last executing test programs: 1m18.957749834s ago: executing program 3 (id=284): syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x100) read$char_usb(r1, &(0x7f0000000080)=""/14, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r2, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r8, 0x2007ffd) sendfile(r6, r7, 0x0, 0x1000a3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0xfffffff2, &(0x7f0000000300)) sendmsg$IPSET_CMD_TYPE(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000000d060500000000000000000007000003050001"], 0x38}, 0x1, 0x0, 0x0, 0x7}, 0x10040000) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m17.918019612s ago: executing program 3 (id=288): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000040000000000000e0300000000000000010000000000009200000000000000000000000202000000002e000061"], 0x0, 0x46}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f00000000c0)=""/204, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4d}, 0x70) 1m17.8911576s ago: executing program 3 (id=289): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newtaction={0x17c, 0x30, 0x1, 0x0, 0x0, {}, [{0x168, 0x1, [@m_ct={0x128, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0xfe92, 0x6, "e23fca366f8ebf9a9911970ea48978cfe75dca2ce73da1b1a0f03be18fd6a48e292c862d0355bb44d8282b5716de7735b7caa7f7e23795e77e7a367e5cc2834358e50875625c8631a342618d369b6e4d79510970ea662b7065ee9fa59c84b6a871fb9651cc06792e66a4b4a71fb56c97a8c5d0103955f004d14074701cf7ffffffffffffff9e2c781a2f0b790e718e67365f55b6cb1cd82e927f4d1a495ac4db15ab482b84fe6e614fff07029efd4208b3f775b0707de2901ded8c9f39bf41e590c4d1ceed5bc24ad8fc3b8ea957dddcb90600"/226}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x3c, 0x1, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xbb4d}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x0, 0x1, @val=0x927}, @IFE_META_TCINDEX={0x0, 0x5, @val=0x5}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8c90}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x12c, 0x30, 0x1, 0x0, 0x0, {}, [{0x118, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11a41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0xd0, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}]}, {0x9d, 0x6, "5608003f14a81970ca269dd0b915d951d308d3f8c24572649166ebc2fc8b3a46e8f8dc73f88c7857d17cc436e8710326c3bde5cb754bc8741aadf40ce76c1dbe67a75dc1b8c5644a3c851b16ff6aa10844f20b7ccf71fe8c46d7f1eea68f5c75303288f1fe578d20c17f10c1d63a17e67ab08643f0a7b19c08e192862e943236c2a2694563199ae05f5349ad59c61af709e65196574b51301b"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x328}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r6, 0x2007ffd) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000400)={0x2c, r9, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xffffffff, 0x3e}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x1002, &(0x7f0000001cc0)=""/4098, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) sendfile(r4, r5, 0x0, 0x1000a3) 1m16.53734942s ago: executing program 3 (id=295): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = socket(0x11, 0x800, 0x0) getsockopt(r1, 0x200000000114, 0x8, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x2, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000000b7020000000000008500", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) write$binfmt_aout(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/2741], 0xab5) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000003c0), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000680)=""/264, 0x108}, {&(0x7f0000000140)=""/58, 0x3a}, {&(0x7f0000000540)=""/88, 0x58}], 0x3}, 0x2001) mkdir(&(0x7f0000000180)='./file0\x00', 0xb2) unshare(0x2c060000) syz_clone(0x623c0080, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x8000000) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) umount2(&(0x7f0000000240)='./file0\x00', 0xc) 1m15.629772404s ago: executing program 3 (id=301): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x19, r2, 0xffffffff, 0x1000000a) fcntl$lock(r1, 0x7, &(0x7f00000005c0)={0x1, 0x2, 0x3, 0x401}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="31ce0400000075e0ecbc143f73656310000400028008024b00", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f0000002a80)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x6, @loopback, 0x1}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="8000", 0x2}, {&(0x7f0000000440)="d3cd4605b94f022b350ef4dccb32950d977c4c15ae025f7adef442fced91a3c87274e6ced202d9fd7828597887c495e5817ee3a5e264e8e1b228ffd1768c7acaea38f632e5d49200000000396861e69d953bd497ca8161029c04efad25cba20ba3152bd7858d96b8504c8925d230bef86cd3757ed6e0719630afffda381cc082c9213b45cef03a16135db1936db1a5c2658201814bf973a5cb7826230be738717d440deea8b2262adbff5c7af4d61d8c41fff42dfd228d430d4620aaa7", 0xbd}], 0x2, &(0x7f0000000400)=[@tclass={{0x10}}], 0x10}}], 0x1, 0x40000) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x1, 0x0, 0x4}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x18, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00'}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001800010029bd7000fedbdf251d01050008000e00", @ANYRES32, @ANYBLOB="06000000", @ANYRES32=0x0, @ANYBLOB="150004000400000003030000918a76e1efa19e910500000008000900", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) 1m15.31277199s ago: executing program 3 (id=303): socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) recvfrom$ax25(r0, &(0x7f0000000100)=""/87, 0x57, 0xeb59d7796265ba1a, &(0x7f00000002c0)={{0x3, @null, 0x4}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x5885, 0x0, 0x1, 0xfffffffe}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) io_uring_enter(r4, 0x3516, 0xe0ff, 0x0, 0x0, 0x0) 1m15.2190983s ago: executing program 32 (id=303): socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) recvfrom$ax25(r0, &(0x7f0000000100)=""/87, 0x57, 0xeb59d7796265ba1a, &(0x7f00000002c0)={{0x3, @null, 0x4}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x5885, 0x0, 0x1, 0xfffffffe}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) io_uring_enter(r4, 0x3516, 0xe0ff, 0x0, 0x0, 0x0) 4.543119246s ago: executing program 2 (id=851): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x8e, 0x0, &(0x7f0000000380), 0x0) io_uring_setup(0x5990, &(0x7f0000000300)={0x0, 0xeae0, 0x2, 0x2, 0x385, 0x0, r0}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x420042) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xffffffff, 0x141102) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000300)=0x7, 0x4) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$mice(0xffffff9c, &(0x7f0000000080), 0x400) connect$unix(r6, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xbb8) mount(0x0, 0x0, &(0x7f0000000000)='fuseblk\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000000080104001410d0376a06d200"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001180)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f"], 0x3c}, 0x1, 0xba01}, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000000)={'\x00', 0x5d22, 0x6f11, 0xb, 0xfffffffffffffeff, 0x11c3adec}) ioctl$BLKTRACESTART(r2, 0x1276, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @loopback, @mcast1, 0x40, 0x0, 0x6, 0x3}}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) 3.949966282s ago: executing program 2 (id=852): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x8000, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r2, 0x7277, 0x0, 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000100), 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)) r5 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r5}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x8000, 0x1, 0x3, 0x9, 0x7}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000280)={r6, 0x1}, &(0x7f00000002c0)=0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r8, 0x8030ae7c, &(0x7f00000000c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f000061c000/0x3000)=nil, 0x3000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000150001002cbd70007ddbdf250a8080ca", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x48d6) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r9, 0x5501) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0) 2.54860437s ago: executing program 2 (id=858): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x3, &(0x7f0000000240)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=ANY=[], 0x2c}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_dev$cec(0x0, 0x0, 0x81) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x3, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000003a00)='./file0\x00', 0x0) socket$inet6(0xa, 0x3, 0xa) 1.626076136s ago: executing program 2 (id=863): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r3, &(0x7f0000001a80)=""/4058, 0xfda, 0xc0020447, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0x7f, 0x3e) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) (async) sendto$inet6(r3, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) (async) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) (async) recvfrom(r3, &(0x7f0000001a80)=""/4058, 0xfda, 0xc0020447, 0x0, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0x7f, 0x3e) (async) 1.531393613s ago: executing program 2 (id=864): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000029c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x0, {0x7, r9}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x0, 0x10, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.329408038s ago: executing program 1 (id=867): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x3c, r1, 0x633d41a77d0888ff, 0x70bd26, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20048844) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000200)=""/154, 0x9a}, {&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000400)=""/123, 0x7b}, {&(0x7f0000000480)=""/249, 0xf9}, {&(0x7f0000000580)=""/166, 0xa6}, {&(0x7f0000000880)=""/77, 0x4d}], 0x6, &(0x7f00000006c0)=""/88, 0x58}, 0x4}], 0x1, 0x2, &(0x7f00000007c0)={r2, r3+10000000}) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') writev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)="a1", 0x1}, {0x0, 0x2}], 0x2) fchdir(r5) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) utimes(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0xea60}}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) 1.272122993s ago: executing program 1 (id=868): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) openat$sysctl(0xffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x401, 0xfffffffd, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af2b4a4}}, 0x20}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000) 1.210287138s ago: executing program 1 (id=869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x20000050) 1.207983886s ago: executing program 1 (id=870): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$CDROM_SELECT_SPEED(r0, 0x5322, 0xc) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x1000, 0xba, &(0x7f0000000500)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x47) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee9, 0x8031, 0xffffffffffffffff, 0x2a2ec000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) (async) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r5, &(0x7f0000000e40), 0x2, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="ff7f0e3f2617d1f439b5a1db8511", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50) (async) r8 = socket(0x2b, 0x3, 0x0) write(r8, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fd02000200020000", 0x1c) (async) r9 = socket$inet_sctp(0x2, 0x5, 0x84) splice(r1, &(0x7f0000000300)=0x6, r9, &(0x7f0000000100)=0x20000d099, 0x7, 0x2) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f00000005c0)={{0xffff, 0x50}, {0x2, 0x9}, 0x7}) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x81f7c5442f126e2a}, 0x20000810) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 960.645792ms ago: executing program 1 (id=871): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x7a7350fb00ab6963}, 0x20) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000180)=0xb2, 0x4) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) sendmmsg$inet6(r0, &(0x7f0000005140)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @private0, 0x2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="b20f5bb28c75b4ec3a6df7ed10224550e72bd8e71ca230803753f99a12d628c40532c0ede975c930647407708eb781ce3c2f162fbe8f97cc52f4b125283b2312aa555c8bd0001a", 0x47}, {0x0}, {&(0x7f0000000580)="6c7532da0ab7782e239d6c515bbe7a65829fe42293e2b0e95bf1e409e1cd076a5a9bc608a9129a6c55d66ebb3d0e791210825e0487077d055c8250b5b7d68893495ea03d36a83a8660632a67f351dd90e1b2cecd677caf073d076ba9b38cc384a4935f9aa1df797dd84651283a2f0638e2dc935354508d8ac157a6351521ed2be3d05a09f9f76a071200f373d32af958a8761b67530510b4da85c3647ce20ae4fbd651d721714a14853b038ab9785f0c2ffbe041c16e3ae1c3d200beaa92d9727bf4d1b53ee183dd8e3b6067", 0xcc}, {&(0x7f0000000380)}, {&(0x7f0000000680)="35ac55355815f385373e6f85c9f9fd73ffb1588b8b53868654a4747eb30e204b47d6ad12701f53d10a84a2cd34f17923c19a1f730d68d36b7fab41006d908c5eacd3def126b84e456f713ff8f328ff0f40b4d316f73bbb36e2d40f8e500010aeecefe515cc5aba77625ba3f873c7ae6f639afca70cc3d687c729f3532ee40ddaab300f79e32174dae26e135af3aa88e445bef4f565d03137b244f3a7f5c5341e7231b1beb61c111ee6e07eac064314be33be05ae5c9ff178a26c8dedd18fad9be793c4b4066417c6c640f0dd37e2c65b427c688192bf2c008c3d16e4255f3e1c104fbad58e81f188de83480f49b9e27365e270", 0xf3}, {&(0x7f0000000780)="e837acd9b018b92a9dae00347d34620d746c089be1101357584003b70b59bd6093f8e2ba8f253da08190bc5d5195c2338e0de7b7cfdc7204ebb02dfaa47b79eccf5b0f11ef4c80c1b4fdc854fab914ece15144c6fd6a3b9d96c441896631467646d907c718750d14162af3100edc10eea6c249e3c783627bfa6856620a4c68d16a6f51e71e087556d2936a3aebd4c87d0deb0d022d7e0ca7431909a711503a515b559db46ed1048683fa5f3990aa3346540fc5eda55af71b729432e65547066d9af41a", 0xc3}, {&(0x7f0000000940)}], 0x7, &(0x7f0000000940)}}, {{&(0x7f0000000280)={0xa, 0x4e23, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, 0x1c, &(0x7f0000001a40)=[{&(0x7f0000000a40)="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", 0xfc0}], 0x1, &(0x7f0000001a80)}}, {{&(0x7f0000002dc0)={0xa, 0x4e20, 0x400, @loopback}, 0x1c, &(0x7f00000050c0), 0x0, &(0x7f0000005100)=[@tclass={{0x10, 0x29, 0x43, 0x2}}], 0x10}}], 0x3, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r4, 0x7b0, &(0x7f00000000c0)={@hyper, 0xc49}) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x140000, 0x0, 0x9, 0x1e, 0x4, "339f020bbe82b388000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba194c6f1159fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600", [0x0, 0x40000000]}}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r6}, 0x4) openat$btrfs_control(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2001316}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 770.641779ms ago: executing program 4 (id=873): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xa420bdd508c456b5, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x1) r1 = openat$audio(0xffffff9c, &(0x7f0000000100), 0x202800, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000140)=0x10000) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) sendmsg$nl_generic(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1e0, 0x3d, 0x400, 0x70bd2a, 0x25dfdbfb, {0xf}, [@typed={0x8, 0x14b, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0xf1, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x16, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x86, 0x0, 0x0, @u32=0x4}, @nested={0xc3, 0xd2, 0x0, 0x1, [@typed={0x56, 0xe7, 0x0, 0x0, @binary="1a48e137dd71ee2c72f0e1c957dcba6045221647d68ac5a924bc88434805b1de9cd4eb85b88052aafb0a3fecbef2d36c519bba5d4595de622490c91fd65197eb1abd76acf2d8cac86f8e62ae1926e5bbe404"}, @generic="53946e0cbebea48814461a8be0b6690fb3fc51982b63f8bd4501c2a79ba81bcffaa61e7a5a712ba2a87e762dd89ba9ad07c9f06cbc5b07763bf47a9e9428427933ae86b917bd2d33df76f960d2a8d193a813f92d0a74a3d611d15b663ef1f2c041046f", @nested={0x4, 0xae}]}, @typed={0xc, 0xc0, 0x0, 