last executing test programs: 19.62575265s ago: executing program 2 (id=482): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x40008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000080) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x20000000000001ca, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xdb, &(0x7f0000000140)=""/186, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000400000000000000010000e761ff5e01000000000b0000000000000000002e00"], 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) mbind(&(0x7f000057e000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000000c0)=0x8, 0x6, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r2, 0x5393, &(0x7f0000000100)={"4689d4c4841a41c9e4641d9d", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) 18.661276449s ago: executing program 2 (id=485): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000ff07a030d3edac3a7c07f915a0a5480f6d87032b6f839d34e260e59ef721d98d503926f453c467f7e2bc0ecec07f98f0c9af7a5505120c0bca667c6d566d40796706ae247074380358e35ded8fc067e19d078eda3bbbb9346fbacf83841ce0e297fd45ccd4dbb2c6c6e93a19ed247cfd69dda3d76ce9f8ad65eca845f2e58300"/152], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x1}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000150001030000000000000000"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x78, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x804) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') syz_io_uring_setup(0x6918, &(0x7f0000000680)={0x0, 0x3035, 0x0, 0xfffffffe, 0xffdffffc}, &(0x7f0000000380), &(0x7f0000000180)) lsm_list_modules(0x0, 0x0, 0x0) 7.914762305s ago: executing program 2 (id=500): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000cf030a4a940a23c3fcdee38880000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0x22, 0x5, 0xfffffffe) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x12) tkill(r2, 0x12) ptrace(0x4208, r2) close(r1) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './bus\x00'}, 0x6e) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r3, 0x40204706, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001c40)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb6"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x20, r6, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r8 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xf120, 0x80, 0x1000, 0x23e}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 7.778773623s ago: executing program 2 (id=504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x2, 0x5}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002700)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000400)='./bus\x00', 0x0) (async) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f00000002c0)=ANY=[], 0x76) dup3(r5, r4, 0x0) finit_module(r5, 0x0, 0x100000000000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0x53}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x68, r1, 0x2, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x3c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x37, 0x5, "989d2356e4d69daf8d6c85437633e807ab5c7383a1ebac06a360d9741432e5c89ca868b6f41d6818108476a8b16d6935e76799"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8890) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000040)={0x2}) (async) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000040)={0x2}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = getpid() r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-aes-neonbs,streebog512-generic)\x00'}, 0xfffffffffffffd92) accept4(r9, 0x0, 0x0, 0x0) (async) r10 = accept4(r9, 0x0, 0x0, 0x0) sendto$unix(r10, &(0x7f0000001080)='\b', 0x1, 0x0, 0x0, 0x0) syz_pidfd_open(r8, 0x0) (async) r11 = syz_pidfd_open(r8, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='nfsd\x00', 0x840d, 0x0) setns(r11, 0x24020000) (async) setns(r11, 0x24020000) 7.723714625s ago: executing program 2 (id=506): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x40008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000080) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x20000000000001ca, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xdb, &(0x7f0000000140)=""/186, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000400000000000000010000e761ff5e01000000000b0000000000000000002e00"], 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) mbind(&(0x7f000057e000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000000c0)=0x8, 0x6, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000000)) 7.286172464s ago: executing program 2 (id=512): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r1, 0x81) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r3, 0xaea2, &(0x7f0000000040)={[{0x6, 0x9, 0x0, 0x3, 0x0, 0xc6, 0x70, 0x8, 0x7, 0xc, 0xda, 0xf8, 0x804}, {0x0, 0xf3f, 0x1, 0x7d, 0x8, 0x7, 0x2, 0x4, 0x0, 0x7, 0xd, 0x41, 0x6}, {0x29f1, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x2, 0xf4, 0x55, 0x8e, 0xffffffffffffffb5}]}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r7 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x701380, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x7, 0x4, 0x2, 0x3}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) 7.202471576s ago: executing program 32 (id=512): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r1, 0x81) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r3, 0xaea2, &(0x7f0000000040)={[{0x6, 0x9, 0x0, 0x3, 0x0, 0xc6, 0x70, 0x8, 0x7, 0xc, 0xda, 0xf8, 0x804}, {0x0, 0xf3f, 0x1, 0x7d, 0x8, 0x7, 0x2, 0x4, 0x0, 0x7, 0xd, 0x41, 0x6}, {0x29f1, 0x9, 0x13, 0xfc, 0x5, 0x7, 0x1, 0x10, 0x2, 0xf4, 0x55, 0x8e, 0xffffffffffffffb5}]}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r7 = openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x701380, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x7, 0x4, 0x2, 0x3}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) 5.118388066s ago: executing program 0 (id=520): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x87) r4 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r6, 0x541b, &(0x7f0000000100)) syz_io_uring_setup(0x5e2, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x0, 0x2, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) clock_gettime(0x0, &(0x7f0000007080)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006fc0)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000002800)=[{&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000000400)=""/224, 0xe0}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000500)=""/54, 0x36}, {&(0x7f0000000540)=""/168, 0xa8}, {&(0x7f0000002740)=""/137, 0x89}, {&(0x7f0000000640)=""/119, 0x77}], 0x9, &(0x7f0000002880)=""/205, 0xcd}, 0x2}, {{&(0x7f0000002980)=@nfc, 0x80, &(0x7f0000004d00)=[{&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/162, 0xa2}, {&(0x7f0000003ac0)=""/15, 0xf}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/199, 0xc7}, {&(0x7f0000004c00)=""/253, 0xfd}], 0x6, &(0x7f0000004d40)=""/98, 0x62}, 0x5}, {{&(0x7f0000004dc0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000005480)=[{&(0x7f0000004e40)=""/40, 0x28}, {&(0x7f0000004e80)=""/68, 0x44}, {&(0x7f0000004f00)=""/102, 0x66}, {&(0x7f0000004f80)=""/31, 0x1f}, {0x0}, {&(0x7f00000050c0)=""/129, 0x81}, {&(0x7f0000005180)=""/71, 0x47}, {&(0x7f0000005200)=""/70, 0x46}, {&(0x7f0000005380)=""/232, 0xe8}], 0x9, &(0x7f0000005500)=""/4096, 0x1000}, 0x701bc100}, {{&(0x7f0000006500)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000066c0)=[{&(0x7f0000006580)=""/228, 0xe4}, {&(0x7f0000006680)}], 0x2, &(0x7f0000006700)=""/186, 0xba}, 0xc}, {{0x0, 0x0, &(0x7f0000006a80)=[{&(0x7f00000067c0)=""/95, 0x5f}, {&(0x7f0000006840)=""/218, 0xda}, {&(0x7f0000006940)=""/175, 0xaf}, {&(0x7f0000006a00)=""/75, 0x4b}], 0x4, &(0x7f0000006ac0)=""/23, 0x17}, 0x5}, {{&(0x7f0000006b00)=@ieee802154, 0x80, &(0x7f0000006f40)=[{&(0x7f0000006b80)=""/238, 0xee}, {0x0}, {&(0x7f0000006d40)=""/188, 0xbc}, {&(0x7f0000006e00)=""/36, 0x24}, {&(0x7f0000006e40)=""/61, 0x3d}, {&(0x7f0000006e80)=""/192, 0xc0}], 0x6, &(0x7f0000006f80)}, 0x350}], 0x6, 0x40000002, &(0x7f00000070c0)={r8, r9+10000000}) recvfrom(r1, &(0x7f0000007100)=""/156, 0x9c, 0x2, &(0x7f00000071c0)=@phonet={0x23, 0x5, 0x2, 0x1}, 0x80) syz_io_uring_submit(r7, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0x381b, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)={0x7ff, 0x2, 0x0, 0x4000000000000}, 0x0, 0x0) 4.687716972s ago: executing program 1 (id=522): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x40008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000080) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x20000000000001ca, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xdb, &(0x7f0000000140)=""/186, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000400000000000000010000e761ff5e01000000000b0000000000000000002e00"], 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) mbind(&(0x7f000057e000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000000c0)=0x8, 0x6, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r2, 0x5393, &(0x7f0000000100)={"4689d4c4841a41c9e4641d9d", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8949, &(0x7f0000000000)) 3.739063337s ago: executing program 1 (id=524): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setreuid(0xffffffffffffffff, 0xee00) ioctl$FITHAW(r0, 0xc0045878) 3.649200484s ago: executing program 0 (id=525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a240001800800014000000006"], 0x140}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) io_setup(0x40e0d9f5, &(0x7f0000000080)=0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, 0x0, 0x0) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) r6 = io_uring_setup(0x1cb6, &(0x7f0000000300)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r8, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x40004) pread64(r7, &(0x7f0000000040)=""/59, 0x3b, 0x401) io_getevents(r4, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000000)={0x0, 0x3938700}) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @dev, 0xa}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) fcntl$addseals(r1, 0x409, 0x4) r10 = open(&(0x7f0000000180)='./file0\x00', 0xc4600, 0x2) sendmmsg$alg(r10, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="288122cdc5fc99fecfa3014f3359ba3f10a66293bfccbd488332ecd4a9cf9e9c1078ad225d90078250bc9aaf20029d889aa7fab37dcbd6db4d859caedbee9b9b7108dd2b1bae9cfc34dcee2339ff6e47ea815d0e", 0x54}, {&(0x7f0000001340)="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", 0x1000}], 0x2, &(0x7f00000002c0)=[@assoc={0x10, 0x117, 0x4, 0x8}, @assoc={0x10, 0x117, 0x4, 0x1}, @iv={0x20, 0x117, 0x2, 0xe, "d106eb6be50bf3ffcc691fee269d"}], 0x40, 0x20000011}, {0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)="e0d52b7404c7ca8624f1bc4f68f72c52679efaaafa852d911dc401383964cf3c69e6bc00e1faf81e8ce9469c9796115771c135322f453756775d96d3f59c50b8b257c82d24bf99b23f9b7947bfa4f807aedac3c153c2da6d28aaefda310f1b3263243fd3885c7b6f2f8adbe42f30e127b3771a3f3dd083cd9af8b43b3d6b2caef7dc5c325f3aa39a2e51c8ec705ac6eb0db62b33123ec13cf11e8481936d7bc3e1d9d56aca1a33efade7782fc86408b5979443d87296311cd121f0836335424cafeff9888088ac92fd16106001", 0xcd}, {&(0x7f00000004c0)="630ca07777e2aea44e80c7ed3e8b20d8da2e1320e3ac21790ebd27dfc37526cab07264241f6869b4c02d0119a1161217e6a4751581e58ea5b4c4cd3ad74d603c2188ddb70021222a1a6b397c0be51faf534aa4cdb0ab06075f39918651641f6c30c769a606824c5497efd8d45dda06fe79761a2aa0721a36eb47d38cb9256d6a598af272d3b7857a44165cec5c31da41ee3ad0c783e66441decacd3f4e12025ca6d21d4856cf924ec8b76cf0e201026021e7282ec3079860a46cdb852d3824a5a1d492b94784f98963222370260a56bf8b467e71", 0xd4}, {&(0x7f0000000300)="9c5dcfba796c80f03d6873fe947cd0734b08ccc58c52facc4e8c92a24a76e55498d98115a85e90961e", 0x29}, {&(0x7f00000005c0)='D\v', 0x2}, {&(0x7f0000003340)="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", 0x1000}], 0x5, 0x0, 0x0, 0x40000}], 0x2, 0x10) 2.73817914s ago: executing program 0 (id=527): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x4e) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = memfd_create(0x0, 0x3) pwritev(r0, 0x0, 0x1d, 0x7fffffff, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc25c4111, &(0x7f00000006c0)={0x2, [[0xfffffbff, 0x8, 0xfffffe01, 0xa, 0xc06e, 0x89d5, 0x0, 0xfff], [0x8, 0xffff, 0x6, 0x3, 0x400, 0x6, 0x40], [0x80000001, 0x8b9, 0x2, 0xfffffffa, 0xb7, 0xff, 0xfffffe01, 0x1]], '\x00', [{0x9, 0x6, 0x1}, {0x5, 0x397d, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x401, 0x1, 0x0, 0x1}, {0x10001, 0x3ff, 0x1, 0x0, 0x0, 0x1}, {0xc9, 0x447c, 0x1, 0x1, 0x0, 0x1}, {0x10000, 0x2, 0x1, 0x1}, {0x4, 0x2, 0x1, 0x0, 0x1}, {0x8, 0x6, 0x1, 0x0, 0x1}, {0xd, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x10000, 0x1, 0x0, 0x0, 0x1}, {0x81, 0x7fffffff, 0x0, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1, 0x1}], '\x00', 0x4}) capset(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) openat$full(0xffffff9c, 0x0, 0x303200, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0xfffff000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 2.675325243s ago: executing program 1 (id=528): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x14000012) recvmsg$qrtr(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f00000005c0)=""/130, 0x82}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3}, 0x1c, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6f7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="020108090500000000000000fbdb85ade90d76637c6d19bf05033a930adf250300030000a0000002000009ac14140200000000000000003b8cb24851da5c7e873c9d9abe0eb9b2095c6b3d0ca5223c8a3cd84c9cebdf6dde6e11a710c3833eefcd4cb1a53c84698261060791fcaa296f7fd350c08435a5a7be0fc16ec653f2010dc2303c5c4b82af972f"], 0x28}}, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x22, 0x5, 0x0, 0x0, r8}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 2.193332053s ago: executing program 0 (id=530): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x87) r4 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r6, 0x541b, &(0x7f0000000100)) syz_io_uring_setup(0x5e2, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x0, 0x2, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) clock_gettime(0x0, &(0x7f0000007080)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006fc0)=[{{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000002800)=[{&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000000400)=""/224, 0xe0}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000500)=""/54, 0x36}, {&(0x7f0000000540)=""/168, 0xa8}, {&(0x7f0000002740)=""/137, 0x89}, {&(0x7f0000000640)=""/119, 0x77}], 0x9, &(0x7f0000002880)=""/205, 0xcd}, 0x2}, {{&(0x7f0000002980)=@nfc, 0x80, &(0x7f0000004d00)=[{&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/162, 0xa2}, {&(0x7f0000003ac0)=""/15, 0xf}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/199, 0xc7}, {&(0x7f0000004c00)=""/253, 0xfd}], 0x6, &(0x7f0000004d40)=""/98, 0x62}, 0x5}, {{&(0x7f0000004dc0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000005480)=[{&(0x7f0000004e40)=""/40, 0x28}, {&(0x7f0000004e80)=""/68, 0x44}, {&(0x7f0000004f00)=""/102, 0x66}, {&(0x7f0000004f80)=""/31, 0x1f}, {0x0}, {&(0x7f00000050c0)=""/129, 0x81}, {&(0x7f0000005180)=""/71, 0x47}, {&(0x7f0000005200)=""/70, 0x46}, {&(0x7f0000005380)=""/232, 0xe8}], 0x9, &(0x7f0000005500)=""/4096, 0x1000}, 0x701bc100}, {{&(0x7f0000006500)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000066c0)=[{&(0x7f0000006580)=""/228, 0xe4}, {&(0x7f0000006680)}], 0x2, &(0x7f0000006700)=""/186, 0xba}, 0xc}, {{0x0, 0x0, &(0x7f0000006a80)=[{&(0x7f00000067c0)=""/95, 0x5f}, {&(0x7f0000006840)=""/218, 0xda}, {&(0x7f0000006940)=""/175, 0xaf}, {&(0x7f0000006a00)=""/75, 0x4b}], 0x4, &(0x7f0000006ac0)=""/23, 0x17}, 0x5}, {{&(0x7f0000006b00)=@ieee802154, 0x80, &(0x7f0000006f40)=[{&(0x7f0000006b80)=""/238, 0xee}, {0x0}, {&(0x7f0000006d40)=""/188, 0xbc}, {&(0x7f0000006e00)=""/36, 0x24}, {&(0x7f0000006e40)=""/61, 0x3d}, {&(0x7f0000006e80)=""/192, 0xc0}], 0x6, &(0x7f0000006f80)}, 0x350}], 0x6, 0x40000002, &(0x7f00000070c0)={r8, r9+10000000}) recvfrom(r1, &(0x7f0000007100)=""/156, 0x9c, 0x2, &(0x7f00000071c0)=@phonet={0x23, 0x5, 0x2, 0x1}, 0x80) syz_io_uring_submit(r7, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r4, 0x381b, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)={0x7ff, 0x2, 0x0, 0x4000000000000}, 0x0, 0x0) 2.078787174s ago: executing program 3 (id=531): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x40008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000080) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x20000000000001ca, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xdb, &(0x7f0000000140)=""/186, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000400000000000000010000e761ff5e01000000000b0000000000000000002e00"], 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) mbind(&(0x7f000057e000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000000c0)=0x8, 0x6, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000000)) 1.501835127s ago: executing program 4 (id=513): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) (fail_nth: 7) 841.416398ms ago: executing