8747] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5076620 [ 90.551604][ T8747] RDX: 000000000000000f RSI: 00000000f73e2ff4 RDI: 0000000000000000 [ 90.551610][ T8747] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 90.551615][ T8747] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 90.551620][ T8747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.551632][ T8747] [ 90.713103][ T8752] input: syz0 as /devices/virtual/input/input7 [ 90.715603][ T8752] input: failed to attach handler leds to device input7, error: -6 [ 90.718214][ T8754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.505'. [ 90.801447][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 90.826490][ T8762] bond5: entered promiscuous mode [ 90.828350][ T8762] 8021q: adding VLAN 0 to HW filter on device bond5 [ 90.857951][ T8762] veth7: entered promiscuous mode [ 90.859958][ T8762] bond5: (slave veth7): Enslaving as an active interface with an up link [ 90.901166][ T8767] exFAT-fs (nullb0): invalid boot record signature [ 90.903481][ T8767] exFAT-fs (nullb0): failed to read boot sector [ 90.906649][ T8767] exFAT-fs (nullb0): failed to recognize exfat type [ 91.468911][ T8786] lo speed is unknown, defaulting to 1000 [ 92.219307][ T8796] 9pnet_virtio: no channels available for device syz [ 92.222488][ T8796] 9pnet_virtio: no channels available for device syz [ 92.226681][ T8796] 9pnet_virtio: no channels available for device syz [ 92.229791][ T8796] 9pnet_virtio: no channels available for device syz [ 92.236106][ T8796] 9pnet_virtio: no channels available for device syz [ 92.238652][ T8796] 9pnet_virtio: no channels available for device syz [ 92.241084][ T8796] 9pnet_virtio: no channels available for device syz [ 92.244336][ T8796] 9pnet_virtio: no channels available for device syz [ 92.246730][ T8796] 9pnet_virtio: no channels available for device syz [ 92.249293][ T8796] 9pnet_virtio: no channels available for device syz [ 92.251625][ T8796] 9pnet_virtio: no channels available for device syz [ 92.257913][ T8796] 9pnet_virtio: no channels available for device syz [ 92.261449][ T8796] 9pnet_virtio: no channels available for device syz [ 92.266559][ T8796] 9pnet_virtio: no channels available for device syz [ 92.370701][ T8805] JFS: charset not found [ 92.422083][ T7138] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.425050][ T7138] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.446908][ T7138] usb 8-1: Product: 崃꽴蜮⻡婳꼾᝸囼ⸯ침瀁『埤臕坦팱퉖 [ 92.450631][ T7138] usb 8-1: Manufacturer: ᐄ [ 92.454505][ T7138] usb 8-1: can't set config #1, error -71 [ 92.457419][ T7138] usb 8-1: USB disconnect, device number 4 [ 92.516559][ T8813] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 92.558070][ T8810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.521'. [ 92.585342][ T8800] netlink: 'syz.0.517': attribute type 4 has an invalid length. [ 92.648334][ T8819] Bluetooth: MGMT ver 1.23 [ 92.902221][ T8825] "syz.3.526" (8825) uses obsolete ecb(arc4) skcipher [ 93.738707][ T8831] ================================================================== [ 93.741267][ T8831] BUG: KASAN: vmalloc-out-of-bounds in vrealloc_noprof+0x132/0x320 [ 93.743720][ T8831] Write of size 4064 at addr ffffc90002ee1020 by task syz.1.527/8831 [ 93.748047][ T8831] [ 93.748828][ T8831] CPU: 1 UID: 0 PID: 8831 Comm: syz.1.527 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 93.748842][ T8831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.748848][ T8831] Call Trace: [ 93.748852][ T8831] [ 93.748855][ T8831] dump_stack_lvl+0x116/0x1f0 [ 93.748872][ T8831] print_report+0xc3/0x670 [ 93.748884][ T8831] ? __virt_addr_valid+0x5e/0x590 [ 93.748898][ T8831] ? vrealloc_noprof+0x132/0x320 [ 93.748906][ T8831] kasan_report+0xe0/0x110 [ 93.748917][ T8831] ? vrealloc_noprof+0x132/0x320 [ 93.748927][ T8831] kasan_check_range+0xef/0x1a0 [ 93.748940][ T8831] __asan_memset+0x23/0x50 [ 93.748955][ T8831] vrealloc_noprof+0x132/0x320 [ 93.748964][ T8831] push_insn_history+0x2ae/0x6c0 [ 93.748975][ T8831] do_check_common+0xbd3/0xc2a0 [ 93.748991][ T8831] ? __pfx_do_check_common+0x10/0x10 [ 93.749001][ T8831] ? __pfx_mark_fastcall_pattern_for_call+0x10/0x10 [ 93.749017][ T8831] ? kfree+0x2b6/0x4d0 [ 93.749024][ T8831] ? bpf_check+0x6c86/0xb460 [ 93.749034][ T8831] ? bpf_check+0x7b2f/0xb460 [ 93.749044][ T8831] bpf_check+0x7f51/0xb460 [ 93.749057][ T8831] ? __pfx_bpf_check+0x10/0x10 [ 93.749066][ T8831] ? pcpu_alloc_noprof+0x949/0x1470 [ 93.749079][ T8831] ? __lock_acquire+0xaa4/0x1ba0 [ 93.749095][ T8831] ? find_held_lock+0x2b/0x80 [ 93.749104][ T8831] ? __asan_memset+0x23/0x50 [ 93.749122][ T8831] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 93.749135][ T8831] bpf_prog_load+0xe41/0x2490 [ 93.749149][ T8831] ? __pfx_bpf_prog_load+0x10/0x10 [ 93.749162][ T8831] ? __pfx___futex_wait+0x10/0x10 [ 93.749179][ T8831] ? bpf_lsm_bpf+0x9/0x10 [ 93.749189][ T8831] __sys_bpf+0x433c/0x4d80 [ 93.749202][ T8831] ? __pfx___sys_bpf+0x10/0x10 [ 93.749215][ T8831] ? __lock_acquire+0xaa4/0x1ba0 [ 93.749227][ T8831] ? do_futex+0x122/0x350 [ 93.749237][ T8831] ? __pfx_do_futex+0x10/0x10 [ 93.749249][ T8831] ? xfd_validate_state+0x5d/0x180 [ 93.749265][ T8831] ? rcu_is_watching+0x12/0xc0 [ 93.749274][ T8831] __ia32_sys_bpf+0x76/0xe0 [ 93.749288][ T8831] __do_fast_syscall_32+0x73/0x120 [ 93.749302][ T8831] do_fast_syscall_32+0x32/0x80 [ 93.749316][ T8831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 93.749328][ T8831] RIP: 0023:0xf7f55579 [ 93.749335][ T8831] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 93.749345][ T8831] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 93.749354][ T8831] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000700 [ 93.749361][ T8831] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 93.749366][ T8831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 93.749371][ T8831] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 93.749377][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 93.749385][ T8831] [ 93.749388][ T8831] [ 93.846690][ T8831] The buggy address belongs to the virtual mapping at [ 93.846690][ T8831] [ffffc90002e61000, ffffc90002ee3000) created by: [ 93.846690][ T8831] kvrealloc_noprof+0x7d/0xd0 [ 93.852801][ T8831] [ 93.853806][ T8831] The buggy address belongs to the physical page: [ 93.856422][ T8831] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x25 pfn:0x4a664 [ 93.860059][ T8831] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 93.862993][ T8831] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 93.866516][ T8831] raw: 0000000000000025 0000000000000000 00000001ffffffff 0000000000000000 [ 93.870013][ T8831] page dumped because: kasan: bad access detected [ 93.872639][ T8831] page_owner tracks the page as allocated [ 93.874964][ T8831] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 8831, tgid 8830 (syz.1.527), ts 93738534041, free_ts 93414108966 [ 93.881861][ T8831] post_alloc_hook+0x181/0x1b0 [ 93.883438][ T8831] get_page_from_freelist+0x135c/0x3920 [ 93.885252][ T8831] __alloc_frozen_pages_noprof+0x5a8/0x23a0 [ 