0x0, @u64=0x663}, @generic="ec673c022284e7bc66e3ffdcdc5637566fbb397f246dda2fd0f20575a2a8a73d1269c2f8fdc4469d76048522d326132923c92de0b43881f8800df87d69153f88d7304e1284b51a58c07df14ea5959f6515e38573e559efa92781d647c208d46f6bfba3eb11dd3455154d67d92bb9e5c9032f240499e1aef948c7e08e089980253e84af562ca277fd2e086b5b49b493b30ed811f8574c7e789283257f845218e58edfd20fa3be136496927e4ad1bd66a9755a5ea3fae3d5502c806ce6093b9d5e5c0539d507189eb196ac5b0d30d8614cfc7ca0d3dbad6f500b38"]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4040080}, 0x800) (async) sendmsg$nl_generic(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1e0, 0x3d, 0x400, 0x70bd2a, 0x25dfdbfb, {0xf}, [@typed={0x8, 0x14b, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0xf1, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x16, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x86, 0x0, 0x0, @u32=0x4}, @nested={0xc3, 0xd2, 0x0, 0x1, [@typed={0x56, 0xe7, 0x0, 0x0, @binary="1a48e137dd71ee2c72f0e1c957dcba6045221647d68ac5a924bc88434805b1de9cd4eb85b88052aafb0a3fecbef2d36c519bba5d4595de622490c91fd65197eb1abd76acf2d8cac86f8e62ae1926e5bbe404"}, @generic="53946e0cbebea48814461a8be0b6690fb3fc51982b63f8bd4501c2a79ba81bcffaa61e7a5a712ba2a87e762dd89ba9ad07c9f06cbc5b07763bf47a9e9428427933ae86b917bd2d33df76f960d2a8d193a813f92d0a74a3d611d15b663ef1f2c041046f", @nested={0x4, 0xae}]}, @typed={0xc, 0xc0, 0x0, 0x0, @u64=0x663}, @generic="ec673c022284e7bc66e3ffdcdc5637566fbb397f246dda2fd0f20575a2a8a73d1269c2f8fdc4469d76048522d326132923c92de0b43881f8800df87d69153f88d7304e1284b51a58c07df14ea5959f6515e38573e559efa92781d647c208d46f6bfba3eb11dd3455154d67d92bb9e5c9032f240499e1aef948c7e08e089980253e84af562ca277fd2e086b5b49b493b30ed811f8574c7e789283257f845218e58edfd20fa3be136496927e4ad1bd66a9755a5ea3fae3d5502c806ce6093b9d5e5c0539d507189eb196ac5b0d30d8614cfc7ca0d3dbad6f500b38"]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4040080}, 0x800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000540)={@remote, 0x0}, &(0x7f0000000580)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'gretap0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x8000, 0x8000, 0xa45, 0x4, {{0x2f, 0x4, 0x3, 0x1f, 0xbc, 0x65, 0x0, 0xc, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@generic={0xd9, 0x12, "24f894bb023a6ff4b87037db6a567363"}, @cipso={0x86, 0x17, 0x0, [{0x0, 0xd, "1c9bdac678d662eb229fdf"}, {0x7, 0x4, "709a"}]}, @timestamp_prespec={0x44, 0x24, 0x8c, 0x3, 0xd, [{@broadcast, 0xfffffffb}, {@empty}, {@rand_addr=0x64010102, 0x2}, {@loopback, 0x5}]}, @ra={0x94, 0x4, 0x1}, @end, @end, @cipso={0x86, 0x49, 0x1, [{0x0, 0x11, "d8e52ce8220c19c1db78a43f64e81d"}, {0x2, 0x10, "e444868b2e90511307d33cce0012"}, {0x0, 0xc, "65b612be256d2c11ba73"}, {0x1, 0x4, '95'}, {0x1, 0x12, "a9f0a081c6aa4ae5851a13e6927fda15"}]}, @timestamp_addr={0x44, 0xc, 0x81, 0x1, 0xf, [{@multicast2, 0x7}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'ip_vti0\x00', 0x0, 0x0, 0x80, 0x2, 0x1, {{0x10, 0x4, 0x0, 0x3c, 0x40, 0x67, 0x0, 0x3, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x33}, {[@rr={0x7, 0x2b, 0xe0, [@empty, @multicast2, @broadcast, @private=0xa010101, @local, @rand_addr=0x64010102, @empty, @multicast1, @loopback, @private=0xa010101]}]}}}}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000940)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xbc, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xc6b}, @ETHTOOL_A_RINGS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8001}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000940)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xbc, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xc6b}, @ETHTOOL_A_RINGS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8001}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$dri(&(0x7f0000000980), 0x401, 0x400340) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000009c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r9, 0xc01064c1, &(0x7f0000000a00)={r10}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r9, 0xc01064c1, &(0x7f0000000a00)={r10}) gettid() (async) gettid() timer_create(0x7, &(0x7f0000000c40)={0x0, 0x33, 0x4, @thr={&(0x7f0000000a40)="1fb9ce49ac7b51ce657ff7454c58869fdbdd1b09201722324512dd053363a8e12b2caf19177b32991f9ad943e18f81b2360c2a1f74e2b794268a5fc45c1da64d0a13dff518c4af88f1a5e513a5210d9d4cd15242aa2b15a316dd35fd42d4f57223951282edce7e20e7780d8f9fe14c40499afe3110f7fa1ad8dc87f54846478f64de5919ade12a3417d894d5d13ee2d058d97f790b079ee52207563d36737b3396972b241903ecf1d0656e68fd29c6c52ffa8c48de05ca2d4a56d96bde8c2befc8efce48cb131de36c082ce1a4a9499a068c5805dc4e", &(0x7f0000000b40)="5c3d7183e22e7efb7034c59e44030ea5b49dac04ad005b855c198a707fd6c3cca2d700068320dfa49a898aa0dcbdd84723cad9eec030853b580382cdc3070eba692beeabb856acf31016a8664548934d401309e3331cd9ceda2a594c4d25114a54f7664e29f26a5bf6664137e5d33cdc2d10c2efc7e6ecb8fc293b7103621fe82d8c7849f9e14fde8e799302f14e88a13a8c804712ff93c714af1e1aa7e1a108002c4f533d5f27ed6681af78dfa2cda5cdc105f0f30d2e2becfedaac1398d80f4ffa73a7e0cc0b848fa1f0a3d3ac1c08bd92a05003fc610208b1c4ebd05806f9881f23"}}, &(0x7f0000000c80)) (async) timer_create(0x7, &(0x7f0000000c40)={0x0, 0x33, 0x4, @thr={&(0x7f0000000a40)="1fb9ce49ac7b51ce657ff7454c58869fdbdd1b09201722324512dd053363a8e12b2caf19177b32991f9ad943e18f81b2360c2a1f74e2b794268a5fc45c1da64d0a13dff518c4af88f1a5e513a5210d9d4cd15242aa2b15a316dd35fd42d4f57223951282edce7e20e7780d8f9fe14c40499afe3110f7fa1ad8dc87f54846478f64de5919ade12a3417d894d5d13ee2d058d97f790b079ee52207563d36737b3396972b241903ecf1d0656e68fd29c6c52ffa8c48de05ca2d4a56d96bde8c2befc8efce48cb131de36c082ce1a4a9499a068c5805dc4e", &(0x7f0000000b40)="5c3d7183e22e7efb7034c59e44030ea5b49dac04ad005b855c198a707fd6c3cca2d700068320dfa49a898aa0dcbdd84723cad9eec030853b580382cdc3070eba692beeabb856acf31016a8664548934d401309e3331cd9ceda2a594c4d25114a54f7664e29f26a5bf6664137e5d33cdc2d10c2efc7e6ecb8fc293b7103621fe82d8c7849f9e14fde8e799302f14e88a13a8c804712ff93c714af1e1aa7e1a108002c4f533d5f27ed6681af78dfa2cda5cdc105f0f30d2e2becfedaac1398d80f4ffa73a7e0cc0b848fa1f0a3d3ac1c08bd92a05003fc610208b1c4ebd05806f9881f23"}}, &(0x7f0000000c80)) mount$overlay(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), 0x1, &(0x7f0000000d40)={[{@metacopy_on}, {@volatile}, {@xino_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@uid_lt={'uid<', r2}}, {@obj_user={'obj_user', 0x3d, 'dvmrp0\x00'}}, {@measure}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) r11 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x8000000) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1000006, 0x4000010, 0xffffffffffffffff, 0x10000000) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000f00)=@IORING_OP_WRITE={0x17, 0x38, 0x6000, @fd_index=0x3, 0x1, &(0x7f0000000e00)="f42bc0762dc6994d40013ce1430eded5ef95331786f5923073c95805921d23964017420ae1169e5b9c8a7ef462a095b57d18ddd6d24c1bb877c3fa3dbad47545761ff7158b9e9269f13f7e0618bf05185bb0e201b6a3d6feaece65175ec718e882e4045c75c0620de32dc739dadca89418946735f5527edcf180640ff09c12ae77f1b08e357c9c8b46b089a7c1349a63376304d494527ad3e68f6863becd707bcf68f3f4a67fedd4662e762c1f149b83eb625df1791c380a95a00b0948111358f150add1c680963dfe2b966e04bcab985f505dd9d81127de4cd9453730b17af41af2aba3cd7c95aae2a122fcf3dbc68e", 0xf0, 0x8, 0x1, {0x0, r13}}) r14 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_GET_CLOCK(r14, 0x8030ae7c, &(0x7f0000000f40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f80)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f80)={0xffffffffffffffff}) sendto$unix(r15, &(0x7f0000000fc0)="6a4018fd86be02e775d83d33a633a646740bf940ab556cfc643f491763b12f8378cb549b261d4fba2517add0023622d4fbe6f27dc2ad82bc75a09c2309", 0x3d, 0x24000000, 0x0, 0x0) r16 = socket$l2tp(0x2, 0x2, 0x73) close_range(r15, r16, 0x2) (async) close_range(r15, r16, 0x2) 697.691291ms ago: executing program 4 (id=875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 695.535984ms ago: executing program 0 (id=876): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x3, 0x7ffcfffb}]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) fanotify_init(0x200, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) (async) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300)) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x4000000) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32], 0x64}}, 0xc000) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x200400c4) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x0, 0xfe81, 0x0, 0x7, 0xd, 0x5, 0x1, 0x6}, 0x0) (async) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x10000a0) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000d80)) (async) getuid() (async) sendmsg$unix(r1, &(0x7f0000000e40)={&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b40), 0x0, 0x0, 0x0, 0x20048080}, 0x2004c080) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6, 0x0, r8}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) (async) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000240)='%*.(\x00', &(0x7f0000000300)='batadv0\x00', &(0x7f0000000340)='/dev/snd/seq\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='&\x00', 0x0, &(0x7f0000000480)=']:+)\x00', &(0x7f00000004c0)='!-\x00']}, &(0x7f0000000780)={[0x0, &(0x7f00000005c0)='$\x00', &(0x7f0000000600)='wlan0\x00', &(0x7f0000000640)='/dev/snd/seq\x00', 0x0, &(0x7f0000000740)='\x00']}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) (async) syz_io_uring_submit(r10, r11, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x3100}}) (async) io_uring_enter(r9, 0x47f6, 0x0, 0x4, 0x0, 0x0) 616.212447ms ago: executing program 2 (id=877): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r6, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) write$binfmt_elf64(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4682010103fcffffffffffffff03003e000500000000010000000000004000000060b8f4a67718706a00000000000000003e00380001"], 0x78) close(r8) execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)) syz_emit_ethernet(0x34e, &(0x7f0000000b80)={@local, @remote, @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "64f9ff", 0x310, 0x3b, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@dstopts={0x33, 0x1, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x100}]}, @dstopts={0x21, 0x34, '\x00', [@ra={0x5, 0x2, 0xd}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x8b}, @ra={0x5, 0x2, 0x9}, @generic={0x8, 0xde, "8c9d03be9b08a69516a1113d5699c9653e9a1f9c41243ba273c4d5a62c36d94761abc821e4010c6d652d33dab8418daa5cc59f5f2cd2049fd9e34b5ae6aa3a2a7b499bca46e6f378d9745f0f8a33d4897a3b9d67c5f8712324369eb38c2a6c13bf16e6756b60d1a84c52c79a1741d40180e6cfdc932a8355d55d98b18a05d3dde210c149f3988d6dad243985168eac9c1bc399a51596bd9079758f2b96fc1dd4f0067064adc50e52cd647e2fff731a619d7a70e4424a7084ea8176903a7337967bd8864f525b5f90ddb7f479c4602451c1a74b4f2dd8a53eb1192e2338d1"}, @generic={0xa0, 0x8f, "c4252e4c1bb8d967782f62e20beb4c599373e6043f41ce73e0269ba7cce1d2fd2e8adbc5e5f981ee3a85d52bf90e4c8f86e623c7c81e2706f8fdc5dd4845389070bc20b2509d2b6dd43e118852be40d604439e5a52eb3914b3b6326bb2d6643556bc47c52f05bcd1790f632a417ab173ef6d7787d873eb362806b2350743619f3a303ce1d65d660d420a166b128c54"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0x5, 0x101, [0x5, 0xf99]}}, @ra={0x5, 0x2, 0x5}]}, @srh={0x0, 0xc, 0x4, 0x6, 0x3, 0xadffa238bee1a243, 0x7, [@dev={0xfe, 0x80, '\x00', 0x41}, @mcast1, @empty, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x42}]}, @srh={0x33, 0x10, 0x4, 0x8, 0x0, 0x70, 0x3, [@empty, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0xf}, @remote, @local, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @fragment={0x2b, 0x0, 0x9, 0x0, 0x0, 0x0, 0x66}, @fragment={0x16, 0x0, 0x3d, 0x0, 0x0, 0xc, 0x68}, @routing={0x32, 0x8, 0x0, 0x4e, 0x0, [@dev={0xfe, 0x80, '\x00', 0x16}, @local, @ipv4={'\x00', '\xff\xff', @local}, @loopback]}]}}}}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) 590.093251ms ago: executing program 4 (id=878): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=@newsa={0x148, 0x1a, 0x713, 0x0, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xb1}}]}, 0x148}}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) (async) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f0000000100)) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) (async) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000cc0)=@newsa={0x148, 0x1a, 0x713, 0x0, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xb1}}]}, 0x148}}, 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) 431.945055ms ago: executing program 0 (id=879): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x284, 0x30, 0x400, 0x0, 0x0, {}, [{0x270, 0x1, [@m_mirred={0xa0, 0x9, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x5, 0x2, 0x7ff, 0x1000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6a, 0x3, 0x20000000, 0xa, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x4ef0, 0x0, 0x0, 0x80000}, 0x1}}]}, {0x12, 0x6, "dfd2a6161d4242d05e0c21857d06"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x1cc, 0x17, 0x0, 0x0, {{0x8}, {0xac, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1, 0x0, 0x9}}}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x1}, @IFE_META_PRIO={0x8, 0x3, @val=0x4}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_PRIO={0x8, 0x3, @val=0x4b}, @IFE_META_PRIO={0x8, 0x3, @val=0x4f8}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0xffff8001, 0x8, 0x9, 0xa}}}]}, {0xfb, 0x6, "95a97b995ff76d56301184c3ba7e61dbf0f593870021e134cc2afa82ea78578dfc542cb6849b3a5703ebd612d15295458b948df52332d66ee9cc363640b050b9015de9c8038bf6afc0d24b6ffc9e31b5cc07edf3dea5839e32d26c7d87e507c446da00043196a4a18f99037bf952d8660e2d1dc501e4bd1a8f919e764b054237de257e69ff4e1545b8396200000000000000000000000000000001000000000e34f528cf62690e9a70cabc34188bd957ace1f23633ef3fddffd4e0c3fae8a51ebf1c18e922259a94992338b2c79549d2de179362507e6cfae0e25dcb4a260aaaae2c894f1cb76cf8a8c9440459a11782ecc73343de17cc"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x404}, 0x8010) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) openat$sysfs(0xffffff9c, &(0x7f0000000380)='/sys/kernel/profiling', 0x101000, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffd5, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x12, 0x14, 0x601, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 431.672369ms ago: executing program 4 (id=880): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x8, @mcast1, 0x5}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x9, 0x4) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@hopopts_2292={{0xbc, 0x29, 0x36, {0x87, 0x14, '\x00', [@pad1, @calipso={0x7, 0x58, {0x1, 0x14, 0x3, 0xff7f, [0x10, 0x1, 0x4b72, 0x7, 0x1444, 0x1, 0x8000000000000001, 0x8, 0xfffffffffffffffd, 0x100]}}, @hao={0xc9, 0x10, @empty}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3ff}, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3b}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x1000}}], 0xcc}}], 0x2, 0x4000000) 394.594578ms ago: executing program 0 (id=881): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b000004040001"], 0x18}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01000000", @ANYRES16=r4, @ANYRES64=r2], 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 318.49256ms ago: executing program 4 (id=882): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141181) (async) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x7bd3, &(0x7f0000000200)={0x0, 0x674, 0x4000, 0x2, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) r5 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) (async, rerun: 64) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async, rerun: 64) r7 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f60000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='mlxsw_sp_acl_tcam_vregion_rehash_rollback_failed\x00', r8, 0x0, 0x2}, 0x18) (async) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x10400, 0x0) (async) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') (async) readv(r9, &(0x7f0000000000), 0x2000000000000051) close(r7) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000280)=0x4) (async) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r6, &(0x7f0000000180)=[{&(0x7f00000007c0)="00214717a707001d0000030640710a069d317ebbaaa6b6eb35cc265143ba38207d9590ffea0bdc8900033a639a6e65bb66e2", 