program 3 (id=532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028008000240000000080500030000000000080001400000000d0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) close(r0) truncate(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x3) 841.204496ms ago: executing program 3 (id=533): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000ff07a030d3edac3a7c07f915a0a5480f6d87032b6f839d34e260e59ef721d98d503926f453c467f7e2bc0ecec07f98f0c9af7a5505120c0bca667c6d566d40796706ae247074380358e35ded8fc067e19d078eda3bbbb9346fbacf83841ce0e297fd45ccd4dbb2c6c6e93a19ed247cfd69dda3d76ce9f8ad65eca845f2e58300"/152], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0, 0x0, 0x1}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000150001030000000000000000"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x78, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x804) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') syz_io_uring_setup(0x6918, &(0x7f0000000680)={0x0, 0x3035, 0x0, 0xfffffffe, 0xffdffffc, 0x0, r4}, &(0x7f0000000380), &(0x7f0000000180)) lsm_list_modules(0x0, 0x0, 0x0) 839.144257ms ago: executing program 4 (id=534): r0 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) set_mempolicy(0x4003, &(0x7f00000015c0)=0xa, 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4008810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setfsuid(0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) syz_io_uring_setup(0x4406, 0x0, 0x0, &(0x7f0000000200)) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='aufs\x00', 0x3018004, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x2300) io_setup(0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 838.940206ms ago: executing program 1 (id=535): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setreuid(0xffffffffffffffff, 0xee00) ioctl$FITHAW(r0, 0xc0045878) 838.435528ms ago: executing program 0 (id=536): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xab3, 0x2d0142) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0xffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40004, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000065c0)=[{{&(0x7f00000002c0)=@alg, 0x80, &(0x7f0000000380)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000500)=""/97, 0x61}], 0x2, &(0x7f0000000580)=""/183, 0xb7}, 0x100}, {{&(0x7f0000000680)=@llc, 0x80, &(0x7f0000000700)=[{&(0x7f0000000480)=""/28, 0x1c}], 0x1}, 0xc0000000}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000000740)=""/148, 0x94}, {&(0x7f0000000800)=""/182, 0xb6}, {&(0x7f00000008c0)=""/80, 0x50}, {&(0x7f0000002980)=""/32, 0x20}, {&(0x7f00000029c0)=""/125, 0x7d}, {&(0x7f0000002a40)=""/177, 0xb1}, {&(0x7f0000002b00)=""/195, 0xc3}, {&(0x7f0000002c00)=""/133, 0x85}, {&(0x7f0000006680)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/248, 0xf8}], 0xa, &(0x7f0000003e40)=""/58, 0x3a}, 0x9}, {{&(0x7f0000003e80)=@un=@abs, 0x80, &(0x7f0000004400)=[{&(0x7f0000003f00)=""/195, 0xc3}, {&(0x7f0000004000)=""/184, 0xb8}, {&(0x7f00000040c0)=""/71, 0x47}, {&(0x7f0000004140)=""/141, 0x8d}, {&(0x7f0000004200)=""/166, 0xa6}, {&(0x7f00000042c0)=""/13, 0xd}, {&(0x7f0000004300)=""/208, 0xd0}], 0x7, &(0x7f0000004440)=""/4096, 0x1000}, 0x401}, {{0x0, 0x0, &(0x7f0000006540)=[{&(0x7f0000002d40)=""/107, 0x6b}, {&(0x7f0000002cc0)=""/107, 0x6b}, {&(0x7f0000005540)=""/4096, 0x1000}], 0x3, &(0x7f0000006580)=""/23, 0x17}, 0x2e}], 0x5, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') chown(&(0x7f0000000280)='./file0\x00', 0x0, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea8161169373d596c9c023654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16276d12321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b5401b1b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168ba9ac12103621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e0eb251909f02080080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d0516183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659def973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f57ad3d2634ea8c0388588192fd47d8e80351f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e208ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a500000000000008ba21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18699277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a279985cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r5, 0x104, 0x7, 0x0, &(0x7f0000000340)) 838.153171ms ago: executing program 1 (id=537): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x38}}, 0x0) fchdir(r1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256, 0x3, '\x00', @a}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa200, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) r3 = eventfd2(0x8, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="29d037e42e2ea9656945037520b4237a81679491491b000000000000", @ANYRESHEX=r3, @ANYRES8=r2, @ANYBLOB="a6e96bf8e53643e116d63c24a471f3adb00daf43aae110a2a27b83e6020a91f2f41c1a37b7652f60fcbd8900c1e6fbb2015163e079b2e974fefa9fad2bff314de06dd46690dbc77123640f69abecc17acc1611b0792ef5e9fd1e28c7498a5fe56e2ca0302d9c6e9174edd54c4768ee5d359832c7a9c7f524fe89eda690c1f8327b20d2b289c894828995a271cb19ec5b4cd0e600f299d15be66bd33e21d6169b5d8ab763c9eaa5ef5b68345a", @ANYRES64=r0, @ANYRESDEC=r0], 0x48) r5 = openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x6100, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000f, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_nanosleep(0xfffffff4, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="1802000000000000000000000300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000da000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500"/72], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000340)={0x2, 0xe6f74002, 0x1, r8}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r11 = dup(r10) bind$bt_l2cap(r11, &(0x7f0000000080), 0xe) listen(r11, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000240)=ANY=[], 0x0) accept4$vsock_stream(r11, 0x0, 0x58, 0x0) 390.733063ms ago: executing program 3 (id=538): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f000000a040)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/70, 0x46}, {&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000580)=""/218, 0xda}, {0x0}, {&(0x7f0000000180)=""/111, 0x6f}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x7, &(0x7f0000002a40)=""/4096, 0x1000}}, {{&(0x7f00000004c0)=@l2, 0x80, &(0x7f0000004d00)=[{&(0x7f0000000740)=""/243, 0xf3}, {&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f0000000400)=""/8, 0x8}, {&(0x7f0000000840)=""/252, 0xfc}, {&(0x7f0000004a40)=""/199, 0xc7}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f0000004b40)=""/244, 0xf4}, {&(0x7f0000004c40)=""/155, 0x9b}], 0x8, &(0x7f0000004d40)=""/147, 0x93}, 0x2}, {{&(0x7f0000004e00)=@can, 0x80, &(0x7f0000006080)=[{&(0x7f0000004e80)=""/201, 0xc9}, {&(0x7f0000004f80)=""/4096, 0x1000}, {&(0x7f0000005f80)=""/19, 0x13}, {&(0x7f0000005fc0)=""/148, 0x94}], 0x4, &(0x7f00000060c0)=""/30, 0x1e}, 0x6}, {{0x0, 0x0, &(0x7f0000007300)=[{&(0x7f0000006100)=""/187, 0xbb}, {&(0x7f00000061c0)=""/120, 0x78}, {&(0x7f0000006240)=""/4096, 0x1000}, {&(0x7f0000007240)=""/15, 0xf}, {&(0x7f0000007280)=""/107, 0x6b}], 0x5}, 0xa}, {{&(0x7f0000007340)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000007880)=[{0x0}, {&(0x7f00000074c0)=""/173, 0xad}, {&(0x7f0000007580)=""/222, 0xde}, {&(0x7f0000007680)=""/65, 0x41}, {&(0x7f0000007700)=""/238, 0xee}, {&(0x7f0000007800)=""/94, 0x5e}], 0x6, &(0x7f00000078c0)=""/204, 0xcc}, 0x4}, {{&(0x7f00000079c0)=@hci, 0x80, &(0x7f0000009c40)=[{&(0x7f0000007a40)=""/191, 0xbf}, {&(0x7f0000007b00)=""/81, 0x51}, {&(0x7f0000007b80)=""/4096, 0x1000}, {&(0x7f0000008b80)=""/4096, 0x1000}, {0x0}], 0x5, &(0x7f0000009c80)=""/94, 0x5e}}, {{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f0000009d00)=""/77, 0x4d}, {&(0x7f0000009d80)=""/235, 0xeb}, {&(0x7f0000009e80)=""/72, 0x48}], 0x3, &(0x7f0000009f40)=""/200, 0xc8}, 0x200000}], 0x7, 0x12000, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000740)={0x2, 0x0, @ioapic={0x106000, 0x3, 0x1, 0xfffffff5, 0x0, [{0x9, 0x9, 0x40, '\x00', 0x4}, {0x5, 0x2, 0x7, '\x00', 0xd9}, {0x3, 0x2, 0x4}, {0x40, 0x1, 0x6, '\x00', 0x7}, {0x9, 0xff, 0x6, '\x00', 0x1}, {0x4, 0x5, 0x5, '\x00', 0x9}, {0x3, 0x6, 0x8, '\x00', 0xc}, {0x5, 0x8, 0x5, '\x00', 0x8}, {0xa, 0x80, 0x7, '\x00', 0x4}, {0x4, 0x9}, {0x1, 0x9, 0x5, '\x00', 0x7}, {0xfa, 0x4, 0x80, '\x00', 0x80}, {0x1, 0xe, 0x3}, {0x0, 0x8, 0xac, '\x00', 0x3}, {0x2, 0xf8, 0xf, '\x00', 0x4}, {0xf, 0x7, 0x0, '\x00', 0x5a}, {0x6, 0x8, 0xa, '\x00', 0x3}, {0x9, 0x8, 0x5, '\x00', 0x4}, {0x5b, 0x8, 0x0, '\x00', 0xd}, {0x1, 0x81, 0x4, '\x00', 0xc}, {0x4, 0xa8, 0xd, '\x00', 0x5}, {0xb, 0xa, 0x3, '\x00', 0x7}, {0x9, 0x7, 0x4e, '\x00', 0x6b}, {0x2a, 0xcf, 0x8, '\x00', 0xb}]}}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) 328.770032ms ago: executing program 4 (id=539): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0xa1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x6000, 0x6, 0x4, 0x0, "cd0d05a286a8d9c7b438dd4350274fc803519e3d7d156d943d4034728428556b2b5a97d6203497d63e98ec46bc3116e3930f9b02cdc0f982e0d499db318cb04c", "e39fb4a6d3333aba8405d70d523a5a783847b8bc04869aad25d757c86a08e932", [0xd026, 0x52]}) ioctl$LOOP_CHANGE_FD(r1, 0x4c09, r0) request_key(0x0, &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='-\x00', 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioperm(0x0, 0x9, 0x5) r2 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x100002, &(0x7f00000001c0)={0x82, 0xff, 0xffffff09}) 248.522606ms ago: executing program 3 (id=540): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000030e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 248.171164ms ago: executing program 3 (id=541): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x2) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000300)=ANY=[], 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x28011, r7, 0xfb231000) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000380)=@req={0x3fc, 0x4000, 0x0, 0x35cf112f}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40), 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f0000000340), 0x11000) vmsplice(r1, &(0x7f00000007c0)=[{&(0x7f0000000400)="fef17e9ba6508c322d0200b6ef3c54a9087c8c0e330a36eccdfbe551c9efbf7ab1c141de1a11e6cad2758c94d5cd0f00393b3c36e8e2f5870e9c348e8c6fede972ce47c4897cceddb8298837631eeb60e49d9dcdc60fc7e12f53775f20da5774adc6bac99a8420649486e857e39d48ab03d240fe22b4fddcdec731e7af1a4834f929e9bd1af240664cfb85d5fd57fe978a8f3bce9a30c8e045643c3e0b546bc39814e4691310fb2bd3c186025d6d4fcb4fbd12416445d3", 0xb7}, {&(0x7f00000004c0)="6ff0d1f5daacd46463c147e89b571a45a9794af71ea7d22c17a0d799c62c307ab8893426847985557a5fa260ef14e955b3e89fd410d277787d5b4c380751954b419b3c11a75fc5f24a449fa823704bc48fabe522fc8ffde55e4e75bc6d141c4218d73ae37acf92177659d42d5080a2df4a3030d917e7ba972ac26b836fe82adf2168a10430b698a60de554a11f5bbcb1ce6772ed0792c438293ed538655fe152ea8dfc59a485564345b22c2d184bc64a275ce282a64caf555a0228ba355cb2447f62bd13e9d6905962cc541f1c25bb63928930310eb836aed42357524f", 0xdd}, {&(0x7f00000005c0)="de1ac2f14ef368831a83a7f327ae652c012142baede1b6e86c5f5262f5aaedc9177ada8e63ba566ce000710d45504d2bc23e42ea2fe291085a46be4dd9dc9e0d537cf1259ae388f881e7f6d1da6f1fbef1dbb10846f346dce039f78f2c827b60961ecf5735d2eba902a2ec6484f99454dd504e285ba34e9a9a5c99c753b316b7984c6c7d370c73384e4584e499bbcf1120839e8e3c358dd4e60f87abbd3e4d8b3f0f82d25fd415fc94b9b509e6d49cf47dad8ca9cf29846cbd", 0xb9}, {&(0x7f00000000c0)="7eb26f815063c560a5068342d3d08f626b9361e108d9ca5103ad02e35178bd6319e647ac9cf04ba2fc570ef13374130e8507d13fd85530cd14", 0x39}, {&(0x7f0000000680)="8f4bae49a72bc2f0f11ff81e1a81877e725ea0262f075c41f14238ad5132910651e1926fd55602dc8c21fb9a2f9ba870b206e472c68930d521fb172339678d966a03b56ee924187f1371598a1f290c7bc57438feb426d824e251d3f0bc2573c3c71c17beb120d35cfcfc301ccbde072b45f44af2baff440162f48c1e238490fdea67e7bf3b18d70345af4628d52f08b15be244351e6ef9bf31e2448a2409388bd826df4b10ca35879a55aa2307c28b0834896f77c0a7940074dee493a4d74c9358e0f1bc5a7c20dd8fbabe33", 0xcc}, {&(0x7f0000000340)="cfb05df15baac977ff2d3685c1f0a2ebe291488cfd7687d679b942", 0x1b}, {&(0x7f0000000780)="96c5793c26a50de3bcc591ddcdc96389b7ee38b49ff782f7b0e7f3a77a596084", 0x20}], 0x7, 0x0) 239.777021ms ago: executing program 1 (id=542): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x40008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000080) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x20000000000001ca, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xdb, &(0x7f0000000140)=""/186, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000400000000000000010000e761ff5e01000000000b0000000000000000002e00"], 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) mbind(&(0x7f000057e000/0x2000)=nil, 0x2000, 0x8000, &(0x7f00000000c0)=0x8, 0x6, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000000)) 598.414µs ago: executing program 0 (id=543): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x8, 0x0, 0x32314d48, 0x2, 0x4, [{}, {0x0, 0x3e3}, {0x0, 0x400000}, {0xfffffffd}, {0x0, 0x3}, {0x0, 0x1000000}], 0x0, 0x0, 0x4}}) setitimer(0x2, &(0x7f0000000040)={{}, {0x0, 0x2710}}, 0x0) getitimer(0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @remote}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xf6}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0x6}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000010004b0400000000000000007a000000", @ANYRES32=r2, @ANYBLOB="00000000000000000a000100aaaaaaaaaa000000e2f24b9d8bad991709"], 0x2c}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r9, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r10}, 0x10) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@ifindex=r2, r0, 0x11, 0x0, 0x0, @void, @value=r12}, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x44014}, 0x400c1) 0s ago: executing program 4 (id=544): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x14000012) recvmsg$qrtr(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f00000005c0)=""/130, 0x82}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3}, 0x1c, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed85"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6f7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="020108090500000000000000fbdb85ade90d76637c6d19bf05033a930adf250300030000a0000002000009ac14140200000000000000003b8cb24851da5c7e873c9d9abe0eb9b2095c6b3d0ca5223c8a3cd84c9cebdf6dde6e11a710c3833eefcd4cb1a53c84698261060791fcaa296f7fd350c08435a5a7be0fc16ec653f2010dc2303c5c4b82af972f"], 0x28}}, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x22, 0x5, 0x0, 0x0, r8}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:42497' (ED25519) to the list of known hosts. [ 40.978731][ T5931] cgroup: Unknown subsys name 'net' [ 41.102910][ T5931] cgroup: Unknown subsys name 'cpuset' [ 41.106024][ T5931] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.856795][ T5931] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.709304][ T5947] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 43.724644][ T5953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 43.727444][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 43.729989][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 43.732006][ T5946] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 43.732798][ T5946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 43.734500][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 43.736267][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 43.738641][ T5954] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 43.740892][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 43.742909][ T5954] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 43.745660][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 43.747250][ T5954] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 43.747298][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 43.748189][ T5953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 43.748434][ T5953] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 43.748542][ T5953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 43.749244][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 43.750104][ T64] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 43.750408][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 43.751857][ T5954] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 43.754569][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 43.769762][ T64] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 43.772042][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 43.894897][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 43.939410][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 43.971864][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 43.976382][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 44.046740][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.048811][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.051273][ T5951] bridge_slave_0: entered allmulticast mode [ 44.054182][ T5951] bridge_slave_0: entered promiscuous mode [ 