93.887170][ T8831] alloc_pages_mpol+0x1fb/0x550 [ 93.888780][ T8831] alloc_pages_noprof+0x131/0x390 [ 93.890399][ T8831] __vmalloc_node_range_noprof+0x732/0x1540 [ 93.892293][ T8831] __kvmalloc_node_noprof+0x2ff/0x600 [ 93.894007][ T8831] kvrealloc_noprof+0x7d/0xd0 [ 93.895505][ T8831] push_insn_history+0x2ae/0x6c0 [ 93.897088][ T8831] check_mem_access+0x3edc/0x5fb0 [ 93.898693][ T8831] check_store_reg+0x2ef/0x470 [ 93.900228][ T8831] do_check_common+0x4618/0xc2a0 [ 93.901823][ T8831] bpf_check+0x7f51/0xb460 [ 93.903258][ T8831] bpf_prog_load+0xe41/0x2490 [ 93.904785][ T8831] __sys_bpf+0x433c/0x4d80 [ 93.906226][ T8831] __ia32_sys_bpf+0x76/0xe0 [ 93.907691][ T8831] page last free pid 115 tgid 115 stack trace: [ 93.909723][ T8831] free_unref_folios+0x999/0x1630 [ 93.911406][ T8831] shrink_folio_list+0x3255/0x40e0 [ 93.913095][ T8831] evict_folios+0x779/0x1b60 [ 93.914617][ T8831] try_to_shrink_lruvec+0x5a3/0x990 [ 93.916321][ T8831] shrink_one+0x3e3/0x7a0 [ 93.917710][ T8831] shrink_node+0x268e/0x3d20 [ 93.919220][ T8831] balance_pgdat+0xba5/0x19c0 [ 93.920731][ T8831] kswapd+0x590/0xb90 [ 93.922050][ T8831] kthread+0x3c2/0x780 [ 93.923399][ T8831] ret_from_fork+0x45/0x80 [ 93.924884][ T8831] ret_from_fork_asm+0x1a/0x30 [ 93.926466][ T8831] [ 93.927268][ T8831] Memory state around the buggy address: [ 93.929129][ T8831] ffffc90002ee0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.931684][ T8831] ffffc90002ee0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.934266][ T8831] >ffffc90002ee1000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 93.936805][ T8831] ^ [ 93.938492][ T8831] ffffc90002ee1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 93.941029][ T8831] ffffc90002ee1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 93.943597][ T8831] ================================================================== [ 93.946833][ T8831] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.949087][ T8831] CPU: 1 UID: 0 PID: 8831 Comm: syz.1.527 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 93.952817][ T8831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.956192][ T8831] Call Trace: [ 93.957287][ T8831] [ 93.958423][ T8831] dump_stack_lvl+0x3d/0x1f0 [ 93.960286][ T8831] panic+0x71c/0x800 [ 93.961932][ T8831] ? __pfx_panic+0x10/0x10 [ 93.963730][ T8831] ? rcu_is_watching+0x12/0xc0 [ 93.965656][ T8831] ? preempt_schedule_thunk+0x16/0x30 [ 93.967823][ T8831] ? vrealloc_noprof+0x132/0x320 [ 93.969900][ T8831] ? preempt_schedule_common+0x44/0xc0 [ 93.972191][ T8831] ? vrealloc_noprof+0x132/0x320 [ 93.974267][ T8831] check_panic_on_warn+0xab/0xb0 [ 93.976362][ T8831] end_report+0x107/0x170 [ 93.978203][ T8831] kasan_report+0xee/0x110 [ 93.980064][ T8831] ? vrealloc_noprof+0x132/0x320 [ 93.981690][ T8831] kasan_check_range+0xef/0x1a0 [ 93.983292][ T8831] __asan_memset+0x23/0x50 [ 93.984784][ T8831] vrealloc_noprof+0x132/0x320 [ 93.986323][ T8831] push_insn_history+0x2ae/0x6c0 [ 93.987950][ T8831] do_check_common+0xbd3/0xc2a0 [ 93.989556][ T8831] ? __pfx_do_check_common+0x10/0x10 [ 93.991281][ T8831] ? __pfx_mark_fastcall_pattern_for_call+0x10/0x10 [ 93.993463][ T8831] ? kfree+0x2b6/0x4d0 [ 93.994801][ T8831] ? bpf_check+0x6c86/0xb460 [ 93.996350][ T8831] ? bpf_check+0x7b2f/0xb460 [ 93.997913][ T8831] bpf_check+0x7f51/0xb460 [ 93.999386][ T8831] ? __pfx_bpf_check+0x10/0x10 [ 94.000962][ T8831] ? pcpu_alloc_noprof+0x949/0x1470 [ 94.002641][ T8831] ? __lock_acquire+0xaa4/0x1ba0 [ 94.004287][ T8831] ? find_held_lock+0x2b/0x80 [ 94.005823][ T8831] ? __asan_memset+0x23/0x50 [ 94.007343][ T8831] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 94.009015][ T8831] bpf_prog_load+0xe41/0x2490 [ 94.010583][ T8831] ? __pfx_bpf_prog_load+0x10/0x10 [ 94.012281][ T8831] ? __pfx___futex_wait+0x10/0x10 [ 94.013950][ T8831] ? bpf_lsm_bpf+0x9/0x10 [ 94.015373][ T8831] __sys_bpf+0x433c/0x4d80 [ 94.016848][ T8831] ? __pfx___sys_bpf+0x10/0x10 [ 94.018454][ T8831] ? __lock_acquire+0xaa4/0x1ba0 [ 94.020024][ T8831] ? do_futex+0x122/0x350 [ 94.021428][ T8831] ? __pfx_do_futex+0x10/0x10 [ 94.022908][ T8831] ? xfd_validate_state+0x5d/0x180 [ 94.024555][ T8831] ? rcu_is_watching+0x12/0xc0 [ 94.026063][ T8831] __ia32_sys_bpf+0x76/0xe0 [ 94.027527][ T8831] __do_fast_syscall_32+0x73/0x120 [ 94.029157][ T8831] do_fast_syscall_32+0x32/0x80 [ 94.030724][ T8831] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.032755][ T8831] RIP: 0023:0xf7f55579 [ 94.034069][ T8831] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 94.040146][ T8831] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 94.042858][ T8831] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000700 [ 94.045378][ T8831] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.047884][ T8831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.050452][ T8831] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 94.053023][ T8831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.055613][ T8831] [ 94.057327][ T8831] Kernel Offset: disabled [ 94.058799][ T8831] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:47:12 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b33f880 RCX=ffffffff81ae9e69 RDX=ffff888021ae8000 RSI=ffffffff81ae9e43 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90006acf938 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed1005667f11 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802b23b180 RIP=ffffffff81ae9e45 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000cffc CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854c2175 RDI=ffffffff9addfbc0 RBP=ffffffff9addfb80 RSP=ffffc900042fef00 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3039636666667257 R12=0000000000000000 R13=0000000000000066 R14=ffffffff9addfb80 R15=ffffffff854c2110 RIP=ffffffff854c219f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880978ec000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7203820 CR3=0000000045f26000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b423bf0 RCX=1ffffffff35654bc RDX=1ffffffff1b9c9a2 RSI=ffffffff8bf46be0 RDI=0000000000000002 RBP=0000000000010000 RSP=ffffc90000538f00 R8 =0000000000000000 R9 =fffffbfff210a462 R10=ffffffff90852317 R11=ffffc90000538ff8 R12=1ffff920000a71e6 R13=ffff888044910000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff815ef370 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057bc94c0 CR3=000000004a72c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7462ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000302 RBX=0000000000000050 RCX=0000000000000007 RDX=0000000000000000 RSI=ffff88802029d398 RDI=ffffffff8e3bf440 RBP=ffff88802029d370 RSP=ffffc90002207160 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=ffffffff8e3bf440 R12=0000000000000001 R13=0000000000000002 R14=ffff88802029c880 R15=0000000000000000 RIP=ffffffff81978777 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097aec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c301aa8 CR3=0000000063525000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001f000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000