0x32}], 0x1, 0x807, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x8, 0x0, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) (async, rerun: 64) r10 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) (rerun: 64) shmdt(r10) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {}, 0x1}) (async, rerun: 32) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) 318.150795ms ago: executing program 4 (id=883): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x0, 0x0, 0x30}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000000)) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x6, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r7, 0x58, &(0x7f0000000180)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x19, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffbf, 0x10, &(0x7f0000000000), 0x3}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r8}, 0x10) r9 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r10 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000280)) openat$binfmt(0xffffffffffffff9c, r10, 0x42, 0x1ff) inotify_init() 313.171366ms ago: executing program 0 (id=884): write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d", 0x13) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0000008019000000000000000000000000000000000000c9ff00", [0x0, 0x2000000000001]}}) 119.223266ms ago: executing program 0 (id=885): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x47, 0x53, 0x7fff, 0x4, @local, @mcast2, 0x7, 0x20, 0x9, 0x80000000}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipmr_getroute={0x0, 0x1a, 0x400, 0x70bd28, 0x25dfdbfe, {0x80, 0x80, 0x20, 0x10, 0xfd, 0x2, 0xfe, 0x7, 0xc61f58a2dc8daca}, [""]}, 0x3c}, 0x1, 0xffffffea, 0x0, 0x40010}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipmr_getroute={0x0, 0x1a, 0x400, 0x70bd28, 0x25dfdbfe, {0x80, 0x80, 0x20, 0x10, 0xfd, 0x2, 0xfe, 0x7, 0xc61f58a2dc8daca}, [""]}, 0x3c}, 0x1, 0xffffffea, 0x0, 0x40010}, 0x0) 41.472151ms ago: executing program 0 (id=886): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, r0, 0x0, 0x0) r1 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x8084) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x23011, r1, 0x6a855000) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) write$qrtrtun(r7, &(0x7f0000000400)="9e81a19053bbdc23", 0x8) (rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x0) (async) syz_clone(0x6044000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 0s ago: executing program 1 (id=887): sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000428bd7000ff00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x40) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:1290' (ED25519) to the list of known hosts. [ 41.167847][ T5888] cgroup: Unknown subsys name 'net' [ 41.308838][ T5888] cgroup: Unknown subsys name 'cpuset' [ 41.313173][ T5888] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.275019][ T5888] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.441502][ T5979] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.445393][ T5980] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.446727][ T62] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.447936][ T5980] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.450430][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.452252][ T5980] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.455873][ T5983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.456544][ T5980] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.458664][ T5983] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.461676][ T5980] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.463646][ T5988] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.465165][ T5980] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.472640][ T5985] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.474838][ T5988] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.476694][ T5985] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.480314][ T5985] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.482567][ T5985] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.485395][ T5983] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.490715][ T5979] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.493211][ T5979] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.738157][ T5981] chnl_net:caif_netlink_parms(): no params data found [ 46.754904][ T5973] chnl_net:caif_netlink_parms(): no params data found [ 46.852381][ T5984] chnl_net:caif_netlink_parms(): no params data found [ 46.856849][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 46.947051][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.949515][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.951739][ T5973] bridge_slave_0: entered allmulticast mode [ 46.954223][ T5973] bridge_slave_0: entered promiscuous mode [ 46.987623][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.989708][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.991757][ T5981] bridge_slave_0: entered allmulticast mode [ 46.994142][ T5981] bridge_slave_0: entered promiscuous mode [ 47.000909][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.002970][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.004984][ T5973] bridge_slave_1: entered allmulticast mode [ 47.008200][ T5973] bridge_slave_1: entered promiscuous mode [ 47.015181][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.017472][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.019530][ T5981] bridge_slave_1: entered allmulticast mode [ 47.021909][ T5981] bridge_slave_1: entered promiscuous mode [ 47.111251][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.122320][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.259042][ T5981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.291185][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.294653][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.297873][ T5972] bridge_slave_0: entered allmulticast mode [ 47.301739][ T5972] bridge_slave_0: entered promiscuous mode [ 47.305221][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.308374][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.311435][ T5984] bridge_slave_0: entered allmulticast mode [ 47.315262][ T5984] bridge_slave_0: entered promiscuous mode [ 47.320135][ T5973] team0: Port device team_slave_0 added [ 47.323692][ T5981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.340247][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.343371][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.347917][ T5972] bridge_slave_1: entered allmulticast mode [ 47.351837][ T5972] bridge_slave_1: entered promiscuous mode [ 47.378979][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.381208][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.383446][ T5984] bridge_slave_1: entered allmulticast mode [ 47.386518][ T5984] bridge_slave_1: entered promiscuous mode [ 47.390625][ T5973] team0: Port device team_slave_1 added [ 47.490413][ T5981] team0: Port device team_slave_0 added [ 47.495579][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.521521][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.523837][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.532750][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.538310][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.540927][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.549490][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.555251][ T5981] team0: Port device team_slave_1 added [ 47.560045][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.564362][ T5984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.573677][ T5984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.633001][ T5972] team0: Port device team_slave_0 added [ 47.668355][ T5972] team0: Port device team_slave_1 added [ 47.709594][ T5984] team0: Port device team_slave_0 added [ 47.712837][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.715816][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.727225][ T5981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.775142][ T5984] team0: Port device team_slave_1 added [ 47.778347][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.780497][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.788494][ T5981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.809122][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.811310][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.820305][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.884702][ T5973] hsr_slave_0: entered promiscuous mode [ 47.887261][ T5973] hsr_slave_1: entered promiscuous mode [ 47.890569][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.892733][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.902154][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.912866][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.915828][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.926567][ T5984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.933987][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.937368][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.947692][ T5984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.013184][ T5981] hsr_slave_0: entered promiscuous mode [ 48.015378][ T5981] hsr_slave_1: entered promiscuous mode [ 48.017923][ T5981] debugfs: 'hsr0' already exists in 'hsr' [ 48.019731][ T5981] Cannot create hsr debugfs directory [ 48.080077][ T5972] hsr_slave_0: entered promiscuous mode [ 48.082735][ T5972] hsr_slave_1: entered promiscuous mode [ 48.085645][ T5972] debugfs: 'hsr0' already exists in 'hsr' [ 48.087448][ T5972] Cannot create hsr debugfs directory [ 48.250328][ T5984] hsr_slave_0: entered promiscuous mode [ 48.253429][ T5984] hsr_slave_1: entered promiscuous mode [ 48.256327][ T5984] debugfs: 'hsr0' already exists in 'hsr' [ 48.258755][ T5984] Cannot create hsr debugfs directory [ 48.486899][ T5979] Bluetooth: hci0: command tx timeout [ 48.496108][ T5979] Bluetooth: hci1: command tx timeout [ 48.566221][ T5979] Bluetooth: hci3: command tx timeout [ 48.566604][ T62] Bluetooth: hci2: command tx timeout [ 48.600312][ T5973] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.608317][ T5973] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.625571][ T5973] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.631333][ T5973] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.656308][ T5972] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.662745][ T5972] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.676574][ T5972] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.687041][ T5972] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.720605][ T5981] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.734677][ T5981] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.741344][ T5981] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.761372][ T5981] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.798635][ T5984] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.805269][ T5984] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.814890][ T5984] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.823412][ T5984] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.891155][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.914250][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.935874][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.953295][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.956317][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.969157][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.972192][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.989756][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.002920][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.005684][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.024191][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.026363][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.042901][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.057032][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.077887][ T5981] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.091131][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.094289][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.106495][ T5984] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.116703][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.118972][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.125270][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.128173][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.138591][ T5972] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.142721][ T5972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.162749][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.165812][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.243427][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.277919][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.312031][ T5973] veth0_vlan: entered promiscuous mode [ 49.323198][ T5973] veth1_vlan: entered promiscuous mode [ 49.352203][ T5972] veth0_vlan: entered promiscuous mode [ 49.360496][ T5972] veth1_vlan: entered promiscuous mode [ 49.363300][ T5973] veth0_macvtap: entered promiscuous mode [ 49.374994][ T5973] veth1_macvtap: entered promiscuous mode [ 49.401191][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.411413][ T5981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.416309][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.431422][ T5984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.445238][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.449544][ T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.458966][ T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.462296][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.467065][ T5972] veth0_macvtap: entered promiscuous mode [ 49.490101][ T5972] veth1_macvtap: entered promiscuous mode [ 49.516257][ T5981] veth0_vlan: entered promiscuous mode [ 49.520477][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.541895][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.546728][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.549757][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.551951][ T5981] veth1_vlan: entered promiscuous mode [ 49.569663][ T5984] veth0_vlan: entered promiscuous mode [ 49.572398][ T81] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.576847][ T81] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.589378][ T81] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.592204][ T81] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.600297][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.603099][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.611753][ T5984] veth1_vlan: entered promiscuous mode [ 49.649026][ T5973] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.652458][ T5981] veth0_macvtap: entered promiscuous mode [ 49.667518][ T5981] veth1_macvtap: entered promiscuous mode [ 49.679029][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.682078][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.692595][ T5984] veth0_macvtap: entered promiscuous mode [ 49.704844][ T5984] veth1_macvtap: entered promiscuous mode [ 