44.058602][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.062155][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.064877][ T5951] bridge_slave_1: entered allmulticast mode [ 44.067885][ T5951] bridge_slave_1: entered promiscuous mode [ 44.142290][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.144395][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.146415][ T5948] bridge_slave_0: entered allmulticast mode [ 44.148561][ T5948] bridge_slave_0: entered promiscuous mode [ 44.171963][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.173989][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.176035][ T5943] bridge_slave_0: entered allmulticast mode [ 44.178169][ T5943] bridge_slave_0: entered promiscuous mode [ 44.181438][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.184170][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.186275][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.188381][ T5948] bridge_slave_1: entered allmulticast mode [ 44.191301][ T5948] bridge_slave_1: entered promiscuous mode [ 44.209586][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.211877][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.214202][ T5942] bridge_slave_0: entered allmulticast mode [ 44.216347][ T5942] bridge_slave_0: entered promiscuous mode [ 44.218747][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.221417][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.223891][ T5943] bridge_slave_1: entered allmulticast mode [ 44.226063][ T5943] bridge_slave_1: entered promiscuous mode [ 44.229036][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.247739][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.249811][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.252162][ T5942] bridge_slave_1: entered allmulticast mode [ 44.254296][ T5942] bridge_slave_1: entered promiscuous mode [ 44.279267][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.306624][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.310976][ T5951] team0: Port device team_slave_0 added [ 44.315344][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.319035][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.323407][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.327662][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.340938][ T5951] team0: Port device team_slave_1 added [ 44.413641][ T5942] team0: Port device team_slave_0 added [ 44.417381][ T5943] team0: Port device team_slave_0 added [ 44.419692][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.421805][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.429163][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.434424][ T5948] team0: Port device team_slave_0 added [ 44.436927][ T5942] team0: Port device team_slave_1 added [ 44.439487][ T5943] team0: Port device team_slave_1 added [ 44.441641][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.443767][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.451259][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.455120][ T5948] team0: Port device team_slave_1 added [ 44.498674][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.502476][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.509869][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.515098][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.517120][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.524453][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.528230][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.530227][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.537462][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.541390][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.543442][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.550841][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.565745][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.567770][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.575180][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.581332][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.583394][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.590914][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.632389][ T5951] hsr_slave_0: entered promiscuous mode [ 44.634739][ T5951] hsr_slave_1: entered promiscuous mode [ 44.677676][ T5943] hsr_slave_0: entered promiscuous mode [ 44.680562][ T5943] hsr_slave_1: entered promiscuous mode [ 44.683206][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.686402][ T5943] Cannot create hsr debugfs directory [ 44.690141][ T5948] hsr_slave_0: entered promiscuous mode [ 44.692438][ T5948] hsr_slave_1: entered promiscuous mode [ 44.694841][ T5948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.697886][ T5948] Cannot create hsr debugfs directory [ 44.719783][ T5942] hsr_slave_0: entered promiscuous mode [ 44.722791][ T5942] hsr_slave_1: entered promiscuous mode [ 44.725357][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.728385][ T5942] Cannot create hsr debugfs directory [ 44.920632][ T5951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 44.924959][ T5951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 44.929507][ T5951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 44.934002][ T5951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 44.950702][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.956151][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.965170][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.972817][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.990090][ T5942] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 44.993740][ T5942] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.001253][ T5942] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.004884][ T5942] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.023040][ T5948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.026797][ T5948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.030948][ T5948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.034980][ T5948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.050133][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.075234][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.088625][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.091378][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.097878][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.100558][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.111837][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.127676][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.134091][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.136146][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.146662][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.150124][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.152214][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.159458][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.165977][ T5951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.181552][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.186649][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.193717][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.195912][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.202402][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.204475][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.213186][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.215244][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.218000][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.220227][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.253413][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.277388][ T5951] veth0_vlan: entered promiscuous mode [ 45.281433][ T5951] veth1_vlan: entered promiscuous mode [ 45.295265][ T5951] veth0_macvtap: entered promiscuous mode [ 45.299856][ T5951] veth1_macvtap: entered promiscuous mode [ 45.312423][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.318474][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.325029][ T5951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.328341][ T5951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.331911][ T5951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.334429][ T5951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.342896][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.347762][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.366834][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.404145][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.409171][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.416488][ T5942] veth0_vlan: entered promiscuous mode [ 45.437618][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.439921][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.440008][ T5948] veth0_vlan: entered promiscuous mode [ 45.445723][ T5943] veth0_vlan: entered promiscuous mode [ 45.450438][ T5942] veth1_vlan: entered promiscuous mode [ 45.458662][ T5948] veth1_vlan: entered promiscuous mode [ 45.461852][ T5943] veth1_vlan: entered promiscuous mode [ 45.476117][ T5951] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 45.486828][ T5942] veth0_macvtap: entered promiscuous mode [ 45.490146][ T5942] veth1_macvtap: entered promiscuous mode [ 45.494512][ T5948] veth0_macvtap: entered promiscuous mode [ 45.503580][ T5943] veth0_macvtap: entered promiscuous mode [ 45.506313][ T5948] veth1_macvtap: entered promiscuous mode [ 45.511159][ T5943] veth1_macvtap: entered promiscuous mode [ 45.514499][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.517592][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.521918][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.527894][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.531313][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.534597][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.538270][ T5942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.540943][ T5942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.543449][ T5942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.545961][ T5942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.551496][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.554647][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.557561][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.561223][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.564763][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.569725][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.569776][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 45.573088][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.573110][ T5948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.573118][ T5948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.573640][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.589815][ T5948] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.592773][ T5948] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.595403][ T5948] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.598049][ T5948] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.601809][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.604796][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.607547][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.611403][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.614197][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.617202][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.621075][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.625770][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.628813][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.631691][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.634623][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.637393][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.641074][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.645345][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.649224][ T5943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.652354][ T5943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.655531][ T5943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.658148][ T5943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.695899][ T6002] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 45.697874][ T6002] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 45.702394][ T6002] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 45.705127][ T6002] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 45.706904][ T6002] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 45.708985][ T6002] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 45.714291][ T6002] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 45.716041][ T6002] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 45.718110][ T6002] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 45.720115][ T6002] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 45.722203][ T6002] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 45.724347][ T6002] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 45.749483][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.750117][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.754549][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.755483][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.762492][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.764985][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.781943][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.784468][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.794235][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.796777][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.805489][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.807780][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.841126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 45.843549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 45.984183][ T6018] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2'. [ 45.986818][ T6018] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2'. [ 45.992803][ T6018] netlink: 'syz.1.2': attribute type 6 has an invalid length. [ 45.996641][ T6018] netlink: 'syz.1.2': attribute type 5 has an invalid length. [ 45.999406][ T6018] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2'. [ 46.016623][ T6018] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 46.275031][ T6021] bridge_slave_0: left allmulticast mode [ 46.277070][ T6021] bridge_slave_0: left promiscuous mode [ 46.280630][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.293801][ T6021] bridge_slave_1: left allmulticast mode [ 46.295550][ T6021] bridge_slave_1: left promiscuous mode [ 46.297469][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.348563][ T6021] bond0: (slave bond_slave_0): Releasing backup interface [ 46.396909][ T6021] bond0: (slave bond_slave_1): Releasing backup interface [ 46.426247][ T6021] team0: Port device team_slave_0 removed [ 46.430781][ T6021] team0: Port device team_slave_1 removed [ 46.432848][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.435130][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.439805][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.442208][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.576418][ T6026] (syz.1.6,6026,3):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 46.579529][ T6026] (syz.1.6,6026,3):ocfs2_fill_super:1178 ERROR: status = -22 [ 46.798994][ T6032] bridge_slave_0: left allmulticast mode [ 46.801199][ T6032] bridge_slave_0: left promiscuous mode [ 46.803287][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.819954][ T6032] bridge_slave_1: left allmulticast mode [ 46.822903][ T6032] bridge_slave_1: left promiscuous mode [ 46.825909][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.865550][ T6032] bond0: (slave bond_slave_0): Releasing backup interface [ 46.897109][ T6032] bond0: (slave bond_slave_1): Releasing backup interface [ 47.003926][ T6032] team0: Port device team_slave_0 removed [ 47.017009][ T6032] team0: Port device team_slave_1 removed [ 47.017290][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.017311][ T6032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.018174][ T6032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.018187][ T6032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.074090][ T6037] bridge_slave_0: left allmulticast mode [ 47.074170][ T6037] bridge_slave_0: left promiscuous mode [ 47.074842][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.082858][ T6037] bridge_slave_1: left allmulticast mode [ 47.082872][ T6037] bridge_slave_1: left promiscuous mode [ 47.082929][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.089275][ T6037] bond0: (slave bond_slave_0): Releasing backup interface [ 47.096432][ T6037] bond0: (slave bond_slave_1): Releasing backup interface [ 47.115333][ T6037] team0: Port device team_slave_0 removed [ 47.128481][ T6037] team0: Port device team_slave_1 removed [ 47.128784][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.128806][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.131375][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.131465][ T6037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.592055][ T6043] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 47.681307][ T64] Bluetooth: hci0: command 0x041b tx timeout [ 47.760992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.770570][ T64] Bluetooth: hci3: command 0x041b tx timeout [ 47.776408][ T5954] Bluetooth: hci2: command 0x041b tx timeout [ 47.778428][ T5954] Bluetooth: hci1: command 0x041b tx timeout [ 48.557605][ T6082] ======================================================= [ 48.557605][ T6082] WARNING: The mand mount option has been deprecated and [ 48.557605][ T6082] and is ignored by this kernel. Remove the mand [ 48.557605][ T6082] option from the mount to silence this warning. [ 48.557605][ T6082] ======================================================= [ 48.682591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.989825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.410319][ T6096] bridge_slave_0: left allmulticast mode [ 49.417902][ T6096] bridge_slave_0: left promiscuous mode [ 49.423703][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.429695][ T6096] bridge_slave_1: left allmulticast mode [ 49.432732][ T6096] bridge_slave_1: left promiscuous mode [ 49.434835][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.437914][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 49.445405][ T6096] bond0: (slave bond_slave_0): Releasing backup interface [ 49.453955][ T6096] bond0: (slave bond_slave_1): Releasing backup interface [ 49.469859][ T6096] team0: Port device team_slave_0 removed [ 49.478275][ T6096] team0: Port device team_slave_1 removed [ 49.481044][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.483232][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.487737][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.490233][ T6096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.571270][ T6095] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 49.573119][ T6095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 49.574917][ T6095] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 49.576741][ T6095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 49.706604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.710761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.753350][ T39] audit: type=1804 audit(1737149140.110:2): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.19" name="/newroot/6/bus/bus" dev="overlay" ino=76 res=1 errno=0 [ 49.764410][ T39] audit: type=1804 audit(1737149140.120:3): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.19" name="/newroot/6/bus/bus" dev="overlay" ino=76 res=1 errno=0 [ 49.767861][ T6101] evm: overlay not supported [ 49.770340][ T39] audit: type=1800 audit(1737149140.120:4): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19" name="bus" dev="overlay" ino=76 res=0 errno=0 [ 50.116217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.218576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.423399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.762753][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 50.836840][ T6113] netlink: 'syz.1.21': attribute type 39 has an invalid length. [ 50.926003][ T6118] block device autoloading is deprecated and will be removed. [ 51.600723][ T64] Bluetooth: hci3: command 0x041b tx timeout [ 51.606777][ T5949] Bluetooth: hci1: command 0x041b tx timeout [ 51.611126][ T5299] Bluetooth: hci2: command 0x041b tx timeout [ 51.611293][ T64] Bluetooth: hci0: command 0x041b tx timeout [ 52.445249][ T6134] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 52.506898][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 53.257611][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 53.376622][ T6138] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 53.379054][ T6138] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.381530][ T6138] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.383447][ T6138] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.671544][ T6147] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 53.674210][ T6147] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 54.136555][ T6157] netlink: 'syz.3.34': attribute type 11 has an invalid length. [ 55.060030][ T6168] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.465497][ T5949] Bluetooth: hci2: command 0x041b tx timeout [ 55.465600][ T5954] Bluetooth: hci0: command 0x041b tx timeout [ 55.468950][ T5947] Bluetooth: hci3: command 0x041b tx timeout [ 55.471797][ T5299] Bluetooth: hci1: command 0x041b tx timeout [ 55.544885][ T6173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.38'. [ 56.123495][ T6184] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 56.126941][ T6184] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 56.711955][ T6197] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.712710][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 56.714292][ T6197] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.718462][ T6197] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.719355][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 56.724489][ T6197] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.803272][ T6201] ceph: No mds server is up or the cluster is laggy [ 57.233483][ T6210] binder_alloc: 6209: binder_alloc_buf, no vma [ 58.697139][ T6230] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 58.699865][ T6230] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 58.730582][ T64] Bluetooth: hci0: command 0x041b tx timeout [ 58.732481][ T5947] Bluetooth: hci1: command 0x041b tx timeout [ 58.734350][ T5299] Bluetooth: hci2: command 0x041b tx timeout [ 58.800649][ T5299] Bluetooth: hci3: command 0x041b tx timeout [ 58.815038][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'. [ 58.942382][ T6236] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.945493][ T6236] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.947507][ T6236] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.949442][ T6236] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.033707][ T6241] Zero length message leads to an empty skb [ 59.254400][ T30] libceph: connect (1)[c::]:6789 error -101 [ 59.256495][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 59.260110][ T30] libceph: connect (1)[c::]:6789 error -101 [ 59.264834][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 59.361566][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 59.504305][ T6253] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 59.506232][ T6253] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 59.508745][ T6253] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 59.510685][ T6253] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 59.522686][ T30] libceph: connect (1)[c::]:6789 error -101 [ 59.524529][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 59.823732][ T6241] ceph: No mds server is up or the cluster is laggy [ 60.904912][ T6276] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 60.907504][ T6276] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 61.440542][ T5947] Bluetooth: hci0: command 0x041b tx timeout [ 61.520713][ T5947] Bluetooth: hci3: command 0x041b tx timeout [ 61.520745][ T5299] Bluetooth: hci2: command 0x041b tx timeout [ 61.522501][ T5947] Bluetooth: hci1: command 0x041b tx timeout [ 61.943831][ T6282] block nbd2: shutting down sockets [ 62.256061][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 62.274824][ T6305] netlink: 'syz.1.68': attribute type 10 has an invalid length. [ 62.379592][ T6305] netlink: 'syz.1.68': attribute type 10 has an invalid length. [ 62.385434][ T6305] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 62.388241][ T6300] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 62.390100][ T6300] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.397328][ T6300] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 62.399413][ T6300] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 62.749929][ T6311] syz.0.71 uses obsolete (PF_INET,SOCK_PACKET) [ 63.511463][ T5983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 64.038819][ T6328] bond1: entered promiscuous mode [ 64.040322][ T6328] bond1: entered allmulticast mode [ 64.046281][ T6328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.159253][ T6328] bond1 (unregistering): Released all slaves [ 64.184472][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.187003][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.410617][ T64] Bluetooth: hci3: command 0x041b tx timeout [ 64.410673][ T64] Bluetooth: hci2: command 0x041b tx timeout [ 64.410692][ T64] Bluetooth: hci1: command 0x041b tx timeout [ 64.410709][ T64] Bluetooth: hci0: command 0x041b tx timeout [ 65.624436][ T6363] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 65.627027][ T6363] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 66.372685][ T6388] binder: 6387:6388 ioctl c0306201 20000580 returned -14 [ 66.491666][ T5299] Bluetooth: hci3: command 0x041b tx timeout [ 66.651162][ T6391] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 66.653060][ T6391] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.654887][ T6391] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.656780][ T6391] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 68.640588][ T5947] Bluetooth: hci0: command 0x041b tx timeout [ 68.720594][ T5954] Bluetooth: hci1: command 0x041b tx timeout [ 68.722479][ T64] Bluetooth: hci2: command 0x041b tx timeout [ 68.724559][ T5947] Bluetooth: hci3: command 0x041b tx timeout [ 70.516428][ T6475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.98'. [ 70.523877][ T6475] nvme_fabrics: unknown parameter or missing value 'À' in ctrl creation request [ 70.540426][ T6472] loop6: detected capacity change from 0 to 524287999 [ 70.544630][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.547292][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.549850][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.552267][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.554467][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.557172][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.561629][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.564338][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.566740][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.569432][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.572233][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.575607][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.578844][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.581509][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.583929][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.586580][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.588882][ T6472] ldm_validate_partition_table(): Disk read failed. [ 70.591995][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.594641][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.597510][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 70.600157][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 70.604999][ T6472] Dev loop6: unable to read RDB block 0 [ 70.607631][ T6472] loop6: unable to read partition table [ 70.609409][ T6472] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 70.619464][ T5358] ldm_validate_partition_table(): Disk read failed. [ 70.622039][ T5358] Dev loop6: unable to read RDB block 0 [ 70.625309][ T5358] loop6: unable to read partition table [ 70.683569][ T6481] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 70.810575][ T5299] Bluetooth: hci3: command 0x041b tx timeout [ 70.834088][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.836548][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.236120][ T6500] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 71.238828][ T6500] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 71.835291][ T6507] bond0: (slave netdevsim0): Releasing backup interface [ 72.695335][ T6509] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 72.699487][ T6509] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 72.703925][ T6509] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 72.708539][ T6509] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 72.795148][ T6524] netlink: 'syz.0.109': attribute type 5 has an invalid length. [ 73.327380][ T6525] can: request_module (can-proto-3) failed. [ 73.372301][ T6534] C: renamed from team_slave_0 [ 73.374927][ T6534] netlink: 164 bytes leftover after parsing attributes in process `syz.1.110'. [ 73.383420][ T6534] input: syz1 as /devices/virtual/input/input8 [ 73.494214][ T6539] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 74.157554][ T6549] netlink: 'syz.0.114': attribute type 11 has an invalid length. [ 74.490589][ T5299] Bluetooth: hci0: command 0x041b tx timeout [ 74.720678][ T5299] Bluetooth: hci3: command 0x041b tx timeout [ 74.722492][ T5299] Bluetooth: hci2: command 0x041b tx timeout [ 74.724242][ T5299] Bluetooth: hci1: command 0x041b tx timeout [ 75.348117][ T6563] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.350068][ T6563] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.353912][ T6563] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.356010][ T6563] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.954973][ T56] cfg80211: failed to load regulatory.db [ 76.351996][ T6582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.123'. [ 76.404964][ T6582] nvme_fabrics: unknown parameter or missing value 'À' in ctrl creation request [ 77.360670][ T5299] Bluetooth: hci3: command 0x041b tx timeout [ 77.360720][ T5954] Bluetooth: hci1: command 0x041b tx timeout [ 77.360748][ T5954] Bluetooth: hci0: command 0x041b tx timeout [ 77.367262][ T64] Bluetooth: hci2: command 0x041b tx timeout [ 77.582429][ T6597] (syz.3.127,6597,3):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 77.585894][ T6597] (syz.3.127,6597,3):ocfs2_fill_super:1178 ERROR: status = -22 [ 79.447253][ T5949] Bluetooth: hci3: command 0x041b tx timeout [ 80.434793][ T6652] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 81.623058][ T6670] overlayfs: failed to resolve './bus': -2 [ 83.092124][ T6694] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.094126][ T6694] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.096300][ T6694] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 83.099793][ T6694] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.219222][ T6702] devpts: called with bogus options [ 83.755848][ T39] audit: type=1326 audit(1737149174.110:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 83.756631][ T6710] FAULT_INJECTION: forcing a failure. [ 83.756631][ T6710] name failslab, interval 1, probability 0, space 0, times 1 [ 83.765402][ T6710] CPU: 3 UID: 0 PID: 6710 Comm: syz.2.158 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 83.765468][ T39] audit: type=1326 audit(1737149174.110:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 83.768378][ T6710] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.777037][ T6710] Call Trace: [ 83.778416][ T6710] [ 83.779259][ T6710] dump_stack_lvl+0x16c/0x1f0 [ 83.780620][ T6710] should_fail_ex+0x497/0x5b0 [ 83.782038][ T6710] should_failslab+0xc2/0x120 [ 83.783411][ T6710] __kmalloc_noprof+0xce/0x4f0 [ 83.784797][ T6710] ? aa_label_asxprint+0x75/0x140 [ 83.786246][ T6710] aa_label_asxprint+0x75/0x140 [ 83.787670][ T6710] apparmor_label_to_secctx+0x9d/0x160 [ 83.789230][ T6710] security_lsmprop_to_secctx+0x9e/0x290 [ 83.790829][ T6710] audit_log_task_context+0x155/0x1d0 [ 83.792382][ T6710] ? __pfx_audit_log_task_context+0x10/0x10 [ 83.794090][ T6710] ? __pfx_audit_log_format+0x10/0x10 [ 83.795632][ T6710] ? from_kuid+0x89/0xd0 [ 83.796860][ T6710] ? __pfx_from_kuid+0x10/0x10 [ 83.798236][ T6710] ? __pfx_audit_log_start+0x10/0x10 [ 83.799761][ T6710] audit_log_task+0x1c3/0x330 [ 83.801105][ T6710] ? __pfx_audit_log_task+0x10/0x10 [ 83.802591][ T6710] ? migrate_enable+0x1ef/0x260 [ 83.803974][ T6710] ? __pfx_migrate_enable+0x10/0x10 [ 83.804505][ T39] audit: type=1326 audit(1737149174.110:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 83.805450][ T6710] audit_seccomp+0x7a/0x280 [ 83.805468][ T6710] __seccomp_filter+0x816/0xf40 [ 83.812778][ T39] audit: type=1326 audit(1737149174.110:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 83.813108][ T6710] ? __pfx___seccomp_filter+0x10/0x10 [ 83.813129][ T6710] ? fput+0x67/0x440 [ 83.814655][ T39] audit: type=1326 audit(1737149174.110:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 83.820344][ T6710] ? ksys_write+0x1ba/0x250 [ 83.820362][ T6710] __secure_computing+0x26c/0x3f0 [ 83.820377][ T6710] syscall_trace_enter+0x8b/0x260 [ 83.820389][ T6710] __do_fast_syscall_32+0xc2/0x120 [ 83.820405][ T6710] do_fast_syscall_32+0x32/0x80 [ 83.820418][ T6710] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 83.820435][ T6710] RIP: 0023:0xf7fe0579 [ 83.820445][ T6710] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 