49.727776][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.730617][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.730852][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.734794][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.748270][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.752591][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.769828][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.783214][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.786825][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.793580][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.800933][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.804990][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.812827][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.818092][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.860808][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.864841][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.900642][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.903208][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.916136][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.919451][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.943588][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.946659][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.087120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.245876][ T6077] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.382927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 50.586034][ T62] Bluetooth: hci1: command tx timeout [ 50.587762][ T62] Bluetooth: hci0: command tx timeout [ 50.648471][ T5979] Bluetooth: hci2: command tx timeout [ 50.648518][ T62] Bluetooth: hci3: command tx timeout [ 50.895647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.226506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.279954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!! [ 51.287703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.392224][ T6094] netlink: 'syz.1.5': attribute type 1 has an invalid length. [ 51.395835][ T6094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5'. [ 51.500658][ T40] audit: type=1804 audit(1757515133.665:2): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5" name="/newroot/1/bus/bus" dev="overlay" ino=31 res=1 errno=0 [ 51.526148][ T40] audit: type=1804 audit(1757515133.675:3): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5" name="/newroot/1/bus/bus" dev="overlay" ino=31 res=1 errno=0 [ 51.714036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 51.836139][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.840283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.514010][ T6111] input: syz1 as /devices/virtual/input/input5 [ 52.658027][ T62] Bluetooth: hci0: command tx timeout [ 52.659774][ T62] Bluetooth: hci1: command tx timeout [ 52.726140][ T5979] Bluetooth: hci3: command tx timeout [ 52.737329][ T5979] Bluetooth: hci2: command tx timeout [ 52.796068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 54.061451][ T6135] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 54.184976][ T6140] kAFS: No cell specified [ 54.188131][ T6139] loop2: detected capacity change from 0 to 7 [ 54.192165][ T6139] Dev loop2: unable to read RDB block 7 [ 54.194381][ T6139] loop2: unable to read partition table [ 54.197352][ T6139] loop2: partition table beyond EOD, truncated [ 54.197375][ T6139] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 54.321720][ T6140] lo speed is unknown, defaulting to 1000 [ 54.323702][ T6140] lo speed is unknown, defaulting to 1000 [ 54.328162][ T6140] lo speed is unknown, defaulting to 1000 [ 54.336076][ T6140] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 54.348049][ T6140] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 54.639786][ T6140] lo speed is unknown, defaulting to 1000 [ 54.646764][ T6140] lo speed is unknown, defaulting to 1000 [ 54.652724][ T6140] lo speed is unknown, defaulting to 1000 [ 54.657593][ T6140] lo speed is unknown, defaulting to 1000 [ 54.726489][ T5979] Bluetooth: hci1: command tx timeout [ 54.726507][ T62] Bluetooth: hci0: command tx timeout [ 54.935242][ T5979] Bluetooth: hci3: command tx timeout [ 54.937081][ T62] Bluetooth: hci2: command tx timeout [ 55.059489][ T6154] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23'. [ 57.882615][ T6193] pim6reg: entered allmulticast mode [ 58.189445][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 58.192359][ T6203] bridge_slave_1: left allmulticast mode [ 58.194271][ T6203] bridge_slave_1: left promiscuous mode [ 58.197346][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.234393][ T6203] bridge_slave_0: left allmulticast mode [ 58.236279][ T6203] bridge_slave_0: left promiscuous mode [ 58.238254][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.372937][ T6188] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 58.375084][ T6188] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 58.379592][ T6188] vhci_hcd vhci_hcd.0: Device attached [ 58.577373][ T6207] vhci_hcd: connection closed [ 58.578831][ T1144] vhci_hcd: stop threads [ 58.583008][ T1144] vhci_hcd: release socket [ 58.585848][ T1144] vhci_hcd: disconnect device [ 59.778449][ T6240] netlink: 3 bytes leftover after parsing attributes in process `syz.3.36'. [ 59.791396][ T6240] batadv1: entered allmulticast mode [ 59.895464][ T6241] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 59.899722][ T6241] block device autoloading is deprecated and will be removed. [ 61.184730][ T6252] syz.2.40 (6252): drop_caches: 2 [ 61.894865][ T6266] process 'syz.2.43' launched './file0' with NULL argv: empty string added [ 61.970613][ T6266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.43'. [ 63.772775][ T6294] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 63.778187][ T6294] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 63.829042][ T6294] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 63.833755][ T6294] overlayfs: failed to look up (tracing) for ino (-66) [ 65.370047][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 65.373300][ T6332] netlink: 'syz.3.59': attribute type 20 has an invalid length. [ 65.375894][ T6332] netlink: 'syz.3.59': attribute type 21 has an invalid length. [ 65.390274][ T6332] Zero length message leads to an empty skb [ 65.658919][ T6339] netlink: 71 bytes leftover after parsing attributes in process `syz.3.59'. [ 67.296577][ T40] audit: type=1800 audit(1757515149.515:4): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.64" name="bus" dev="overlay" ino=108 res=0 errno=0 [ 67.405323][ T6368] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 67.993963][ T6379] 9pnet_fd: Insufficient options for proto=fd [ 68.009628][ T6386] loop2: detected capacity change from 0 to 7 [ 68.014336][ T5977] Dev loop2: unable to read RDB block 7 [ 68.017511][ T5977] loop2: unable to read partition table [ 68.019447][ T5977] loop2: partition table beyond EOD, truncated [ 68.051220][ T6386] Dev loop2: unable to read RDB block 7 [ 68.052960][ T6386] loop2: unable to read partition table [ 68.054813][ T6386] loop2: partition table beyond EOD, truncated [ 68.058650][ T6386] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 68.117638][ T6390] syz.1.75 uses obsolete (PF_INET,SOCK_PACKET) [ 68.534972][ T6405] netlink: 'syz.1.79': attribute type 12 has an invalid length. [ 69.626961][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 69.640177][ T6424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.709047][ T6424] vlan3: entered allmulticast mode [ 69.710708][ T6424] bond1: entered allmulticast mode [ 69.837662][ T6428] loop2: detected capacity change from 0 to 7 [ 69.864031][ T6428] Dev loop2: unable to read RDB block 7 [ 69.865873][ T6428] loop2: unable to read partition table [ 69.867834][ T6428] loop2: partition table beyond EOD, truncated [ 69.870266][ T6428] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 70.191250][ T54] cfg80211: failed to load regulatory.db [ 70.288239][ T6443] netlink: 56 bytes leftover after parsing attributes in process `syz.1.85'. [ 70.918890][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.918976][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.370421][ T6460] netlink: 'syz.3.92': attribute type 12 has an invalid length. [ 72.996605][ T2294] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 73.363499][ T6483] random: crng reseeded on system resumption [ 73.722279][ T6490] loop6: detected capacity change from 0 to 7 [ 73.730526][ T6490] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 73.732924][ T6490] loop6: partition table partially beyond EOD, truncated [ 73.736541][ T6490] loop6: p1 size 262016 extends beyond EOD, truncated [ 73.870240][ T6492] dummy0: entered promiscuous mode [ 73.873677][ T6492] bond0: entered promiscuous mode [ 73.875910][ T6492] bond_slave_0: entered promiscuous mode [ 73.879102][ T6492] bond_slave_1: entered promiscuous mode [ 73.883034][ T6492] hsr1: entered allmulticast mode [ 73.885186][ T6492] dummy0: entered allmulticast mode [ 73.887524][ T6492] bond0: entered allmulticast mode [ 73.889707][ T6492] bond_slave_0: entered allmulticast mode [ 73.892093][ T6492] bond_slave_1: entered allmulticast mode [ 73.939792][ T6494] fuse: Unknown parameter 'ÁÖÅ0x0000000000000005' [ 74.319728][ T6505] netlink: 'syz.2.103': attribute type 12 has an invalid length. [ 76.619353][ T40] audit: type=1326 audit(1757515158.835:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 76.628755][ T40] audit: type=1326 audit(1757515158.835:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 76.629265][ T6590] pim6reg: entered allmulticast mode [ 76.637309][ T40] audit: type=1326 audit(1757515158.835:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 76.645621][ T40] audit: type=1326 audit(1757515158.835:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 76.655236][ T40] audit: type=1326 audit(1757515158.835:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 76.663032][ T40] audit: type=1326 audit(1757515158.835:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 76.671397][ T40] audit: type=1326 audit(1757515158.835:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 76.679715][ T40] audit: type=1326 audit(1757515158.835:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 76.688121][ T40] audit: type=1326 audit(1757515158.835:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 76.701475][ T40] audit: type=1326 audit(1757515158.835:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6551 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 77.202519][ T6551] pim6reg: left allmulticast mode [ 77.711060][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.120'. [ 78.214147][ T6636] lo speed is unknown, defaulting to 1000 [ 78.686731][ T6643] i2c i2c-1: Invalid block write size 34 [ 78.711391][ T6643] mkiss: ax0: crc mode is auto. [ 78.788259][ T6646] netlink: 332 bytes leftover after parsing attributes in process `syz.2.126'. [ 78.803409][ T6646] netlink: 332 bytes leftover after parsing attributes in process `syz.2.126'. [ 81.895423][ T6726] binder: 6725:6726 ioctl c0306201 800001c0 returned -22 [ 82.096813][ T6735] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 82.140976][ T6734] netlink: zone id is out of range [ 82.143466][ T6734] netlink: zone id is out of range [ 82.145620][ T6734] netlink: zone id is out of range [ 82.148407][ T6734] netlink: zone id is out of range [ 82.150520][ T6734] netlink: zone id is out of range [ 82.152571][ T6734] netlink: zone id is out of range [ 82.156137][ T6734] netlink: zone id is out of range [ 82.159943][ T6734] netlink: zone id is out of range [ 82.162020][ T6734] netlink: zone id is out of range [ 83.240870][ T6787] lo speed is unknown, defaulting to 1000 [ 83.304729][ T6795] ======================================================= [ 83.304729][ T6795] WARNING: The mand mount option has been deprecated and [ 83.304729][ T6795] and is ignored by this kernel. Remove the mand [ 83.304729][ T6795] option from the mount to silence this warning. [ 83.304729][ T6795] ======================================================= [ 83.372317][ T6795] netlink: 'syz.3.153': attribute type 1 has an invalid length. [ 83.395161][ T6795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.405707][ T6795] bond1: (slave geneve2): making interface the new active one [ 83.410747][ T6795] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 83.548479][ T6807] xt_l2tp: unknown flags: 51 [ 83.566096][ T6807] lo speed is unknown, defaulting to 1000 [ 83.625338][ T6807] lo speed is unknown, defaulting to 1000 [ 84.184749][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'. [ 84.648320][ T6853] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 84.966159][ T6860] mmap: syz.2.169 (6860) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.607399][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 86.774036][ T6895] macvlan2: entered allmulticast mode [ 86.776217][ T6895] veth1_vlan: entered allmulticast mode [ 86.780281][ T6895] veth1_vlan: left allmulticast mode [ 87.391217][ T6921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.181'. [ 87.498056][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 87.498067][ T40] audit: type=1326 audit(1757515169.725:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.3.181" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7fc00000 [ 87.511995][ T6922] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 87.514966][ T6922] UDF-fs: Scanning with blocksize 2048 failed [ 87.519936][ T6922] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 87.523234][ T6922] UDF-fs: Scanning with blocksize 4096 failed [ 87.694926][ T6924] loop2: detected capacity change from 0 to 7 [ 87.698100][ T6924] Dev loop2: unable to read RDB block 7 [ 87.699900][ T6924] loop2: unable to read partition table [ 87.701895][ T6924] loop2: partition table beyond EOD, truncated [ 87.703922][ T6924] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 87.991756][ T6935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.185'. [ 88.116478][ T6935] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.119257][ T6935] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.131291][ T40] audit: type=1326 audit(1757515170.355:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.0.186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 88.182710][ T6935] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.192684][ T40] audit: type=1326 audit(1757515170.355:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.0.186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 88.202673][ T40] audit: type=1326 audit(1757515170.365:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.0.186" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 88.212073][ T40] audit: type=1326 audit(1757515170.365:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.0.186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 88.221732][ T40] audit: type=1326 audit(1757515170.365:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.0.186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 88.230533][ T40] audit: type=1326 audit(1757515170.365:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.0.186" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 88.231505][ T6935] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.240924][ T6935] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.242976][ T40] audit: type=1326 audit(1757515170.365:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.0.186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 88.253596][ T40] audit: type=1326 audit(1757515170.365:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.0.186" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 88.257011][ T6935] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.263660][ T40] audit: type=1326 audit(1757515170.365:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6938 comm="syz.0.186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 88.288301][ T6935] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.290714][ T6935] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.302611][ T6935] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.383458][ T6935] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.389318][ T6935] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.416339][ T6955] loop2: detected capacity change from 0 to 7 [ 88.418971][ T6955] Dev loop2: unable to read RDB block 7 [ 88.420774][ T6955] loop2: unable to read partition table [ 88.422793][ T6955] loop2: partition table beyond EOD, truncated [ 88.425415][ T6955] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 