83.820455][ T6710] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 0000000000000109 [ 83.820467][ T6710] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000300 [ 83.820473][ T6710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.820479][ T6710] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 83.820486][ T6710] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 83.820492][ T6710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 83.820504][ T6710] [ 83.826276][ T6710] audit: error in audit_log_task_context [ 83.862580][ T39] audit: type=1326 audit(1737149174.110:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6709 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 83.872543][ T39] audit: type=1326 audit(1737149174.220:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 83.878911][ T39] audit: type=1326 audit(1737149174.220:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 83.888302][ T39] audit: type=1326 audit(1737149174.220:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.2.158" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fe0579 code=0x7ffc0000 [ 84.078146][ T6724] netlink: 44 bytes leftover after parsing attributes in process `syz.2.159'. [ 84.606675][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 84.832116][ T6740] warning: `syz.2.164' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.040635][ T5949] Bluetooth: hci0: command 0x041b tx timeout [ 85.130668][ T5949] Bluetooth: hci3: command 0x041b tx timeout [ 85.133224][ T5949] Bluetooth: hci2: command 0x041b tx timeout [ 85.135692][ T5949] Bluetooth: hci1: command 0x041b tx timeout [ 85.927520][ T6775] loop6: detected capacity change from 0 to 524287999 [ 85.933129][ C3] blk_print_req_error: 25 callbacks suppressed [ 85.933146][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.939248][ C3] buffer_io_error: 24 callbacks suppressed [ 85.939260][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.945845][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.949163][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.952557][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.956230][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.959583][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.962758][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.965266][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.968923][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.972416][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.976075][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.979597][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.982330][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.984855][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.991434][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.994465][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 85.997107][ T6775] ldm_validate_partition_table(): Disk read failed. [ 86.000013][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.003688][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.007179][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 86.017816][ T6775] Dev loop6: unable to read RDB block 0 [ 86.022296][ T6775] loop6: unable to read partition table [ 86.024762][ T6775] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 86.033013][ T5358] ldm_validate_partition_table(): Disk read failed. [ 86.036294][ T5358] Dev loop6: unable to read RDB block 0 [ 86.039271][ T5358] loop6: unable to read partition table [ 86.514805][ T6787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.540842][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 86.573560][ T6798] loop6: detected capacity change from 0 to 524287999 [ 86.576261][ T6798] ldm_validate_partition_table(): Disk read failed. [ 86.578443][ T6798] Dev loop6: unable to read RDB block 0 [ 86.580395][ T6798] loop6: unable to read partition table [ 86.583411][ T6798] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 86.813603][ T6809] FAULT_INJECTION: forcing a failure. [ 86.813603][ T6809] name failslab, interval 1, probability 0, space 0, times 0 [ 86.817349][ T6809] CPU: 2 UID: 0 PID: 6809 Comm: syz.3.187 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 86.820471][ T6809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.823492][ T6809] Call Trace: [ 86.824449][ T6809] [ 86.825303][ T6809] dump_stack_lvl+0x16c/0x1f0 [ 86.826662][ T6809] should_fail_ex+0x497/0x5b0 [ 86.828143][ T6809] ? fs_reclaim_acquire+0xae/0x150 [ 86.829627][ T6809] should_failslab+0xc2/0x120 [ 86.830991][ T6809] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 86.832651][ T6809] ? __d_alloc+0x35/0x8c0 [ 86.833890][ T6809] __d_alloc+0x35/0x8c0 [ 86.835093][ T6809] d_alloc+0x4a/0x1e0 [ 86.836275][ T6809] d_alloc_parallel+0xe9/0x12b0 [ 86.837843][ T6809] ? __pfx_lock_release+0x10/0x10 [ 86.839284][ T6809] ? __pfx_d_alloc_parallel+0x10/0x10 [ 86.840834][ T6809] ? lockdep_init_map_type+0x16d/0x7d0 [ 86.842367][ T6809] ? lock_acquire.part.0+0x11b/0x380 [ 86.843869][ T6809] ? lockdep_init_map_type+0x16d/0x7d0 [ 86.845436][ T6809] __lookup_slow+0x194/0x460 [ 86.846779][ T6809] ? __pfx___lookup_slow+0x10/0x10 [ 86.848415][ T6809] ? walk_component+0x342/0x5b0 [ 86.849816][ T6809] ? lookup_fast+0x155/0x540 [ 86.851146][ T6809] walk_component+0x350/0x5b0 [ 86.852505][ T6809] path_lookupat+0x17f/0x770 [ 86.853834][ T6809] filename_lookup+0x221/0x5f0 [ 86.855211][ T6809] ? __pfx_filename_lookup+0x10/0x10 [ 86.856736][ T6809] ? getname_flags.part.0+0x1c5/0x550 [ 86.858311][ T6809] user_path_at+0x3a/0x60 [ 86.859564][ T6809] __ia32_sys_mount+0x1fb/0x310 [ 86.861159][ T6809] ? __pfx___ia32_sys_mount+0x10/0x10 [ 86.862711][ T6809] __do_fast_syscall_32+0x73/0x120 [ 86.864192][ T6809] do_fast_syscall_32+0x32/0x80 [ 86.865591][ T6809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.867397][ T6809] RIP: 0023:0xf715e579 [ 86.868565][ T6809] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 86.874187][ T6809] RSP: 002b:00000000f512f55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 86.876721][ T6809] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000340 [ 86.879029][ T6809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.881320][ T6809] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.883609][ T6809] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 86.885865][ T6809] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.888269][ T6809] [ 87.559481][ T6831] loop6: detected capacity change from 0 to 524287999 [ 87.562692][ T6831] ldm_validate_partition_table(): Disk read failed. [ 87.565149][ T6831] Dev loop6: unable to read RDB block 0 [ 87.567437][ T6831] loop6: unable to read partition table [ 87.569196][ T6831] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 88.150601][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 88.427543][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.432948][ T8] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 88.473412][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.477316][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.484799][ T8] usb 6-1: Product: syz [ 88.490252][ T8] usb 6-1: Manufacturer: syz [ 88.501109][ T62] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 88.507715][ T8] usb 6-1: SerialNumber: syz [ 88.614324][ T6861] loop6: detected capacity change from 0 to 524287999 [ 88.623950][ T6861] ldm_validate_partition_table(): Disk read failed. [ 88.626455][ T6861] Dev loop6: unable to read RDB block 0 [ 88.629214][ T6861] loop6: unable to read partition table [ 88.632196][ T6861] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 88.746894][ T6836] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.475767][ T6836] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.678972][ T8] cdc_mbim 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 89.681664][ T8] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 89.684456][ T8] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 89.883534][ T8] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 89.888269][ T8] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 89.893825][ T8] wwan wwan0: port wwan0mbim0 attached [ 89.899987][ T8] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 42:42:42:42:42:42 [ 90.049295][ T5658] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 90.084153][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 90.086169][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 90.088131][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 90.090090][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 90.092011][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 90.093881][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 90.095797][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 90.097699][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 90.099633][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 90.101528][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 90.103924][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 90.109678][ T1448] usb 6-1: USB disconnect, device number 2 [ 90.113621][ T1448] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 90.215729][ T1448] wwan wwan0: port wwan0mbim0 disconnected [ 95.112611][ T6935] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 95.115286][ T6935] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 95.432484][ T6945] FAULT_INJECTION: forcing a failure. [ 95.432484][ T6945] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.436386][ T6945] CPU: 2 UID: 0 PID: 6945 Comm: syz.1.212 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 95.439410][ T6945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.442585][ T6945] Call Trace: [ 95.443571][ T6945] [ 95.444438][ T6945] dump_stack_lvl+0x16c/0x1f0 [ 95.445811][ T6945] should_fail_ex+0x497/0x5b0 [ 95.447183][ T6945] _copy_to_user+0x32/0xd0 [ 95.448498][ T6945] simple_read_from_buffer+0xd0/0x160 [ 95.450053][ T6945] proc_fail_nth_read+0x198/0x270 [ 95.451504][ T6945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.453114][ T6945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.454715][ T6945] vfs_read+0x1df/0xbe0 [ 95.455937][ T6945] ? __fget_files+0x1fc/0x3a0 [ 95.457308][ T6945] ? __pfx___mutex_lock+0x10/0x10 [ 95.458793][ T6945] ? __pfx_vfs_read+0x10/0x10 [ 95.460162][ T6945] ? __fget_files+0x206/0x3a0 [ 95.461533][ T6945] ksys_read+0x12b/0x250 [ 95.462804][ T6945] ? __pfx_ksys_read+0x10/0x10 [ 95.464209][ T6945] __do_fast_syscall_32+0x73/0x120 [ 95.465692][ T6945] do_fast_syscall_32+0x32/0x80 [ 95.467170][ T6945] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.469009][ T6945] RIP: 0023:0xf70ae579 [ 95.470266][ T6945] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 95.475826][ T6945] RSP: 002b:00000000f50a0590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 95.478238][ T6945] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50a0620 [ 95.481368][ T6945] RDX: 000000000000000f RSI: 00000000f73e3ff4 RDI: 0000000000000000 [ 95.484428][ T6945] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 95.486695][ T6945] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 95.488980][ T6945] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.491269][ T6945] [ 95.972320][ T6954] netlink: 'syz.1.213': attribute type 27 has an invalid length. [ 96.047542][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 97.370971][ T62] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 98.331939][ T7008] random: crng reseeded on system resumption [ 98.703007][ T7016] usb usb9: usbfs: process 7016 (syz.0.226) did not claim interface 10 before use [ 98.794390][ T7020] netlink: 128 bytes leftover after parsing attributes in process `syz.0.227'. [ 98.890566][ T1448] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 99.051741][ T1448] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.054516][ T1448] usb 7-1: config 0 interface 0 has no altsetting 0 [ 99.056455][ T1448] usb 7-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 99.059054][ T1448] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.069411][ T1448] usb 7-1: config 0 descriptor?? [ 99.281137][ T1448] usbhid 7-1:0.0: can't add hid device: -71 [ 99.285286][ T1448] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 99.289225][ T1448] usb 7-1: USB disconnect, device number 2 [ 99.440598][ T5954] Bluetooth: hci3: command 0x041b tx timeout [ 104.317684][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 104.327628][ T7069] netlink: 277 bytes leftover after parsing attributes in process `syz.0.229'. [ 104.330251][ T7069] netlink: 277 bytes leftover after parsing attributes in process `syz.0.229'. [ 104.369483][ T7069] bond2: entered promiscuous mode [ 104.372071][ T7069] bond2: entered allmulticast mode [ 104.374414][ T7069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.474554][ T7073] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 104.532378][ T7069] bond2 (unregistering): Released all slaves [ 105.370979][ T5983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 107.370528][ T5954] Bluetooth: hci3: command 0x041b tx timeout [ 109.400976][ T7149] netlink: 104 bytes leftover after parsing attributes in process `syz.2.251'. [ 109.403514][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 109.406266][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'. [ 113.621819][ T7239] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 113.718030][ T7248] netlink: 'syz.0.281': attribute type 5 has an invalid length. [ 115.188804][ T7277] netlink: 36 bytes leftover after parsing attributes in process `syz.3.283'. [ 115.261041][ T7278] netlink: 'syz.3.283': attribute type 4 has an invalid length. [ 115.263345][ T7278] netlink: 17 bytes leftover after parsing attributes in process `syz.3.283'. [ 115.286412][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.283'. [ 115.468126][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 115.704336][ T7284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.286'. [ 117.725947][ T7334] loop6: detected capacity change from 0 to 524287999 [ 117.728189][ C0] blk_print_req_error: 78 callbacks suppressed [ 117.728197][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.732631][ C0] buffer_io_error: 75 callbacks suppressed [ 117.732638][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.738421][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.741164][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.744061][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.746725][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.751675][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.754515][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.757154][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.760257][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.763839][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.766472][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.768844][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.771516][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.775790][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.778436][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.780794][ T7334] ldm_validate_partition_table(): Disk read failed. [ 117.782986][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.786313][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.793841][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.796516][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 117.798958][ T7334] Dev loop6: unable to read RDB block 0 [ 117.801686][ T7334] loop6: unable to read partition table [ 117.803610][ T7334] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 118.781335][ T5983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 129.640951][ T5983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 129.670287][ T5983] hid-generic 0000:0000:0000.0002: item fetching failed at offset 0/1 [ 129.673421][ T5983] hid-generic 0000:0000:0000.0002: probe with driver hid-generic failed with error -22 [ 131.404737][ T7473] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 132.243131][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.244988][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.431236][ T62] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 137.827769][ T7498] 9pnet: Unknown protocol version 9p200 [ 137.835701][ T7498] lo speed is unknown, defaulting to 1000 [ 137.837632][ T7498] lo speed is unknown, defaulting to 1000 [ 137.846023][ T7498] lo speed is unknown, defaulting to 1000 [ 137.855299][ T7498] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 137.863719][ T7498] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 137.896969][ T7498] lo speed is unknown, defaulting to 1000 [ 137.900431][ T7498] lo speed is unknown, defaulting to 1000 [ 137.904690][ T7498] lo speed is unknown, defaulting to 1000 [ 137.907899][ T7498] lo speed is unknown, defaulting to 1000 [ 138.844927][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 138.844995][ T39] audit: type=1326 audit(1737149229.190:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.0.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 138.853438][ T39] audit: type=1326 audit(1737149229.190:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.0.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 138.860421][ T39] audit: type=1326 audit(1737149229.190:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.0.336" exe="/syz-executor" sig=0 arch=40000003 syscall=377 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 138.866698][ T39] audit: type=1326 audit(1737149229.190:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.0.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 138.872970][ T39] audit: type=1326 audit(1737149229.190:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.0.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 138.879055][ T39] audit: type=1326 audit(1737149229.190:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.0.336" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 138.885545][ T39] audit: type=1326 audit(1737149229.190:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.0.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 138.892169][ T39] audit: type=1326 audit(1737149229.190:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.0.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 138.903815][ T5832] hid-generic 0000:0000:0000.0003: item fetching failed at offset 0/1 [ 138.905608][ T39] audit: type=1326 audit(1737149229.190:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.0.336" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 138.906673][ T5832] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 138.912558][ T39] audit: type=1326 audit(1737149229.190:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.0.336" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708e579 code=0x7ffc0000 [ 139.575721][ T7547] fuse: Bad value for 'fd' [ 140.093077][ T7560] process 'syz.3.341' launched './file1' with NULL argv: empty string added [ 140.281955][ T62] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 140.803188][ T7592] fuse: Bad value for 'fd' [ 141.184581][ T7598] 9pnet: Unknown protocol version 9p200 [ 141.187765][ T7598] lo speed is unknown, defaulting to 1000 [ 141.189741][ T7598] lo speed is unknown, defaulting to 1000 [ 141.192394][ T7598] lo speed is unknown, defaulting to 1000 [ 141.198472][ T7598] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 141.209477][ T7598] lo speed is unknown, defaulting to 1000 [ 141.213640][ T7598] lo speed is unknown, defaulting to 1000 [ 141.216232][ T7598] lo speed is unknown, defaulting to 1000 [ 141.218767][ T7598] lo speed is unknown, defaulting to 1000 [ 147.376446][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 147.376457][ T39] audit: type=1326 audit(1737149237.730:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7620 comm="syz.2.355" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe0579 code=0x0 [ 147.454128][ T7626] bridee_slave_0: renamed from lo (while UP) [ 147.459792][ T62] bridee_slave_0 speed is unknown, defaulting to 1000 [ 147.559056][ T7632] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 147.561342][ T7632] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 147.565675][ T7632] vhci_hcd vhci_hcd.0: Device attached [ 147.740723][ T62] vhci_hcd: vhci_device speed not set [ 147.770980][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 147.801025][ T62] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 148.352578][ T7642] fuse: Bad value for 'fd' [ 148.491361][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 148.496020][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 148.542469][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 148.555975][ T7659] netlink: 164 bytes leftover after parsing attributes in process `syz.2.366'. [ 148.558563][ T7659] netlink: 164 bytes leftover after parsing attributes in process `syz.2.366'. [ 148.594720][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 148.870005][ T7633] vhci_hcd: connection reset by peer [ 148.875201][ T11] vhci_hcd: stop threads [ 148.876865][ T11] vhci_hcd: release socket [ 148.878882][ T11] vhci_hcd: disconnect device [ 149.301033][ T5983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 149.876764][ T7682] loop6: detected capacity change from 0 to 524287999 [ 149.879048][ C2] blk_print_req_error: 7 callbacks suppressed [ 149.879057][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.883610][ C2] buffer_io_error: 7 callbacks suppressed [ 149.883618][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.889385][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.892551][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.896648][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.899407][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.902818][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.905537][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.908008][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.910784][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.913938][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.916813][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.919649][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.922480][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.928028][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.930879][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.933646][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.935067][ T7682] ldm_validate_partition_table(): Disk read failed. [ 149.938890][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.941579][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.945067][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.947644][ T7682] Dev loop6: unable to read RDB block 0 [ 149.950181][ T7682] loop6: unable to read partition table [ 149.953630][ T7682] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 150.060622][ T7697] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 150.062560][ T7697] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 150.065756][ T7697] vhci_hcd vhci_hcd.0: Device attached [ 150.081610][ T35] IPVS: starting estimator thread 0... [ 150.084082][ T7701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 150.170709][ T7703] IPVS: using max 37 ests per chain, 88800 per kthread [ 150.961022][ T5983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 151.429513][ T7737] loop6: detected capacity change from 0 to 524287999 [ 151.433591][ T7737] ldm_validate_partition_table(): Disk read failed. [ 151.437728][ T7737] Dev loop6: unable to read RDB block 0 [ 151.442060][ T7737] loop6: unable to read partition table [ 151.443936][ T7737] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 151.890573][ T7698] vhci_hcd: connection closed [ 151.892191][ T1133] vhci_hcd: stop threads [ 151.894584][ T1133] vhci_hcd: release socket [ 151.895822][ T1133] vhci_hcd: disconnect device [ 152.097528][ T7756] sp0: Synchronizing with TNC [ 152.237909][ T7753] [U] è [ 152.953110][ T62] vhci_hcd: vhci_device speed not set [ 158.850920][ T62] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 159.208772][ T7792] loop6: detected capacity change from 0 to 524287999 [ 159.212102][ C1] blk_print_req_error: 26 callbacks suppressed [ 159.212111][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.216602][ C1] buffer_io_error: 24 callbacks suppressed [ 159.216609][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.221011][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.224334][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.227517][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.230267][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.234998][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.237741][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.240074][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.242718][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.245127][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.247927][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.251818][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.254470][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.257391][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.260103][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.269430][ T7792] ldm_validate_partition_table(): Disk read failed. [ 159.271568][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.274492][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.278098][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.281820][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.286935][ T7792] Dev loop6: unable to read RDB block 0 [ 159.289349][ T7792] loop6: unable to read partition table [ 159.291330][ T7792] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 169.383069][ T7856] loop6: detected capacity change from 0 to 524287999 [ 169.385319][ C3] blk_print_req_error: 8 callbacks suppressed [ 169.385327][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.389823][ C3] buffer_io_error: 7 callbacks suppressed [ 169.389829][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.394739][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.403396][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.409555][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.413067][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.445350][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.448453][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.451696][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.458433][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.461945][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.464986][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.468582][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.525706][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.528412][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.532582][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.536319][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.539391][ T7856] ldm_validate_partition_table(): Disk read failed. [ 169.542683][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 169.546310][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.549745][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 169.552448][ T7856] Dev loop6: unable to read RDB block 0 [ 169.554491][ T7856] loop6: unable to read partition table [ 169.556385][ T7856] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 169.620943][ T5983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 169.754969][ T7873] Driver unsupported XDP return value 0 on prog (id 91) dev N/A, expect packet loss! [ 170.211049][ T5983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 176.355713][ T7924] loop6: detected capacity change from 0 to 524287999 [ 176.357892][ C3] blk_print_req_error: 8 callbacks suppressed [ 176.357900][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.362336][ C3] buffer_io_error: 7 callbacks suppressed [ 176.362343][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.366719][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.369315][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.373002][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.375694][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.378110][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.380813][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.387325][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.390954][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.394368][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.397563][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.400844][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.404480][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.407247][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.409898][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.412287][ T7924] ldm_validate_partition_table(): Disk read failed. [ 176.415044][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.417667][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.420076][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.422797][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.425825][ T7924] Dev loop6: unable to read RDB block 0 [ 176.451042][ T62] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 176.456560][ T7924] loop6: unable to read partition table [ 176.458843][ T7924] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 176.477375][ T7926] netlink: 'syz.1.416': attribute type 33 has an invalid length. [ 176.479786][ T7926] netlink: 152 bytes leftover after parsing attributes in process `syz.1.416'. [ 176.556253][ T7946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.421'. [ 176.742645][ T62] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 177.505100][ T7972] mmap: syz.1.426 (7972) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 183.885846][ T7992] dvmrp9: entered allmulticast mode [ 184.813054][ T8016] loop6: detected capacity change from 0 to 524287999 [ 184.815500][ C3] blk_print_req_error: 8 callbacks suppressed [ 184.815508][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.820023][ C3] buffer_io_error: 7 callbacks suppressed [ 184.820029][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.824447][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.827134][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.829620][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.833135][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.835994][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.838342][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.841123][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.843494][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.845725][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.848369][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.850986][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.853668][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.856948][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.859603][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.861940][ T8016] ldm_validate_partition_table(): Disk read failed. [ 184.864218][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.866858][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.869337][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 184.872104][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 184.876121][ T8016] Dev loop6: unable to read RDB block 0 [ 184.878250][ T8016] loop6: unable to read partition table [ 184.879996][ T8016] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 185.051887][ T5983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 185.361667][ T8055] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 185.364004][ T8055] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 191.703271][ T8092] netlink: 44 bytes leftover after parsing attributes in process `syz.1.445'. [ 191.831325][ T5983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 192.394441][ T8133] [U]  [ 192.995627][ T8144] netlink: 44 bytes leftover after parsing attributes in process `syz.0.459'. [ 193.120942][ T8147] FAULT_INJECTION: forcing a failure. [ 193.120942][ T8147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.125005][ T8147] CPU: 2 UID: 0 PID: 8147 Comm: syz.1.460 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 193.128053][ T8147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 193.131159][ T8147] Call Trace: [ 193.132148][ T8147] [ 193.133004][ T8147] dump_stack_lvl+0x16c/0x1f0 [ 193.134432][ T8147] should_fail_ex+0x497/0x5b0 [ 193.135815][ T8147] _copy_to_user+0x32/0xd0 [ 193.137129][ T8147] snd_seq_ioctl+0x33e/0x3f0 [ 193.138529][ T8147] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 193.140105][ T8147] ? __fget_files+0x206/0x3a0 [ 193.141487][ T8147] snd_seq_ioctl_compat+0xea/0x310 [ 193.142988][ T8147] ? __pfx_snd_seq_ioctl_compat+0x10/0x10 [ 193.144898][ T8147] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 193.146473][ T8147] __do_fast_syscall_32+0x73/0x120 [ 193.147976][ T8147] do_fast_syscall_32+0x32/0x80 [ 193.149484][ T8147] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.151324][ T8147] RIP: 0023:0xf70ae579 [ 193.152502][ T8147] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 193.158087][ T8147] RSP: 002b:00000000f507f55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 193.160540][ T8147] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000c0305302 [ 193.162824][ T8147] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.165122][ T8147] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.167463][ T8147] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 193.169819][ T8147] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.172137][ T8147] [ 193.538147][ T8152] netlink: 'syz.3.462': attribute type 10 has an invalid length. [ 193.540609][ T8152] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 193.690909][ T1411] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.692747][ T1411] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.960128][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 193.964176][ T8160] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 194.077337][ T8180] netlink: 92 bytes leftover after parsing attributes in process `syz.0.469'. [ 194.271203][ T62] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 195.141789][ T62] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 201.840930][ T8258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.483'. [ 201.844556][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 202.210566][ T35] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 202.373156][ T35] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.377140][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 202.380255][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 202.383227][ T35] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.387635][ T35] usb 8-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 202.390379][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.399262][ T35] usb 8-1: config 0 descriptor?? [ 202.406531][ T35] input: appletouch as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input12 [ 202.586507][ T8272] FAULT_INJECTION: forcing a failure. [ 202.586507][ T8272] name failslab, interval 1, probability 0, space 0, times 0 [ 202.591063][ T8272] CPU: 3 UID: 0 PID: 8272 Comm: syz.0.487 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 202.594491][ T8272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 202.597530][ T8272] Call Trace: [ 202.598500][ T8272] [ 202.599503][ T8272] dump_stack_lvl+0x16c/0x1f0 [ 202.601039][ T8272] should_fail_ex+0x497/0x5b0 [ 202.602403][ T8272] ? hlock_class+0x4e/0x130 [ 202.603708][ T8272] should_failslab+0xc2/0x120 [ 202.605057][ T8272] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 202.606737][ T8272] ? __alloc_skb+0x2b3/0x380 [ 202.608068][ T8272] __alloc_skb+0x2b3/0x380 [ 202.609347][ T8272] ? __pfx___alloc_skb+0x10/0x10 [ 202.610807][ T8272] ? sctp_transport_hold+0x70/0x1c0 [ 202.612293][ T8272] ? __pfx_sctp_transport_hold+0x10/0x10 [ 202.613895][ T8272] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 202.615621][ T8272] _sctp_make_chunk+0x51/0x270 [ 202.617018][ T8272] sctp_make_abort+0x41/0x410 [ 202.618379][ T8272] sctp_make_abort_user+0x7d/0x4a0 [ 202.619834][ T8272] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 202.621578][ T8272] ? __pfx_sctp_make_abort_user+0x10/0x10 [ 202.623196][ T8272] ? trace_lock_acquire+0x14e/0x1f0 [ 202.624683][ T8272] sctp_sendmsg_check_sflags+0x24e/0x320 [ 202.626327][ T8272] sctp_sendmsg+0x11db/0x1f10 [ 202.627673][ T8272] ? __might_fault+0x13b/0x190 [ 202.629055][ T8272] ? __pfx_sctp_sendmsg+0x10/0x10 [ 202.630500][ T8272] ? __pfx___might_resched+0x10/0x10 [ 202.632010][ T8272] ? __pfx_aa_sk_perm+0x10/0x10 [ 202.633427][ T8272] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 202.635391][ T8272] ? __pfx_sctp_sendmsg+0x10/0x10 [ 202.636837][ T8272] inet_sendmsg+0x119/0x140 [ 202.638141][ T8272] ____sys_sendmsg+0x907/0xb40 [ 202.639517][ T8272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.641016][ T8272] ? get_compat_msghdr+0x11b/0x170 [ 202.642485][ T8272] ___sys_sendmsg+0x135/0x1e0 [ 202.643833][ T8272] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.645324][ T8272] ? trace_lock_acquire+0x14e/0x1f0 [ 202.646821][ T8272] __sys_sendmmsg+0x2fa/0x420 [ 202.648168][ T8272] ? __pfx___sys_sendmmsg+0x10/0x10 [ 202.649658][ T8272] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 202.651374][ T8272] ? fput+0x67/0x440 [ 202.652498][ T8272] ? ksys_write+0x1ba/0x250 [ 202.653807][ T8272] ? __pfx_ksys_write+0x10/0x10 [ 202.655223][ T8272] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 202.656822][ T8272] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 202.658703][ T8272] __do_fast_syscall_32+0x73/0x120 [ 202.660361][ T8272] do_fast_syscall_32+0x32/0x80 [ 202.661755][ T8272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.663616][ T8272] RIP: 0023:0xf708e579 [ 202.664785][ T8272] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 202.670233][ T8272] RSP: 002b:00000000f508055c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 202.672608][ T8272] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200032c0 [ 202.674864][ T8272] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.677122][ T8272] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.679373][ T8272] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 202.681786][ T8272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.684038][ T8272] [ 202.758910][ T1448] usb 8-1: USB disconnect, device number 2 [ 202.781643][ T1448] appletouch 8-1:0.0: input: appletouch disconnected [ 202.935076][ T62] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 203.500448][ T8316] fuse: Bad value for 'rootmode' [ 213.452694][ T8348] netlink: 'syz.2.500': attribute type 9 has an invalid length. [ 213.455129][ T8348] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.500'. [ 213.524116][ T39] audit: type=1804 audit(1737149303.880:58): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.504" name="/newroot/119/bus/bus" dev="overlay" ino=772 res=1 errno=0 [ 213.530245][ T39] audit: type=1804 audit(1737149303.880:59): pid=8356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.504" name="/newroot/119/bus/bus" dev="overlay" ino=772 res=1 errno=0 [ 213.770893][ T8371] netlink: 'syz.3.510': attribute type 10 has an invalid length. [ 214.104668][ T45] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.169159][ T45] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.221949][ T5949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.227602][ T5949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.234822][ T5949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.238940][ T5949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.239276][ T45] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.250081][ T5949] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.256731][ T5949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.296021][ T8380] bridee_slave_0 speed is unknown, defaulting to 1000 [ 214.310052][ T45] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.315974][ T8380] lo speed is unknown, defaulting to 1000 [ 214.369685][ T8380] chnl_net:caif_netlink_parms(): no params data found [ 214.601193][ T5983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 214.615693][ T8380] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.618328][ T8380] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.623691][ T8380] bridge_slave_0: entered allmulticast mode [ 214.625901][ T8380] bridge_slave_0: entered promiscuous mode [ 214.662426][ T8380] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.664529][ T8380] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.666585][ T8380] bridge_slave_1: entered allmulticast mode [ 214.668731][ T8380] bridge_slave_1: entered promiscuous mode [ 214.769054][ T8380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.366917][ T45] bond0 (unregistering): Released all slaves [ 215.382590][ T8380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.415241][ T8380] team0: Port device team_slave_0 added [ 215.419957][ T8380] team0: Port device team_slave_1 added [ 215.443382][ T8380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.445441][ T8380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.453849][ T8380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.458224][ T8380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.460235][ T8380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.480345][ T8380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.518653][ T8380] hsr_slave_0: entered promiscuous mode [ 215.528210][ T8380] hsr_slave_1: entered promiscuous mode [ 215.531364][ T8380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.534338][ T8380] Cannot create hsr debugfs directory [ 216.330660][ T5949] Bluetooth: hci3: command tx timeout [ 216.362417][ T8380] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 216.372756][ T8380] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 216.401346][ T8380] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 216.408213][ T8380] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 216.437335][ T45] hsr_slave_0: left promiscuous mode [ 216.456178][ T45] hsr_slave_1: left promiscuous mode [ 216.543686][ T45] veth1_macvtap: left promiscuous mode [ 216.546309][ T45] veth0_macvtap: left promiscuous mode [ 216.548030][ T45] veth1_vlan: left promiscuous mode [ 216.549668][ T45] veth0_vlan: left promiscuous mode [ 217.687972][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 217.690844][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.525'. [ 217.693349][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.0.525'. [ 218.400989][ T5949] Bluetooth: hci3: command tx timeout [ 218.755577][ T8380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.814263][ T8380] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.838459][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.841302][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.849484][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.852260][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.055111][ T8380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.204450][ T8380] veth0_vlan: entered promiscuous mode [ 219.227934][ T8380] veth1_vlan: entered promiscuous mode [ 219.335075][ T8380] veth0_macvtap: entered promiscuous mode [ 219.338735][ T8380] veth1_macvtap: entered promiscuous mode [ 219.491138][ T5983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 219.503529][ T8380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.522482][ T8380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.545916][ T8380] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.555372][ T8380] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.558645][ T8380] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.567421][ T8380] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.619732][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.628033][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.651432][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.757922][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.870140][ T8504] FAULT_INJECTION: forcing a failure. [ 219.870140][ T8504] name failslab, interval 1, probability 0, space 0, times 0 [ 219.875442][ T8504] CPU: 3 UID: 0 PID: 8504 Comm: syz.4.513 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 219.878509][ T8504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.881764][ T8504] Call Trace: [ 219.883140][ T8504] [ 219.884343][ T8504] dump_stack_lvl+0x16c/0x1f0 [ 219.886259][ T8504] should_fail_ex+0x497/0x5b0 [ 219.888174][ T8504] ? fs_reclaim_acquire+0xae/0x150 [ 219.890227][ T8504] should_failslab+0xc2/0x120 [ 219.892103][ T8504] __kmalloc_cache_noprof+0x68/0x420 [ 219.894196][ T8504] ? nft_table_lookup.part.0+0x1e3/0x230 [ 219.896402][ T8504] nf_tables_newtable+0xd79/0x1b40 [ 219.898428][ T8504] ? net_generic+0xea/0x2a0 [ 219.900230][ T8504] ? __pfx_nf_tables_newtable+0x10/0x10 [ 219.902453][ T8504] ? __nla_parse+0x40/0x60 [ 219.904612][ T8504] nfnetlink_rcv_batch+0x1a2a/0x24e0 [ 219.906815][ T8504] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 219.909077][ T8504] ? __pfx_lock_release+0x10/0x10 [ 219.911119][ T8504] ? __local_bh_enable_ip+0xa4/0x120 [ 219.913230][ T8504] ? lockdep_hardirqs_on+0x7c/0x110 [ 219.915156][ T8504] ? __pfx___dev_queue_xmit+0x10/0x10 [ 219.917002][ T8504] ? __nla_parse+0x40/0x60 [ 219.918450][ T8504] nfnetlink_rcv+0x3c3/0x430 [ 219.919775][ T8504] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 219.921425][ T8504] netlink_unicast+0x53c/0x7f0 [ 219.922887][ T8504] ? __pfx_netlink_unicast+0x10/0x10 [ 219.924714][ T8504] ? __phys_addr_symbol+0x30/0x80 [ 219.926550][ T8504] ? __check_object_size+0x488/0x710 [ 219.928108][ T8504] netlink_sendmsg+0x8b8/0xd70 [ 219.929589][ T8504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.931300][ T8504] ____sys_sendmsg+0x9ae/0xb40 [ 219.932680][ T8504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.934216][ T8504] ? get_compat_msghdr+0x11b/0x170 [ 219.936563][ T8504] ___sys_sendmsg+0x135/0x1e0 [ 219.938071][ T8504] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.939644][ T8504] ? __pfx_lock_release+0x10/0x10 [ 219.941127][ T8504] ? trace_lock_acquire+0x14e/0x1f0 [ 219.942649][ T8504] ? __fget_files+0x206/0x3a0 [ 219.944016][ T8504] __sys_sendmsg+0x16e/0x220 [ 219.945397][ T8504] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.947225][ T8504] __do_fast_syscall_32+0x73/0x120 [ 219.948759][ T8504] do_fast_syscall_32+0x32/0x80 [ 219.950175][ T8504] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 219.951979][ T8504] RIP: 0023:0xf7fc2579 [ 219.953160][ T8504] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 219.959605][ T8504] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 219.962839][ T8504] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 219.965098][ T8504] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 219.967908][ T8504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 219.970170][ T8504] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 219.972432][ T8504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 219.974994][ T8504] [ 220.432648][ T8537] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 220.480628][ T5949] Bluetooth: hci3: command tx timeout [ 220.959419][ T8547] loop6: detected capacity change from 0 to 524287999 [ 220.962242][ C0] blk_print_req_error: 8 callbacks suppressed [ 220.962281][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.967507][ C0] buffer_io_error: 7 callbacks suppressed [ 220.967517][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.972368][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.975505][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.977882][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.981366][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.984525][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.988225][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.991715][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 220.995240][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.998544][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.002209][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.005847][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.008585][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.011155][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 221.014340][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.017673][ T8547] ldm_validate_partition_table(): Disk read failed. [ 221.061362][ T8549] loop6: detected capacity change from 524287999 to 524287952 [ 221.113570][ T8552] Invalid logical block size (3) [ 221.116854][ T8547] loop6: unable to read partition table [ 221.118612][ T8547] loop_reread_partitions: partition scan of loop6 (Í¢†¨ÙÇ´8ÝCP'OÈQž=}m”=@4r„(Uk+Z—Ö 4—Ö>˜ìF¼1ã“›ÍÀù‚àÔ™Û1Œ°) failed (rc=-5) [ 221.293451][ T8565] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 221.310930][ T5983] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 221.332370][ T8561] bridge_slave_0: left allmulticast mode [ 221.334232][ T8561] bridge_slave_0: left promiscuous mode [ 221.336398][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.350782][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'. [ 221.357121][ T8561] bridge_slave_1: left allmulticast mode [ 221.358895][ T8561] bridge_slave_1: left promiscuous mode [ 221.364654][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.370670][ T8561] bond0: (slave bond_slave_0): Releasing backup interface [ 221.380321][ T8561] bond0: (slave bond_slave_1): Releasing backup interface [ 221.403675][ T8561] team0: Port device team_slave_0 removed [ 221.420519][ C3] [ 221.421444][ C3] ============================= [ 221.423246][ C3] [ BUG: Invalid wait context ] [ 221.425028][ C3] 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 Not tainted [ 221.428510][ C3] ----------------------------- [ 221.431046][ C3] syz.0.543/8567 is trying to lock: [ 221.432666][ C3] ffff88807ffd7298 (&zone->lock){..-.}-{3:3}, at: get_page_from_freelist+0xbbe/0x2f80 [ 221.435979][ C3] other info that might help us debug this: [ 221.438221][ C3] context-{2:2} [ 221.439517][ C3] 1 lock held by syz.0.543/8567: [ 221.441335][ C3] #0: ffff88802b744f18 (&pcp->lock){+.+.