88.539342][ T6935] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.588991][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 89.591873][ T6974] netlink: 'syz.1.197': attribute type 5 has an invalid length. [ 89.594294][ T6974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.197'. [ 89.601259][ T6974] geneve2: entered promiscuous mode [ 89.602982][ T6974] geneve2: entered allmulticast mode [ 89.605582][ T81] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 89.609066][ T81] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 89.612639][ T81] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 89.615567][ T81] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 89.634063][ T6976] netlink: 136 bytes leftover after parsing attributes in process `syz.3.196'. [ 89.815319][ T6990] netlink: 'syz.1.203': attribute type 10 has an invalid length. [ 89.843208][ T6990] syz_tun: entered promiscuous mode [ 89.858384][ T6990] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 90.086177][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.246376][ T62] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.326114][ T62] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.406296][ T62] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.059834][ T7022] vlan4: entered promiscuous mode [ 91.062178][ T7022] vlan4: entered allmulticast mode [ 91.064036][ T7022] hsr_slave_1: entered allmulticast mode [ 91.094708][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 91.169095][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 91.239588][ T7027] wireguard0: entered promiscuous mode [ 91.248055][ T7027] wireguard0: entered allmulticast mode [ 92.038205][ T7054] netlink: 66456 bytes leftover after parsing attributes in process `syz.3.218'. [ 92.166265][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.326171][ T62] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.406720][ T62] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.486404][ T62] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.550563][ T7054] team0 (unregistering): Port device team_slave_0 removed [ 92.558711][ T7054] team0 (unregistering): Port device team_slave_1 removed [ 93.205162][ T7068] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.213493][ T7068] veth1_macvtap: left promiscuous mode [ 93.215850][ T7068] macsec0: entered promiscuous mode [ 93.547913][ T7099] netlink: 36 bytes leftover after parsing attributes in process `syz.0.228'. [ 94.008201][ T7111] lo speed is unknown, defaulting to 1000 [ 94.256188][ T5979] Bluetooth: hci0: command 0x0c1a tx timeout [ 94.307036][ T7121] fuse: Bad value for 'fd' [ 94.416998][ T5979] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.486290][ T5979] Bluetooth: hci2: command 0x0c1a tx timeout [ 94.576126][ T5979] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.385224][ T7161] netlink: 'syz.1.248': attribute type 1 has an invalid length. [ 95.399506][ T7161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.545633][ T7167] netlink: 'syz.0.250': attribute type 5 has an invalid length. [ 95.589777][ T7168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.249'. [ 95.597644][ T7168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.249'. [ 96.205794][ T7181] 9pnet_fd: Insufficient options for proto=fd [ 96.545406][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'. [ 96.579984][ T7189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.257'. [ 96.583890][ T7189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.257'. [ 96.646074][ T62] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.652326][ T7189] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.796381][ T2294] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.896064][ T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 96.957347][ T2294] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 96.961383][ T2294] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.964192][ T2294] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.971100][ T2294] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 96.976269][ T2294] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.979552][ T2294] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.983506][ T2294] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.987938][ T2294] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 96.991058][ T2294] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.994463][ T2294] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.997485][ T2294] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.000888][ T2294] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 97.003877][ T2294] usb 5-1: config 0 interface 0 has no altsetting 0 [ 97.007804][ T2294] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.010668][ T2294] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.014050][ T2294] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 97.017260][ T2294] usb 5-1: config 0 interface 0 has no altsetting 0 [ 97.020656][ T2294] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.023487][ T2294] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.027045][ T2294] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 97.033360][ T2294] usb 5-1: config 0 interface 0 has no altsetting 0 [ 97.046662][ T2294] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.047581][ T7194] netlink: 'syz.2.258': attribute type 2 has an invalid length. [ 97.050287][ T2294] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.052565][ T7194] netlink: 119 bytes leftover after parsing attributes in process `syz.2.258'. [ 97.055808][ T2294] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 97.055823][ T2294] usb 5-1: config 0 interface 0 has no altsetting 0 [ 97.057821][ T2294] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.066348][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 97.067062][ T2294] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.071321][ T34] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 97.072290][ T2294] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 97.075124][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.078396][ T2294] usb 5-1: config 0 interface 0 has no altsetting 0 [ 97.082554][ T34] usb 8-1: config 0 descriptor?? [ 97.084754][ T2294] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.088328][ T2294] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.091764][ T2294] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 97.093329][ T34] as10x_usb: device has been detected [ 97.094837][ T2294] usb 5-1: config 0 interface 0 has no altsetting 0 [ 97.097482][ T2294] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 97.101635][ T2294] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 97.102086][ T34] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 97.104298][ T2294] usb 5-1: Product: syz [ 97.104308][ T2294] usb 5-1: Manufacturer: syz [ 97.109811][ T2294] usb 5-1: SerialNumber: syz [ 97.112718][ T2294] usb 5-1: config 0 descriptor?? [ 97.116841][ T34] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 97.117036][ T2294] yurex 5-1:0.0: Could not submitting URB [ 97.121513][ T2294] yurex 5-1:0.0: probe with driver yurex failed with error -5 [ 97.146490][ T34] as10x_usb: error during firmware upload part1 [ 97.148726][ T34] Registered device nBox DVB-T Dongle [ 97.292688][ T7190] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 97.306610][ T7190] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 97.310047][ T7190] kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 97.312712][ T7190] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 97.317116][ T7190] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 97.320071][ T7190] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 97.322808][ T7190] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 97.326861][ T7190] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 97.330418][ T7190] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 97.343873][ T7200] tmpfs: Unknown parameter 'grpquota@' [ 97.351807][ T34] usb 8-1: USB disconnect, device number 2 [ 97.381812][ T34] Unregistered device nBox DVB-T Dongle [ 97.385007][ T34] as10x_usb: device has been disconnected [ 98.336284][ T7226] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 98.338470][ T7226] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.341882][ T7226] vhci_hcd vhci_hcd.0: Device attached [ 98.493152][ T7226] Device name cannot be null; rc = [-22] [ 98.502482][ T7232] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 98.507745][ T7226] siw: device registration error -23 [ 98.840355][ T141] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 98.968022][ T7227] vhci_hcd: connection reset by peer [ 98.974243][ T6588] vhci_hcd: stop threads [ 98.977474][ T6588] vhci_hcd: release socket [ 98.977561][ T6588] vhci_hcd: disconnect device [ 99.556919][ T1022] usb 5-1: USB disconnect, device number 2 [ 101.915020][ T7299] netlink: 'syz.1.282': attribute type 12 has an invalid length. [ 102.524085][ T7315] netlink: 72 bytes leftover after parsing attributes in process `syz.0.285'. [ 102.566946][ T7316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.284'. [ 103.414221][ T7337] cgroup: Invalid name [ 103.415838][ T7337] cgroup: Invalid name [ 103.567975][ T7348] netlink: 72 bytes leftover after parsing attributes in process `syz.1.292'. [ 103.657950][ T7350] binder: BINDER_SET_CONTEXT_MGR already set [ 103.659983][ T7350] binder: 7345:7350 ioctl 4018620d 80004a80 returned -16 [ 103.916077][ T141] vhci_hcd: vhci_device speed not set [ 104.603535][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 104.619115][ T7360] bond_slave_0: entered promiscuous mode [ 104.621749][ T7360] bond_slave_1: entered promiscuous mode [ 104.642264][ T7360] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 104.787334][ T7370] capability: warning: `syz.1.297' uses deprecated v2 capabilities in a way that may be insecure [ 105.735383][ T24] libceph: connect (1)[c::]:6789 error -101 [ 105.737970][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 105.742035][ T24] libceph: connect (1)[c::]:6789 error -101 [ 105.744213][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 105.854672][ T7383] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 105.944276][ T1140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.007314][ T24] libceph: connect (1)[c::]:6789 error -101 [ 106.009983][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 106.107482][ T1140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.166186][ T1140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.217838][ T5979] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.221590][ T5979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.224174][ T5979] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.227453][ T5979] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.229994][ T5979] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.411547][ T1140] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.420126][ T7382] ceph: No mds server is up or the cluster is laggy [ 106.451184][ T7391] lo speed is unknown, defaulting to 1000 [ 106.509307][ T7394] netlink: 'syz.2.305': attribute type 1 has an invalid length. [ 106.543544][ T7394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.096894][ T1140] bond1 (unregistering): (slave geneve2): Releasing active interface [ 107.312619][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 107.434774][ T1140] bond0 (unregistering): left promiscuous mode [ 107.438074][ T1140] bond_slave_0: left promiscuous mode [ 107.440835][ T1140] bond_slave_1: left promiscuous mode [ 107.444914][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.449300][ T1140] bond_slave_0: left allmulticast mode [ 107.454207][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.460442][ T1140] bond_slave_1: left allmulticast mode [ 107.463884][ T1140] bond0 (unregistering): Released all slaves [ 107.539970][ T1140] bond1 (unregistering): Released all slaves [ 107.574785][ T7391] chnl_net:caif_netlink_parms(): no params data found [ 107.656284][ T2294] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 107.734948][ T7391] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.746972][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.750475][ T7391] bridge_slave_0: entered allmulticast mode [ 107.754302][ T7391] bridge_slave_0: entered promiscuous mode [ 107.776318][ T7435] loop4: detected capacity change from 0 to 524287935 [ 107.806065][ T2294] usb 7-1: Using ep0 maxpacket: 8 [ 107.810548][ T2294] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.814853][ T2294] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.818593][ T7391] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.819002][ T2294] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.822200][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.826507][ T2294] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.826547][ T2294] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.826563][ T2294] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.844746][ T7391] bridge_slave_1: entered allmulticast mode [ 107.859882][ T7391] bridge_slave_1: entered promiscuous mode [ 107.960637][ T7391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.982456][ T7391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.043692][ T2294] usb 7-1: GET_CAPABILITIES returned 0 [ 108.046836][ T2294] usbtmc 7-1:16.0: can't read capabilities [ 108.054761][ T7391] team0: Port device team_slave_0 added [ 108.079957][ T7391] team0: Port device team_slave_1 added [ 108.114921][ T7446] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 108.119910][ T7446] overlayfs: missing 'lowerdir' [ 108.176148][ T1140] dummy0: left promiscuous mode [ 108.193671][ T1140] hsr_slave_0: left promiscuous mode [ 108.197995][ T1140] hsr_slave_1: left promiscuous mode [ 108.202595][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.207373][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.212363][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.215733][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.253326][ T1140] veth1_macvtap: left promiscuous mode [ 108.255856][ T1140] veth0_macvtap: left promiscuous mode [ 108.259196][ T5979] Bluetooth: hci2: command tx timeout [ 108.259654][ T1140] veth1_vlan: left promiscuous mode [ 108.266288][ T1140] veth0_vlan: left promiscuous mode [ 108.373858][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 108.439788][ T7446] use of bytesused == 0 is deprecated and will be removed in the future, [ 108.443676][ T7446] use the actual size instead. [ 108.454912][ T1140] pim6reg (unregistering): left allmulticast mode [ 108.902266][ T2294] usb 7-1: USB disconnect, device number 2 [ 109.669778][ T7391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.672421][ T7391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.684131][ T7391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.688596][ T7391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.691155][ T7391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.701523][ T7391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.849578][ T7391] hsr_slave_0: entered promiscuous mode [ 109.852631][ T7391] hsr_slave_1: entered promiscuous mode [ 109.855416][ T7391] debugfs: 'hsr0' already exists in 'hsr' [ 109.860907][ T7391] Cannot create hsr debugfs directory [ 110.147889][ T7391] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 110.159029][ T7391] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.165716][ T7391] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.172802][ T7391] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.258780][ T7391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.280873][ T7391] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.288697][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.291648][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.305145][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.307434][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.326100][ T5979] Bluetooth: hci2: command tx timeout [ 110.380387][ T7483] 9pnet_fd: p9_fd_create_tcp (7483): problem binding to privport [ 110.523595][ T7391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.696034][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 110.696050][ T40] audit: type=1326 audit(1757515192.905:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.1.326" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 110.704728][ T40] audit: type=1326 audit(1757515192.905:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.1.326" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 110.737950][ T40] audit: type=1326 audit(1757515192.905:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.1.326" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 110.744773][ T40] audit: type=1326 audit(1757515192.905:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.1.326" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 110.751638][ T40] audit: type=1326 audit(1757515192.915:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.1.326" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 110.758294][ T40] audit: type=1326 audit(1757515192.915:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.1.326" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 110.765037][ T40] audit: type=1326 audit(1757515192.915:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.1.326" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 110.771973][ T40] audit: type=1326 audit(1757515192.915:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.1.326" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 110.779217][ T40] audit: type=1326 audit(1757515192.915:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.1.326" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 110.785746][ T40] audit: type=1326 audit(1757515192.915:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.1.326" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701e579 code=0x7ffc0000 [ 110.852003][ T7391] veth0_vlan: entered promiscuous mode [ 110.883650][ T7391] veth1_vlan: entered promiscuous mode [ 110.925490][ T7519] lo speed is unknown, defaulting to 1000 [ 110.927453][ T7532] netlink: 'syz.2.329': attribute type 1 has an invalid length. [ 110.927478][ T7532] netlink: 'syz.2.329': attribute type 1 has an invalid length. [ 110.928507][ T7532] netlink: 'syz.2.329': attribute type 1 has an invalid length. [ 110.939999][ T7391] veth0_macvtap: entered promiscuous mode [ 110.959310][ T7391] veth1_macvtap: entered promiscuous mode [ 110.978130][ T7391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.986856][ T7391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.001644][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.005351][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.017812][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.021174][ T42] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.121013][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.129628][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.154535][ T6588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.157964][ T6588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.282451][ T7525] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 111.397015][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'. [ 111.432313][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 111.500323][ T7553] loop7: detected capacity change from 0 to 3 [ 111.554043][ T7558] netlink: 128 bytes leftover after parsing attributes in process `syz.4.334'. [ 111.575178][ T7553] Dev loop7: unable to read RDB block 3 [ 111.578816][ T7553] loop7: unable to read partition table [ 111.582579][ T7553] loop7: partition table beyond EOD, truncated [ 111.588060][ T7553] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_¿“;Ûo×ìÝ‘µœ¨Õ) failed (rc=-5) [ 112.328485][ T5386] Dev loop7: unable to read RDB block 3 [ 112.330825][ T5386] loop7: unable to read partition table [ 112.333289][ T5386] loop7: partition table beyond EOD, truncated [ 112.406282][ T5979] Bluetooth: hci2: command tx timeout [ 112.441676][ T7588] kernel profiling enabled (shift: 17) [ 114.081106][ T7633] netlink: 'syz.1.350': attribute type 12 has an invalid length. [ 114.486122][ T5979] Bluetooth: hci2: command tx timeout [ 114.557795][ T7639] comedi comedi3: comedi_test: 20263 microvolt, 2 microsecond waveform attached [ 114.776731][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.901457][ T7650] bridge_slave_0 (unregistering): left allmulticast mode [ 114.904126][ T7650] bridge_slave_0 (unregistering): left promiscuous mode [ 114.911192][ T7650] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.180429][ T7705] binder: 7704:7705 ioctl 40047602 80001500 returned -22 [ 116.193717][ T7680] netem: change failed [ 116.337184][ T7713] netlink: 144 bytes leftover after parsing attributes in process `syz.1.370'. [ 116.522456][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 116.522467][ T40] audit: type=1326 audit(1757515198.735:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.4.372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 116.572089][ T40] audit: type=1326 audit(1757515198.735:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.4.372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 116.581615][ T40] audit: type=1326 audit(1757515198.735:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.4.372" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 116.590633][ T40] audit: type=1326 audit(1757515198.735:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.4.372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 116.598915][ T40] audit: type=1326 audit(1757515198.735:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.4.372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 116.607411][ T40] audit: type=1326 audit(1757515198.745:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.4.372" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 116.615399][ T40] audit: type=1326 audit(1757515198.745:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.4.372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 116.621870][ T40] audit: type=1326 audit(1757515198.745:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.4.372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 116.629240][ T40] audit: type=1326 audit(1757515198.745:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.4.372" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 116.637664][ T40] audit: type=1326 audit(1757515198.745:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7718 comm="syz.4.372" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 116.850203][ T6588] Bluetooth: hci4: Frame reassembly failed (-84) [ 117.292393][ T7751] bond0: entered promiscuous mode [ 117.294019][ T7751] bond_slave_0: entered promiscuous mode [ 117.296035][ T7751] bond_slave_1: entered promiscuous mode [ 117.298857][ T7751] dummy0: entered promiscuous mode [ 117.301086][ T7751] hsr1: entered promiscuous mode [ 117.302689][ T7751] hsr1: entered allmulticast mode [ 117.304283][ T7751] bond0: entered allmulticast mode [ 117.305915][ T7751] bond_slave_0: entered allmulticast mode [ 117.308781][ T7751] bond_slave_1: entered allmulticast mode [ 117.310609][ T7751] syz_tun: entered allmulticast mode [ 117.312402][ T7751] dummy0: entered allmulticast mode [ 118.024938][ T7762] wireguard0: entered promiscuous mode [ 118.027277][ T7762] wireguard0: entered allmulticast mode [ 118.449081][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 118.778702][ T7778] lo speed is unknown, defaulting to 1000 [ 118.886220][ T62] Bluetooth: hci4: command 0x1003 tx timeout [ 118.889383][ T5979] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 118.926719][ T7781] net_ratelimit: 4 callbacks suppressed [ 118.926729][ T7781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.386488][ T7801] trusted_key: encrypted_key: key user:syz not found [ 120.307488][ T7851] netlink: 'syz.4.412': attribute type 1 has an invalid length. [ 121.095540][ T7882] netdevsim netdevsim1: Direct firmware load for @ failed with error -2 [ 121.098422][ T7882] netdevsim netdevsim1: Falling back to sysfs fallback for: @ [ 121.121301][ T7884] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 121.128999][ T7884] overlayfs: missing 'lowerdir' [ 121.975492][ T7912] lo speed is unknown, defaulting to 1000 [ 122.640245][ T7928] : entered promiscuous mode [ 122.738846][ T7932] netlink: 136 bytes leftover after parsing attributes in process `syz.0.423'. [ 122.774693][ T7930] lo speed is unknown, defaulting to 1000 [ 123.555639][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.431'. [ 124.218444][ T7968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.433'. [ 124.225064][ T7969] netlink: 40 bytes leftover after parsing attributes in process `syz.2.433'. [ 124.283647][ T7972] netlink: 'syz.2.434': attribute type 11 has an invalid length. [ 124.732763][ T7986] tipc: Enabling of bearer rejected, failed to enable media [ 125.295430][ T8005] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.442'. [ 125.480600][ T8007] warning: `syz.0.443' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.133851][ T8029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.786196][ T8033] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 127.788682][ T8033] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 127.915638][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.451'. [ 128.114485][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'. [ 128.134761][ T8050] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 129.247985][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 129.639085][ T8076] lo speed is unknown, defaulting to 1000 [ 129.835128][ T8087] 9pnet_fd: Insufficient options for proto=fd [ 129.885490][ T8093] 9pnet_fd: Insufficient options for proto=fd [ 130.153679][ T8096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.708254][ T8134] 9pnet_fd: Insufficient options for proto=fd [ 131.355288][ T102] libceph: connect (1)[c::]:6789 error -101 [ 131.357923][ T102] libceph: mon0 (1)[c::]:6789 connect error [ 131.401668][ T8160] ceph: No mds server is up or the cluster is laggy [ 132.327860][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.330041][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.806571][ T8208] binder: 8205:8208 ioctl 8008f512 80000340 returned -22 [ 132.819541][ T8208] tipc: Started in network mode [ 132.821558][ T8208] tipc: Node identity ae1a91068c41, cluster identity 4711 [ 132.825274][ T8208] tipc: Enabled bearer , priority 0 [ 132.829088][ T8208] veth1_vlan: entered allmulticast mode [ 132.838764][ T8208] tipc: Resetting bearer [ 132.940158][ T8205] tipc: Disabling bearer [ 133.116061][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 133.116075][ T40] audit: type=1326 audit(1757515215.335:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8213 comm="syz.4.506" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ce579 code=0x0 [ 133.830754][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'. [ 133.835147][ T8220] netlink: 173 bytes leftover after parsing attributes in process `syz.2.508'. [ 133.839211][ T8220] netlink: 277 bytes leftover after parsing attributes in process `syz.2.508'. [ 133.842049][ T8220] netlink: 277 bytes leftover after parsing attributes in process `syz.2.508'. [ 134.488395][ T8246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'. [ 134.492752][ T8246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'. [ 134.497162][ T8246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'. [ 134.500614][ T8246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'. [ 134.504917][ T8246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'. [ 134.515569][ T8246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'. [ 134.525603][ T8246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'. [ 134.529173][ T8246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'. [ 134.532921][ T8246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'. [ 134.536589][ T8246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.517'. [ 134.539621][ T8248] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 134.542406][ T8248] overlayfs: failed to set xattr on upper [ 134.545449][ T8248] overlayfs: ...falling back to redirect_dir=nofollow. [ 134.548457][ T8248] overlayfs: ...falling back to index=off. [ 134.550866][ T8248] overlayfs: ...falling back to uuid=null. [ 134.830774][ T8261] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 134.834678][ T8261] block device autoloading is deprecated and will be removed. [ 135.906128][ T6043] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 136.056574][ T6043] usb 9-1: Using ep0 maxpacket: 16 [ 136.060666][ T6043] usb 9-1: config 9 has an invalid interface number: 229 but max is 2 [ 136.063320][ T6043] usb 9-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 136.066923][ T6043] usb 9-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 136.069802][ T6043] usb 9-1: config 9 has no interface number 0 [ 136.071705][ T6043] usb 9-1: config 9 interface 229 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 136.075308][ T6043] usb 9-1: config 9 interface 229 has no altsetting 0 [ 136.079275][ T6043] usb 9-1: New USB device found, idVendor=fb26, idProduct=befd, bcdDevice=39.74 [ 136.082184][ T6043] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.084682][ T6043] usb 9-1: Product: â  [ 136.086234][ T6043] usb 9-1: Manufacturer: æ…ˆæ´í•˜ë‹‚ä£ä„¼ä±­â’½ê‡›éŸ¦ç®‡é¥”修ⵕ乪룂宬蒠⒤钨环ﵘ餼ꚼæŸìœé®ƒè¬‰æš˜â¨¸ãˆ“è«á™Œåª²æ±¼æ°ˆë™çŠ€ë²É—쫈⩘牢嚦î•æ­¦î˜¦â³³ [ 136.091739][ T6043] usb 9-1: SerialNumber: ꔶ岤棯剸栙ï‰â³“ﳱ燳掹锢࢕燔ሶ廉ᢵ볿ᆴçƒâº·ë¹Šâ½á¨–ì·í“±èˆ¶ë„“á–㼃弼䛣춺ëžçª ã¿‚矵í…਱퓱貥觧ï¤î©½ë¸íŸ¹&蟅஧蘪ì¸çŒ¦è®€æ°¢î®æ„žîŒ â©Žâ¢¢èœ‚⢅⾣㦫犡à¸ç¡•ç•Žá–﹊隵쬵﷈ [ 136.213223][ T40] audit: type=1326 audit(1757515218.435:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.2.528" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x0 [ 136.359440][ T6043] cdc_acm 9-1:9.229: skipping garbage [ 136.367679][ T6043] usb 9-1: USB disconnect, device number 2 [ 137.056016][ T40] audit: type=1800 audit(1757515219.275:199): pid=8307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.535" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 137.584801][ T40] audit: type=1326 audit(1757515219.805:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8314 comm="syz.0.536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 137.591952][ T40] audit: type=1326 audit(1757515219.805:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8314 comm="syz.0.536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 137.598955][ T40] audit: type=1326 audit(1757515219.815:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8314 comm="syz.0.536" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 137.605864][ T40] audit: type=1326 audit(1757515219.815:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8314 comm="syz.0.536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 137.612352][ T40] audit: type=1326 audit(1757515219.815:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8314 comm="syz.0.536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 137.621505][ T40] audit: type=1326 audit(1757515219.825:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8314 comm="syz.0.536" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 137.628215][ T40] audit: type=1326 audit(1757515219.825:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8314 comm="syz.0.536" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 137.849976][ T8319] loop2: detected capacity change from 0 to 7 [ 137.854383][ T8319] Dev loop2: unable to read RDB block 7 [ 137.856347][ T8319] loop2: unable to read partition table [ 137.858805][ T8319] loop2: partition table beyond EOD, truncated [ 137.861529][ T8319] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 138.107670][ T8328] lo speed is unknown, defaulting to 1000 [ 139.070436][ T8351] loop2: detected capacity change from 0 to 7 [ 139.074502][ T5977] Dev