}-{3:3}, at: get_page_from_freelist+0x350/0x2f80 [ 221.444937][ C3] stack backtrace: [ 221.446345][ C3] CPU: 3 UID: 0 PID: 8567 Comm: syz.0.543 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 221.450177][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 221.454120][ C3] Call Trace: [ 221.455374][ C3] [ 221.456441][ C3] dump_stack_lvl+0x116/0x1f0 [ 221.458211][ C3] __lock_acquire+0x878/0x3c40 [ 221.459993][ C3] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 221.462266][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 221.464208][ C3] ? hlock_class+0x4e/0x130 [ 221.465915][ C3] ? rt6_score_route+0x14a/0xa70 [ 221.467750][ C3] lock_acquire.part.0+0x11b/0x380 [ 221.469625][ C3] ? get_page_from_freelist+0xbbe/0x2f80 [ 221.471696][ C3] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 221.473754][ C3] ? rcu_is_watching+0x12/0xc0 [ 221.475565][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 221.477500][ C3] ? do_raw_spin_trylock+0x66/0x180 [ 221.479436][ C3] ? get_page_from_freelist+0xbbe/0x2f80 [ 221.481531][ C3] ? lock_acquire+0x2f/0xb0 [ 221.483287][ C3] ? get_page_from_freelist+0xbbe/0x2f80 [ 221.485351][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 221.487019][ C3] ? get_page_from_freelist+0xbbe/0x2f80 [ 221.488595][ C3] get_page_from_freelist+0xbbe/0x2f80 [ 221.490146][ C3] ? __pfx_get_page_from_freelist+0x10/0x10 [ 221.491820][ C3] ? should_fail_alloc_page+0xee/0x130 [ 221.493372][ C3] ? prepare_alloc_pages.constprop.0+0x16f/0x560 [ 221.495190][ C3] __alloc_pages_noprof+0x223/0x25b0 [ 221.496698][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 221.498188][ C3] ? hlock_class+0x4e/0x130 [ 221.499484][ C3] ? __lock_acquire+0xcc5/0x3c40 [ 221.500899][ C3] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 221.502530][ C3] ? find_held_lock+0x2d/0x110 [ 221.503894][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 221.505403][ C3] ? lock_acquire+0x2f/0xb0 [ 221.506708][ C3] ? is_bpf_text_address+0x30/0x1a0 [ 221.508207][ C3] ? bpf_ksym_find+0x124/0x1c0 [ 221.509570][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 221.511256][ C3] ? policy_nodemask+0xea/0x4e0 [ 221.512643][ C3] alloc_pages_mpol_noprof+0x2c8/0x620 [ 221.514196][ C3] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 221.515912][ C3] stack_depot_save_flags+0x8e0/0x9e0 [ 221.517438][ C3] ? __lock_acquire+0xcc5/0x3c40 [ 221.518849][ C3] kasan_save_stack+0x42/0x60 [ 221.520210][ C3] ? kasan_save_stack+0x33/0x60 [ 221.521608][ C3] ? __kasan_record_aux_stack+0xba/0xd0 [ 221.523195][ C3] ? task_work_add+0xc0/0x3b0 [ 221.524582][ C3] ? run_posix_cpu_timers+0x69f/0x7d0 [ 221.526143][ C3] ? update_process_times+0x1a1/0x2d0 [ 221.527680][ C3] ? tick_nohz_handler+0x376/0x530 [ 221.529147][ C3] ? __hrtimer_run_queues+0x5fb/0xae0 [ 221.530678][ C3] ? hrtimer_interrupt+0x392/0x8e0 [ 221.532133][ C3] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 221.533886][ C3] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 221.535588][ C3] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.537361][ C3] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 221.539040][ C3] ? __rmqueue_pcplist+0x5b1/0x1600 [ 221.540534][ C3] ? get_page_from_freelist+0x3d2/0x2f80 [ 221.542139][ C3] ? __alloc_pages_noprof+0x223/0x25b0 [ 221.543637][ C3] ? alloc_pages_mpol_noprof+0x2c8/0x620 [ 221.545242][ C3] ? stack_depot_save_flags+0x8e0/0x9e0 [ 221.546839][ C3] ? kasan_save_stack+0x42/0x60 [ 221.548240][ C3] ? kasan_save_track+0x14/0x30 [ 221.549653][ C3] ? kasan_save_free_info+0x3b/0x60 [ 221.550666][ T30] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 221.551229][ C3] ? __kasan_slab_free+0x51/0x70 [ 221.551242][ C3] ? kfree+0x14f/0x4b0 [ 221.555967][ C3] ? vfree+0x311/0x950 [ 221.557172][ C3] ? bpf_patch_insn_data+0x3da/0x790 [ 221.558710][ C3] ? do_misc_fixups+0x6da5/0xa190 [ 221.560154][ C3] ? bpf_check+0x72b9/0xc870 [ 221.561481][ C3] ? bpf_prog_load+0xe3f/0x2670 [ 221.562887][ C3] ? __sys_bpf+0x5677/0x57a0 [ 221.564226][ C3] ? __ia32_sys_bpf+0x76/0xe0 [ 221.565596][ C3] ? __do_fast_syscall_32+0x73/0x120 [ 221.567127][ C3] ? do_fast_syscall_32+0x32/0x80 [ 221.568597][ C3] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.570484][ C3] __kasan_record_aux_stack+0xba/0xd0 [ 221.572039][ C3] task_work_add+0xc0/0x3b0 [ 221.573358][ C3] ? __pfx_task_work_add+0x10/0x10 [ 221.574852][ C3] ? lock_acquire.part.0+0x11b/0x380 [ 221.576378][ C3] ? find_held_lock+0x2d/0x110 [ 221.577754][ C3] run_posix_cpu_timers+0x69f/0x7d0 [ 221.579255][ C3] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 221.580882][ C3] ? sched_balance_trigger+0x3d4/0xea0 [ 221.582455][ C3] ? __pfx_sched_balance_trigger+0x10/0x10 [ 221.584119][ C3] ? sched_tick+0x286/0x4f0 [ 221.585454][ C3] update_process_times+0x1a1/0x2d0 [ 221.586955][ C3] ? __pfx_update_process_times+0x10/0x10 [ 221.588585][ C3] ? read_tsc+0x9/0x20 [ 221.589758][ C3] ? ktime_get+0x1ac/0x300 [ 221.591049][ C3] tick_nohz_handler+0x376/0x530 [ 221.592484][ C3] ? __pfx_tick_nohz_handler+0x10/0x10 [ 221.594034][ C3] __hrtimer_run_queues+0x5fb/0xae0 [ 221.595531][ C3] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 221.597157][ C3] ? read_tsc+0x9/0x20 [ 221.598331][ C3] hrtimer_interrupt+0x392/0x8e0 [ 221.599743][ C3] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 221.601460][ C3] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 221.603067][ C3] [ 221.603915][ C3] [ 221.604767][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 221.606517][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 221.608334][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 b6 41 59 f6 48 89 df e8 fe c0 59 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 25 b1 4a f6 65 8b 05 96 d2 e6 74 85 c0 74 16 5b [ 221.613801][ C3] RSP: 0018:ffffc900272beaf8 EFLAGS: 00000246 [ 221.615529][ C3] RAX: 0000000000000006 RBX: ffff88807ffd7280 RCX: 1ffffffff2d37810 [ 221.617774][ C3] RDX: 0000000000000000 RSI: ffffffff8b4cd300 RDI: ffffffff8bb17300 [ 221.620034][ C3] RBP: 0000000000000202 R08: 0000000000000001 R09: fffffbfff2d37398 [ 221.622311][ C3] R10: ffffffff969b9cc7 R11: 0000000000004834 R12: 000000000000000f [ 221.624555][ C3] R13: dffffc0000000000 R14: ffff88802b744fc8 R15: ffff88802b744f00 [ 221.626835][ C3] __rmqueue_pcplist+0x5b1/0x1600 [ 221.628303][ C3] ? do_raw_spin_trylock+0xb1/0x180 [ 221.629799][ C3] ? __pfx___rmqueue_pcplist+0x10/0x10 [ 221.631356][ C3] ? lock_acquire+0x2f/0xb0 [ 221.632677][ C3] ? get_page_from_freelist+0x350/0x2f80 [ 221.634285][ C3] get_page_from_freelist+0x3d2/0x2f80 [ 221.635860][ C3] ? __pfx_get_page_from_freelist+0x10/0x10 [ 221.637551][ C3] ? should_fail_alloc_page+0xee/0x130 [ 221.639102][ C3] ? prepare_alloc_pages.constprop.0+0x16f/0x560 [ 221.640890][ C3] __alloc_pages_noprof+0x223/0x25b0 [ 221.642406][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 221.643892][ C3] ? hlock_class+0x4e/0x130 [ 221.645196][ C3] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 221.646843][ C3] ? find_held_lock+0x2d/0x110 [ 221.648225][ C3] ? is_bpf_text_address+0x8a/0x1a0 [ 221.649705][ C3] ? lock_acquire+0x2f/0xb0 [ 221.651012][ C3] ? is_bpf_text_address+0x30/0x1a0 [ 221.652502][ C3] ? bpf_ksym_find+0x124/0x1c0 [ 221.653868][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 221.655566][ C3] ? policy_nodemask+0xea/0x4e0 [ 221.656974][ C3] alloc_pages_mpol_noprof+0x2c8/0x620 [ 221.658571][ C3] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 221.660374][ C3] stack_depot_save_flags+0x8e0/0x9e0 [ 221.661938][ C3] kasan_save_stack+0x42/0x60 [ 221.663293][ C3] ? kasan_save_stack+0x33/0x60 [ 221.664681][ C3] ? kasan_save_track+0x14/0x30 [ 221.666103][ C3] ? kasan_save_free_info+0x3b/0x60 [ 221.667602][ C3] ? __kasan_slab_free+0x51/0x70 [ 221.669028][ C3] ? kfree+0x14f/0x4b0 [ 221.670209][ C3] ? vfree+0x311/0x950 [ 221.671375][ C3] ? bpf_patch_insn_data+0x3da/0x790 [ 221.672876][ C3] ? do_misc_fixups+0x6da5/0xa190 [ 221.674317][ C3] ? bpf_check+0x72b9/0xc870 [ 221.675639][ C3] ? bpf_prog_load+0xe3f/0x2670 [ 221.677052][ C3] ? __sys_bpf+0x5677/0x57a0 [ 221.678384][ C3] ? __ia32_sys_bpf+0x76/0xe0 [ 221.679746][ C3] ? __do_fast_syscall_32+0x73/0x120 [ 221.681262][ C3] ? do_fast_syscall_32+0x32/0x80 [ 221.682707][ C3] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.684565][ C3] kasan_save_track+0x14/0x30 [ 221.685918][ C3] kasan_save_free_info+0x3b/0x60 [ 221.687377][ C3] __kasan_slab_free+0x51/0x70 [ 221.688756][ C3] kfree+0x14f/0x4b0 [ 221.689887][ C3] ? vfree+0x311/0x950 [ 221.691074][ C3] vfree+0x311/0x950 [ 221.692198][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 221.693887][ C3] ? is_reg64.constprop.0+0x120/0x380 [ 221.695442][ C3] bpf_patch_insn_data+0x3da/0x790 [ 221.696918][ C3] do_misc_fixups+0x6da5/0xa190 [ 221.698330][ C3] ? filter_irq_stacks+0x46/0x90 [ 221.699747][ C3] ? stack_depot_save_flags+0x28/0x9e0 [ 221.700557][ T30] usb 8-1: Using ep0 maxpacket: 16 [ 221.701296][ C3] ? __pfx_do_misc_fixups+0x10/0x10 [ 221.701307][ C3] ? kasan_save_stack+0x33/0x60 [ 221.705757][ C3] ? kasan_save_track+0x14/0x30 [ 221.707149][ C3] ? kasan_save_free_info+0x3b/0x60 [ 221.708628][ C3] ? __kasan_slab_free+0x51/0x70 [ 221.710040][ C3] ? kfree+0x14f/0x4b0 [ 221.711215][ C3] ? kvfree+0x47/0x50 [ 221.712383][ C3] ? bpf_check+0x913a/0xc870 [ 221.713713][ C3] ? bpf_prog_load+0xe3f/0x2670 [ 221.715118][ C3] ? __sys_bpf+0x5677/0x57a0 [ 221.716450][ C3] ? __ia32_sys_bpf+0x76/0xe0 [ 221.717807][ C3] ? __do_fast_syscall_32+0x73/0x120 [ 221.719321][ C3] ? do_fast_syscall_32+0x32/0x80 [ 221.720762][ C3] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.722618][ C3] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 221.724301][ C3] ? check_max_stack_depth+0xc0a/0x1a50 [ 221.725904][ C3] ? __pfx_check_max_stack_depth+0x10/0x10 [ 221.727575][ C3] ? kvfree+0x47/0x50 [ 221.728720][ C3] bpf_check+0x72b9/0xc870 [ 221.730100][ C3] ? __pfx_bpf_check+0x10/0x10 [ 221.731458][ C3] ? find_held_lock+0x2d/0x110 [ 221.732844][ C3] ? bpf_prog_load+0xd45/0x2670 [ 221.734257][ C3] ? __pfx_lock_release+0x10/0x10 [ 221.735733][ C3] ? trace_lock_acquire+0x14e/0x1f0 [ 221.737236][ C3] ? bpf_prog_load+0xd45/0x2670 [ 221.738640][ C3] ? lockdep_hardirqs_on+0x7c/0x110 [ 221.740153][ C3] ? read_tsc+0x9/0x20 [ 221.741236][ C3] ? ktime_get_with_offset+0x20f/0x3a0 [ 221.742805][ C3] ? bpf_obj_name_cpy+0x156/0x1b0 [ 221.744260][ C3] bpf_prog_load+0xe3f/0x2670 [ 221.745643][ C3] ? __pfx_bpf_prog_load+0x10/0x10 [ 221.747120][ C3] ? find_held_lock+0x2d/0x110 [ 221.748520][ C3] ? __might_fault+0x13b/0x190 [ 221.749898][ C3] ? __might_fault+0xe3/0x190 [ 221.751258][ C3] __sys_bpf+0x5677/0x57a0 [ 221.752528][ C3] ? __pfx___sys_bpf+0x10/0x10 [ 221.753899][ C3] ? kmem_cache_free+0x152/0x4c0 [ 221.755338][ C3] ? putname+0x13c/0x180 [ 221.756591][ C3] ? do_futex+0x123/0x350 [ 221.757844][ C3] ? __pfx_do_futex+0x10/0x10 [ 221.759210][ C3] ? xfd_validate_state+0x5d/0x180 [ 221.760691][ C3] ? rcu_is_watching+0x12/0xc0 [ 221.762072][ C3] __ia32_sys_bpf+0x76/0xe0 [ 221.763378][ C3] __do_fast_syscall_32+0x73/0x120 [ 221.764881][ C3] do_fast_syscall_32+0x32/0x80 [ 221.766293][ C3] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 221.768102][ C3] RIP: 0023:0xf708e579 [ 221.769278][ C3] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 221.774775][ C3] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 221.777160][ C3] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000202a0fb8 [ 221.779410][ C3] RDX: 0000000000000015 RSI: 0000000000000000 RDI: 0000000000000000 [ 221.781659][ C3] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 221.783911][ C3] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 221.786208][ C3] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 221.788496][ C3] [ 221.791272][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.794382][ T30] usb 8-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 221.796989][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.798371][ T8561] team0: Port device team_slave_1 removed [ 221.804798][ T8561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.807977][ T8561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.810156][ T30] usb 8-1: config 0 descriptor?? [ 221.813262][ T8561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.815456][ T8561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.120301][ T8586] lo: entered allmulticast mode [ 222.165890][ T39] audit: type=1326 audit(1737149312.520:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.4.550" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc2579 code=0x0 [ 222.263253][ T30] usbhid 8-1:0.0: can't add hid device: -71 [ 222.265116][ T30] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 222.267886][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 222.268293][ T30] usb 8-1: USB disconnect, device number 3 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 222.662626][ T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.743462][ T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.863077][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.956628][ T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.242079][ T68] bond0 (unregistering): Released all slaves [ 223.466859][ T68] hsr_slave_0: left promiscuous mode [ 223.469323][ T68] hsr_slave_1: left promiscuous mode [ 223.473565][ T68] veth1_macvtap: left promiscuous mode [ 223.475364][ T68] veth0_macvtap: left promiscuous mode [ 223.476977][ T68] veth1_vlan: left promiscuous mode [ 223.478494][ T68] veth0_vlan: left promiscuous mode [ 224.017055][ T30] lo speed is unknown, defaulting to 1000 [ 224.019261][ T30] infiniband syz2: ib_query_port failed (-19) [ 224.278734][ T68] IPVS: stop unused estimator thread 0... [ 224.373904][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.443202][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.504075][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.573808][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.656062][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.714821][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.785292][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.844572][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.918288][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.953375][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.002926][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.073207][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 225.075941][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.222782][ T68] dvmrp9 (unregistering): left allmulticast mode [ 225.565472][ T68] bond0 (unregistering): Released all slaves [ 225.638952][ T68] bond0 (unregistering): Released all slaves [ 225.644102][ T68] bond1 (unregistering): Released all slaves [ 225.715100][ T68] bond0 (unregistering): Released all slaves [ 225.784060][ T68] bond1 (unregistering): Released all slaves [ 226.338153][ T68] hsr_slave_0: left promiscuous mode [ 226.340883][ T68] hsr_slave_1: left promiscuous mode [ 226.345438][ T68] hsr_slave_0: left promiscuous mode [ 226.351408][ T68] hsr_slave_1: left promiscuous mode [ 226.355075][ T68] hsr_slave_0: left promiscuous mode [ 226.357002][ T68] hsr_slave_1: left promiscuous mode [ 226.361452][ T68] veth1_macvtap: left promiscuous mode [ 226.363050][ T68] veth0_macvtap: left promiscuous mode [ 226.364646][ T68] veth1_vlan: left promiscuous mode [ 226.366185][ T68] veth0_vlan: left promiscuous mode [ 226.368596][ T68] veth1_macvtap: left promiscuous mode [ 226.370216][ T68] veth0_macvtap: left promiscuous mode [ 226.371996][ T68] veth1_vlan: left promiscuous mode [ 226.373540][ T68] veth0_vlan: left promiscuous mode [ 226.375664][ T68] veth1_macvtap: left promiscuous mode [ 226.377276][ T68] veth0_macvtap: left promiscuous mode [ 226.379937][ T68] veth1_vlan: left promiscuous mode [ 226.382137][ T68] veth0_vlan: left promiscuous mode [ 226.718399][ T68] lo (unregistering): left allmulticast mode VM DIAGNOSIS: 21:28:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc90003507b60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff84c91204 RDI=ffffc90003507b60 RBP=ffffffff84c911f0 RSP=ffffc90000007f60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc90000007ff8 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000000 R15=ffffc90003507b28 RIP=ffffffff84c9122d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020158000 CR3=0000000025cf8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000001000008fd RBX=ffffffff8da977c0 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fd RDI=0000000000000001 RBP=0000000000000008 RSP=ffffc900035076a8 R8 =0000000000000000 R9 =fffffbfff2039efa R10=ffffffff901cf7d7 R11=0000000000000000 R12=0000000000000003 R13=1ffff920006a0ed6 R14=0000000000000000 R15=ffffc900035076d0 RIP=ffffffff8147a098 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020023000 CR3=0000000025cf8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000198e3c RBX=0000000000000002 RCX=ffffffff8b1a8889 RDX=ffffed10056c6fee RSI=ffffffff8bb17280 RDI=ffffffff81703079 RBP=ffffed10039df000 RSP=ffffc9000048fe08 R8 =0000000000000000 R9 =ffffed10056c6fed R10=ffff88802b637f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801cef8000 R14=ffffffff901cf7d0 R15=0000000000000000 RIP=ffffffff8b1a9c6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020e02000 CR3=00000000693e4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85145dd5 RDI=ffffffff9a66a200 RBP=ffffffff9a66a1c0 RSP=ffffc900005f7de0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000005d R14=ffffffff85145d70 R15=0000000000000000 RIP=ffffffff85145dff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000202a1000 CR3=0000000067aea000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000