loop2: unable to read RDB block 7 [ 139.092834][ T5977] loop2: unable to read partition table [ 139.095504][ T5977] loop2: partition table beyond EOD, truncated [ 139.103535][ T8351] Dev loop2: unable to read RDB block 7 [ 139.108203][ T8351] loop2: unable to read partition table [ 139.111654][ T8351] loop2: partition table beyond EOD, truncated [ 139.114698][ T8351] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 139.559566][ T8365] tipc: Started in network mode [ 139.562175][ T8365] tipc: Node identity ac14140f, cluster identity 4711 [ 139.566720][ T8365] tipc: New replicast peer: 255.255.255.255 [ 139.570286][ T8365] tipc: Enabled bearer , priority 10 [ 140.262818][ T8394] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 140.696931][ T6028] tipc: Node number set to 2886997007 [ 140.700792][ T8407] loop2: detected capacity change from 0 to 7 [ 140.704704][ T8407] Dev loop2: unable to read RDB block 7 [ 140.707002][ T8407] loop2: unable to read partition table [ 140.709345][ T8407] loop2: partition table beyond EOD, truncated [ 140.713444][ T8407] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 140.776184][ T8409] __nla_validate_parse: 25 callbacks suppressed [ 140.776201][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.565'. [ 141.275505][ T8428] lo speed is unknown, defaulting to 1000 [ 141.489484][ T8435] qrtr: Invalid version 28 [ 141.682957][ T8444] loop2: detected capacity change from 0 to 7 [ 141.687428][ T8444] Dev loop2: unable to read RDB block 7 [ 141.689252][ T8444] loop2: unable to read partition table [ 141.691111][ T8444] loop2: partition table beyond EOD, truncated [ 141.693087][ T8444] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 142.006227][ T8467] netlink: 40 bytes leftover after parsing attributes in process `syz.1.575'. [ 142.406154][ T1022] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 142.559509][ T1022] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 142.562802][ T1022] usb 9-1: config 0 has no interface number 0 [ 142.565555][ T1022] usb 9-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.574224][ T1022] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 142.578474][ T1022] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 142.581809][ T1022] usb 9-1: Product: syz [ 142.583540][ T1022] usb 9-1: SerialNumber: syz [ 142.588380][ T1022] usb 9-1: config 0 descriptor?? [ 142.593954][ T1022] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 143.067325][ T8485] netlink: 2 bytes leftover after parsing attributes in process `syz.2.586'. [ 143.093067][ T8488] loop2: detected capacity change from 0 to 7 [ 143.098305][ T8488] Dev loop2: unable to read RDB block 7 [ 143.100208][ T8488] loop2: unable to read partition table [ 143.102150][ T8488] loop2: partition table beyond EOD, truncated [ 143.112049][ T8488] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 144.252570][ T8514] lo speed is unknown, defaulting to 1000 [ 144.349939][ T8515] netlink: 5 bytes leftover after parsing attributes in process `syz.1.595'. [ 145.295116][ T840] usb 9-1: USB disconnect, device number 3 [ 145.418772][ T8542] netlink: 80 bytes leftover after parsing attributes in process `syz.2.604'. [ 145.749734][ T8542] netlink: 44 bytes leftover after parsing attributes in process `syz.2.604'. [ 145.753254][ T8542] netlink: 44 bytes leftover after parsing attributes in process `syz.2.604'. [ 145.820470][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 145.820485][ T40] audit: type=1800 audit(1757515228.045:246): pid=8549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.605" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 146.910596][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 147.806167][ T40] audit: type=1800 audit(1757515230.025:247): pid=8592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.618" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 147.960542][ T8610] netlink: 'syz.4.624': attribute type 2 has an invalid length. [ 147.962915][ T8610] netlink: 119 bytes leftover after parsing attributes in process `syz.4.624'. [ 148.009695][ T8612] team0: Port device team_slave_0 removed [ 148.050048][ T8618] wg1: entered promiscuous mode [ 148.052098][ T8618] wg1: entered allmulticast mode [ 148.822183][ T8689] sp0: Synchronizing with TNC [ 148.826895][ T8689] sp0: Found TNC [ 149.334494][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 149.742887][ T8703] netlink: 27 bytes leftover after parsing attributes in process `syz.0.649'. [ 149.865066][ T8697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.648'. [ 150.639480][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.654'. [ 150.666165][ T8730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.819258][ T40] audit: type=1800 audit(1757515233.045:248): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.659" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 152.144898][ T8759] lo speed is unknown, defaulting to 1000 [ 153.720870][ T5979] Bluetooth: hci2: link tx timeout [ 153.723404][ T5979] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 153.728674][ T5979] Bluetooth: hci2: link tx timeout [ 153.730804][ T5979] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.734227][ T5979] Bluetooth: hci2: link tx timeout [ 153.736590][ T5979] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 153.739727][ T5979] Bluetooth: hci2: link tx timeout [ 153.741855][ T5979] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.745052][ T5979] Bluetooth: hci2: link tx timeout [ 153.747228][ T5979] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 153.750367][ T5979] Bluetooth: hci2: link tx timeout [ 153.752470][ T5979] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.537359][ T5979] Bluetooth: hci2: link tx timeout [ 154.539015][ T5979] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 154.541440][ T5979] Bluetooth: hci2: link tx timeout [ 154.543097][ T5979] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.545794][ T5979] Bluetooth: hci2: link tx timeout [ 154.549056][ T5979] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 154.552206][ T5979] Bluetooth: hci2: link tx timeout [ 154.554395][ T5979] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 154.721195][ T8812] input: syz1 as /devices/virtual/input/input8 [ 155.768747][ T5979] Bluetooth: hci2: command 0x0406 tx timeout [ 156.372541][ T40] audit: type=1326 audit(1757515238.595:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8852 comm="syz.4.683" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 156.913205][ T5979] Bluetooth: hci3: unexpected event 0x10 length: 8 > 1 [ 156.914339][ T5979] Bluetooth: hci3: hardware error 0x00 [ 157.094720][ T8879] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 157.846649][ T5983] Bluetooth: hci2: command 0x0406 tx timeout [ 158.593531][ T8921] FAULT_INJECTION: forcing a failure. [ 158.593531][ T8921] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 158.598181][ T8921] CPU: 0 UID: 0 PID: 8921 Comm: syz.4.704 Not tainted syzkaller #0 PREEMPT(full) [ 158.598197][ T8921] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.598203][ T8921] Call Trace: [ 158.598208][ T8921] [ 158.598212][ T8921] dump_stack_lvl+0x16c/0x1f0 [ 158.598233][ T8921] should_fail_ex+0x512/0x640 [ 158.598253][ T8921] _copy_from_user+0x2e/0xd0 [ 158.598266][ T8921] get_compat_msghdr+0xa7/0x170 [ 158.598282][ T8921] ? __pfx_get_compat_msghdr+0x10/0x10 [ 158.598303][ T8921] ___sys_sendmsg+0x1ae/0x1d0 [ 158.598320][ T8921] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.598343][ T8921] ? find_held_lock+0x2b/0x80 [ 158.598362][ T8921] __sys_sendmsg+0x16d/0x220 [ 158.598379][ T8921] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.598401][ T8921] ? rcu_is_watching+0x12/0xc0 [ 158.598414][ T8921] __do_fast_syscall_32+0x7c/0x3a0 [ 158.598433][ T8921] do_fast_syscall_32+0x32/0x80 [ 158.598449][ T8921] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.598463][ T8921] RIP: 0023:0xf70ce579 [ 158.598472][ T8921] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 158.598482][ T8921] RSP: 002b:00000000f54be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 158.598493][ T8921] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001100 [ 158.598500][ T8921] RDX: 0000000000020000 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.598506][ T8921] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.598512][ T8921] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 158.598518][ T8921] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.598530][ T8921] [ 158.677813][ T8923] FAULT_INJECTION: forcing a failure. [ 158.677813][ T8923] name failslab, interval 1, probability 0, space 0, times 1 [ 158.681817][ T8923] CPU: 2 UID: 0 PID: 8923 Comm: syz.4.705 Not tainted syzkaller #0 PREEMPT(full) [ 158.681832][ T8923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.681838][ T8923] Call Trace: [ 158.681842][ T8923] [ 158.681846][ T8923] dump_stack_lvl+0x16c/0x1f0 [ 158.681873][ T8923] should_fail_ex+0x512/0x640 [ 158.681896][ T8923] ? __kmalloc_noprof+0xbf/0x510 [ 158.681914][ T8923] ? alloc_pipe_info+0x1ec/0x590 [ 158.681939][ T8923] should_failslab+0xc2/0x120 [ 158.681953][ T8923] __kmalloc_noprof+0xd2/0x510 [ 158.681967][ T8923] ? kasan_save_track+0x14/0x30 [ 158.681980][ T8923] alloc_pipe_info+0x1ec/0x590 [ 158.681995][ T8923] splice_direct_to_actor+0x77d/0xa30 [ 158.682008][ T8923] ? __lock_acquire+0x62e/0x1ce0 [ 158.682021][ T8923] ? __pfx_direct_splice_actor+0x10/0x10 [ 158.682033][ T8923] ? __pfx_aa_file_perm+0x10/0x10 [ 158.682049][ T8923] ? find_held_lock+0x2b/0x80 [ 158.682060][ T8923] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 158.682070][ T8923] ? get_pid_task+0xfc/0x250 [ 158.682088][ T8923] do_splice_direct+0x174/0x240 [ 158.682100][ T8923] ? __pfx_do_splice_direct+0x10/0x10 [ 158.682111][ T8923] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 158.682122][ T8923] ? bpf_lsm_file_permission+0x9/0x10 [ 158.682138][ T8923] ? security_file_permission+0x71/0x210 [ 158.682154][ T8923] ? rw_verify_area+0xcf/0x6c0 [ 158.682166][ T8923] do_sendfile+0xb06/0xe50 [ 158.682180][ T8923] ? __pfx_do_sendfile+0x10/0x10 [ 158.682191][ T8923] ? __fget_files+0x20e/0x3c0 [ 158.682207][ T8923] __ia32_compat_sys_sendfile+0x1e5/0x220 [ 158.682265][ T8923] ? ksys_write+0x1ac/0x250 [ 158.682292][ T8923] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 158.682308][ T8923] ? rcu_is_watching+0x12/0xc0 [ 158.682322][ T8923] __do_fast_syscall_32+0x7c/0x3a0 [ 158.682341][ T8923] do_fast_syscall_32+0x32/0x80 [ 158.682357][ T8923] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.682371][ T8923] RIP: 0023:0xf70ce579 [ 158.682379][ T8923] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 158.682389][ T8923] RSP: 002b:00000000f54be55c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 158.682399][ T8923] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000000000008 [ 158.682405][ T8923] RDX: 0000000000000000 RSI: 00000000000053d2 RDI: 0000000000000000 [ 158.682411][ T8923] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.682417][ T8923] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 158.682423][ T8923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.682436][ T8923] [ 158.934246][ T8927] bridge3: entered promiscuous mode [ 158.936050][ T8927] bridge3: entered allmulticast mode [ 158.966260][ T5979] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 159.298737][ T8945] wireguard0: entered promiscuous mode [ 159.298765][ T8945] wireguard0: entered allmulticast mode [ 159.428331][ T40] audit: type=1804 audit(1757515241.655:250): pid=8950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.709" name="file0" dev="tmpfs" ino=1025 res=1 errno=0 [ 159.870899][ T40] audit: type=1800 audit(1757515242.095:251): pid=8954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.713" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 160.164084][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 160.170415][ T8967] netlink: 104 bytes leftover after parsing attributes in process `syz.0.717'. [ 160.174602][ T8967] netlink: 104 bytes leftover after parsing attributes in process `syz.0.717'. [ 160.246085][ T5979] Bluetooth: hci2: command 0x0406 tx timeout [ 160.280069][ T8976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.721'. [ 160.285266][ T8969] netlink: 32 bytes leftover after parsing attributes in process `syz.1.720'. [ 160.940294][ T8997] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 160.943738][ T8997] overlayfs: missing 'lowerdir' [ 161.060320][ T40] audit: type=1800 audit(1757515243.285:252): pid=9005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.728" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 161.992301][ T40] audit: type=1326 audit(1757515244.215:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 162.006439][ T40] audit: type=1326 audit(1757515244.235:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f51598 code=0x7ffc0000 [ 162.022576][ T40] audit: type=1326 audit(1757515244.235:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f51598 code=0x7ffc0000 [ 162.034704][ T40] audit: type=1326 audit(1757515244.235:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f51598 code=0x7ffc0000 [ 162.046195][ T40] audit: type=1326 audit(1757515244.245:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f51598 code=0x7ffc0000 [ 162.053232][ T40] audit: type=1326 audit(1757515244.245:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f51598 code=0x7ffc0000 [ 162.061574][ T40] audit: type=1326 audit(1757515244.245:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 162.068388][ T40] audit: type=1326 audit(1757515244.245:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f51598 code=0x7ffc0000 [ 162.075126][ T40] audit: type=1326 audit(1757515244.245:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 162.082198][ T40] audit: type=1326 audit(1757515244.245:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9040 comm="syz.2.737" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 162.224399][ T9052] netlink: 80 bytes leftover after parsing attributes in process `syz.0.740'. [ 162.227951][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.740'. [ 162.261017][ T9056] loop2: detected capacity change from 0 to 7 [ 162.265125][ T9056] Dev loop2: unable to read RDB block 7 [ 162.267961][ T9056] loop2: unable to read partition table [ 162.270563][ T9056] loop2: partition table beyond EOD, truncated [ 162.274837][ T9056] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 162.307385][ T9060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.311458][ T9060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.619197][ T9082] CUSE: DEVNAME unspecified [ 162.708981][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.746'. [ 163.091682][ T9110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.758'. [ 163.343444][ T9115] Illegal XDP return value 4294967294 on prog (id 132) dev N/A, expect packet loss! [ 163.890757][ T9122] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 163.899960][ T9122] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 163.981013][ T9129] loop2: detected capacity change from 0 to 7 [ 163.984360][ T9129] Dev loop2: unable to read RDB block 7 [ 163.990352][ T9129] loop2: unable to read partition table [ 163.992294][ T9129] loop2: partition table beyond EOD, truncated [ 163.996181][ T9129] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 164.218493][ T9141] team0: Port device team_slave_0 removed [ 164.224768][ T9142] overlayfs: failed to resolve './file0': -2 [ 165.016935][ T9175] smc: net device bond0 applied user defined pnetid SYZ2 [ 165.023567][ T9175] netlink: 14 bytes leftover after parsing attributes in process `syz.1.779'. [ 165.173814][ T9175] smc: removing net device bond0 with user defined pnetid SYZ2 [ 165.178915][ T9175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.182936][ T9175] bond_slave_0: left promiscuous mode [ 165.184821][ T9175] bond_slave_0: left allmulticast mode [ 165.189437][ T9175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.195710][ T9175] bond_slave_1: left promiscuous mode [ 165.198069][ T9175] bond_slave_1: left allmulticast mode [ 165.205396][ T9175] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 165.211914][ T9175] syz_tun: left allmulticast mode [ 165.215191][ T9175] bond0 (unregistering): Released all slaves [ 165.224947][ T9179] netlink: 60 bytes leftover after parsing attributes in process `syz.4.780'. [ 165.320668][ T9188] futex_wake_op: syz.1.782 tries to shift op by -1; fix this program [ 165.936179][ T62] Bluetooth: hci2: command 0x0406 tx timeout [ 165.936194][ T5979] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.038011][ T8601] IPVS: starting estimator thread 0... [ 167.127836][ T9238] IPVS: using max 44 ests per chain, 105600 per kthread [ 167.951151][ T9252] tipc: Started in network mode [ 167.952733][ T9252] tipc: Node identity b29123770815, cluster identity 4711 [ 167.954922][ T9252] tipc: Enabled bearer , priority 0 [ 167.959146][ T9252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.800'. [ 167.962591][ T9252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.800'. [ 167.969240][ T9251] tipc: Resetting bearer [ 168.957313][ T102] tipc: Node number set to 3129222007 [ 169.077133][ T9251] tipc: Disabling bearer [ 169.175236][ T9269] FAULT_INJECTION: forcing a failure. [ 169.175236][ T9269] name failslab, interval 1, probability 0, space 0, times 0 [ 169.180628][ T9269] CPU: 3 UID: 0 PID: 9269 Comm: syz.0.805 Not tainted syzkaller #0 PREEMPT(full) [ 169.180651][ T9269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.180662][ T9269] Call Trace: [ 169.180668][ T9269] [ 169.180675][ T9269] dump_stack_lvl+0x16c/0x1f0 [ 169.180705][ T9269] should_fail_ex+0x512/0x640 [ 169.180733][ T9269] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 169.180764][ T9269] should_failslab+0xc2/0x120 [ 169.180787][ T9269] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 169.180808][ T9269] ? __alloc_skb+0x2b2/0x380 [ 169.180837][ T9269] __alloc_skb+0x2b2/0x380 [ 169.180861][ T9269] ? __pfx___alloc_skb+0x10/0x10 [ 169.180887][ T9269] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 169.180919][ T9269] netlink_alloc_large_skb+0x69/0x130 [ 169.180947][ T9269] netlink_sendmsg+0x6a1/0xdd0 [ 169.180977][ T9269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.181007][ T9269] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 169.181032][ T9269] ____sys_sendmsg+0xa95/0xc70 [ 169.181054][ T9269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.181072][ T9269] ? get_compat_msghdr+0x11a/0x170 [ 169.181108][ T9269] ___sys_sendmsg+0x134/0x1d0 [ 169.181136][ T9269] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.181174][ T9269] ? find_held_lock+0x2b/0x80 [ 169.181207][ T9269] __sys_sendmsg+0x16d/0x220 [ 169.181234][ T9269] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.181271][ T9269] ? rcu_is_watching+0x12/0xc0 [ 169.181293][ T9269] __do_fast_syscall_32+0x7c/0x3a0 [ 169.181322][ T9269] do_fast_syscall_32+0x32/0x80 [ 169.181349][ T9269] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.181370][ T9269] RIP: 0023:0xf7f13579 [ 169.181384][ T9269] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 169.181399][ T9269] RSP: 002b:00000000f541655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 169.181417][ T9269] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 169.181428][ T9269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.181437][ T9269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.181446][ T9269] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 169.181457][ T9269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.181478][ T9269] [ 169.227932][ T9272] overlayfs: missing 'workdir' [ 169.271874][ T9274] wireguard0: entered promiscuous mode [ 169.274086][ T9274] wireguard0: entered allmulticast mode [ 169.537002][ T9278] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 169.541586][ T9278] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 169.811511][ T9288] netlink: 129704 bytes leftover after parsing attributes in process `syz.4.810'. [ 170.108417][ T9295] netlink: 56 bytes leftover after parsing attributes in process `syz.4.810'. [ 170.468015][ T9311] overlayfs: failed to clone lowerpath [ 171.610714][ T5979] Bluetooth: hci2: command 0x0406 tx timeout [ 171.613386][ T5979] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.306109][ T9327] wireguard0: entered promiscuous mode [ 172.307942][ T9327] wireguard0: entered allmulticast mode [ 172.595314][ T9354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.829'. [ 172.991084][ T40] kauditd_printk_skb: 199 callbacks suppressed [ 172.991094][ T40] audit: type=1800 audit(1757515255.215:462): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.833" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 173.982688][ T9393] netlink: 96 bytes leftover after parsing attributes in process `syz.2.839'. [ 174.445578][ T9409] netlink: 'syz.2.841': attribute type 10 has an invalid length. [ 174.449223][ T9409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.487734][ T9409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.525773][ T9409] batadv_slave_0: entered promiscuous mode [ 174.545131][ T9409] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 175.343392][ T9424] netlink: 'syz.0.846': attribute type 27 has an invalid length. [ 175.385665][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.459821][ T9424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.472723][ T9424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.588747][ T24] lo speed is unknown, defaulting to 1000 [ 175.590639][ T24] syz2: Port: 1 Link DOWN [ 175.620888][ T9425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.623771][ T9425] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.634401][ T9425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.640992][ T6588] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.661014][ T6588] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.675331][ T6588] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.675446][ T8601] lo speed is unknown, defaulting to 1000 [ 175.679585][ T6588] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.681031][ T8601] syz2: Port: 1 Link ACTIVE [ 175.999967][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 176.156512][ T9435] overlayfs: failed to clone upperpath [ 176.616582][ T9441] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 176.619238][ T9441] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 176.622700][ T9441] vhci_hcd vhci_hcd.0: Device attached [ 176.896074][ T141] usb 46-1: SetAddress Request (2) to port 0 [ 176.898391][ T141] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 177.172941][ T9442] vhci_hcd: connection reset by peer [ 177.176882][ T6588] vhci_hcd: stop threads [ 177.178278][ T6588] vhci_hcd: release socket [ 177.179752][ T6588] vhci_hcd: disconnect device [ 177.350515][ T9455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.468397][ T9456] netdevsim netdevsim1: Direct firmware load for @ failed with error -2 [ 177.473892][ T9456] netdevsim netdevsim1: Falling back to sysfs fallback for: @ [ 179.851188][ T9504] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 179.853577][ T9504] overlayfs: failed to set xattr on upper [ 179.855633][ T9504] overlayfs: ...falling back to redirect_dir=nofollow. [ 179.860913][ T9504] overlayfs: ...falling back to index=off. [ 179.863426][ T9504] overlayfs: ...falling back to uuid=null. [ 179.865858][ T9504] overlayfs: ...falling back to xino=off. [ 180.437677][ T9529] loop2: detected capacity change from 0 to 7 [ 180.440084][ T9529] Dev loop2: unable to read RDB block 7 [ 180.441864][ T9529] loop2: unable to read partition table [ 180.443725][ T9529] loop2: partition table beyond EOD, truncated [ 180.453707][ T9529] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.478009][ T40] audit: type=1326 audit(1757515262.705:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.0.876" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 180.486588][ T40] audit: type=1326 audit(1757515262.705:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.0.876" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 180.494294][ T40] audit: type=1326 audit(1757515262.705:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.0.876" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 180.503698][ T40] audit: type=1326 audit(1757515262.705:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.0.876" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 180.510751][ T40] audit: type=1326 audit(1757515262.705:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.0.876" exe="/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 180.518303][ T40] audit: type=1326 audit(1757515262.705:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.0.876" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 180.524793][ T40] audit: type=1326 audit(1757515262.705:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.0.876" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 180.531717][ T40] audit: type=1326 audit(1757515262.705:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.0.876" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 180.539563][ T40] audit: type=1326 audit(1757515262.715:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.0.876" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 180.547132][ T40] audit: type=1326 audit(1757515262.715:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.0.876" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 180.645862][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.878'. [ 180.872858][ T9562] loop2: detected capacity change from 0 to 7 [ 180.876990][ T9286] Dev loop2: unable to read RDB block 7 [ 180.878786][ T9286] loop2: unable to read partition table [ 180.880655][ T9286] loop2: partition table beyond EOD, truncated [ 180.960334][ T9565] netlink: 96 bytes leftover after parsing attributes in process `syz.4.883'. [ 180.995790][ T9562] Dev loop2: unable to read RDB block 7 [ 180.999007][ T9562] loop2: unable to read partition table [ 181.001889][ T9562] loop2: partition table beyond EOD, truncated [ 181.012395][ T9562] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 181.183906][ T9563] cgroup: fork rejected by pids controller in /syz4 [ 181.226909][ T9601] ------------[ cut here ]------------ [ 181.228649][ T9601] WARNING: CPU: 0 PID: 9601 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 181.231849][ T9601] Modules linked in: [ 181.233402][ T9601] CPU: 0 UID: 0 PID: 9601 Comm: syz.1.887 Not tainted syzkaller #0 PREEMPT(full) [ 181.238133][ T9601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.241733][ T9601] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 181.243938][ T9601] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 0f b1 80 09 83 fe 0a 0f 86 0a fe ff ff 80 3d c8 73 80 0e 00 75 0b c6 05 bf 73 80 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 181.251892][ T9601] RSP: 0018:ffffc90002dbf7d0 EFLAGS: 00010246 [ 181.254343][ T9601] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 181.257019][ T9601] RDX: 0000000000000000 RSI: 0000000000000024 RDI: 0000000000040d40 [ 181.259571][ T9601] RBP: 0000000000000024 R08: 0000000000000005 R09: 0000000000000009 [ 181.262096][ T9601] R10: 0000000000000024 R11: 0000000000000000 R12: 0000000000040d40 [ 181.264645][ T9601] R13: 1ffff920005b7f0f R14: ffffffff9ae77a24 R15: 0000000000000024 [ 181.267187][ T9601] FS: 0000000000000000(0000) GS:ffff8880974bd000(0063) knlGS:00000000f540eb40 [ 181.270036][ T9601] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 181.272196][ T9601] CR2: 0000000080002100 CR3: 000000006f315000 CR4: 0000000000352ef0 [ 181.274944][ T9601] Call Trace: [ 181.276112][ T9601] [ 181.277072][ T9601] ? __do_fast_syscall_32+0x7c/0x3a0 [ 181.278756][ T9601] ? do_fast_syscall_32+0x32/0x80 [ 181.280428][ T9601] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.282681][ T9601] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 181.284933][ T9601] ? kasan_quarantine_put+0x10a/0x240 [ 181.287157][ T9601] ? lockdep_hardirqs_on+0x7c/0x110 [ 181.288762][ T9601] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.290634][ T9601] ? policy_nodemask+0xea/0x4e0 [ 181.292237][ T9601] alloc_pages_mpol+0x1fb/0x550 [ 181.293789][ T9601] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 181.295513][ T9601] ? v9fs_fid_get_acl+0x7a/0x120 [ 181.297488][ T9601] ___kmalloc_large_node+0xed/0x160 [ 181.299138][ T9601] ? v9fs_fid_get_acl+0x7a/0x120 [ 181.300728][ T9601] __kmalloc_large_node_noprof+0x1c/0x70 [ 181.302510][ T9601] __kmalloc_noprof.cold+0xc/0x61 [ 181.304125][ T9601] ? __pfx_iget5_locked+0x10/0x10 [ 181.305837][ T9601] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 181.308325][ T9601] v9fs_fid_get_acl+0x7a/0x120 [ 181.309877][ T9601] v9fs_get_acl+0xee/0x530 [ 181.311325][ T9601] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 181.313095][ T9601] v9fs_mount+0x4fd/0xa90 [ 181.314472][ T9601] ? rcu_is_watching+0x12/0xc0 [ 181.316449][ T9601] ? __pfx_v9fs_mount+0x10/0x10 [ 181.318087][ T9601] ? aa_get_newest_label+0xd2/0x250 [ 181.319854][ T9601] ? apparmor_capable+0x114/0x1d0 [ 181.321570][ T9601] ? __pfx_v9fs_mount+0x10/0x10 [ 181.323147][ T9601] legacy_get_tree+0x10c/0x220 [ 181.324693][ T9601] vfs_get_tree+0x8b/0x340 [ 181.326512][ T9601] path_mount+0x1513/0x2000 [ 181.327950][ T9601] ? __pfx_path_mount+0x10/0x10 [ 181.329517][ T9601] ? kmem_cache_free+0x2d1/0x4d0 [ 181.331113][ T9601] ? putname+0x154/0x1a0 [ 181.332497][ T9601] ? getname_flags.part.0+0x1c5/0x550 [ 181.334199][ T9601] ? __ia32_sys_mount+0x28b/0x310 [ 181.335815][ T9601] __ia32_sys_mount+0x28b/0x310 [ 181.337818][ T9601] ? __pfx___ia32_sys_mount+0x10/0x10 [ 181.339527][ T9601] ? rcu_is_watching+0x12/0xc0 [ 181.341092][ T9601] __do_fast_syscall_32+0x7c/0x3a0 [ 181.342715][ T9601] do_fast_syscall_32+0x32/0x80 [ 181.344263][ T9601] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.346656][ T9601] RIP: 0023:0xf701e579 [ 181.347998][ T9601] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 181.354202][ T9601] RSP: 002b:00000000f540e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 181.357549][ T9601] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800003c0 [ 181.360035][ T9601] RDX: 0000000080000b80 RSI: 0000000000000000 RDI: 0000000080000500 [ 181.362511][ T9601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.364993][ T9601] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 181.367931][ T9601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.370582][ T9601] [ 181.371613][ T9601] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 181.374139][ T9601] CPU: 0 UID: 0 PID: 9601 Comm: syz.1.887 Not tainted syzkaller #0 PREEMPT(full) [ 181.377234][ T9601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 181.380806][ T9601] Call Trace: [ 181.381930][ T9601] [ 181.382885][ T9601] dump_stack_lvl+0x3d/0x1f0 [ 181.384374][ T9601] vpanic+0x6e8/0x7a0 [ 181.385653][ T9601] ? __pfx_vpanic+0x10/0x10 [ 181.387115][ T9601] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 181.389070][ T9601] panic+0xca/0xd0 [ 181.390368][ T9601] ? __pfx_panic+0x10/0x10 [ 181.391826][ T9601] check_panic_on_warn+0xab/0xb0 [ 181.393409][ T9601] __warn+0xf6/0x3c0 [ 181.394672][ T9601] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 181.396609][ T9601] report_bug+0x3c3/0x580 [ 181.398008][ T9601] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 181.399943][ T9601] handle_bug+0x184/0x210 [ 181.401349][ T9601] exc_invalid_op+0x17/0x50 [ 181.402822][ T9601] asm_exc_invalid_op+0x1a/0x20 [ 181.404592][ T9601] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 181.406712][ T9601] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 0f b1 80 09 83 fe 0a 0f 86 0a fe ff ff 80 3d c8 73 80 0e 00 75 0b c6 05 bf 73 80 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 181.413193][ T9601] RSP: 0018:ffffc90002dbf7d0 EFLAGS: 00010246 [ 181.415127][ T9601] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 181.417644][ T9601] RDX: 0000000000000000 RSI: 0000000000000024 RDI: 0000000000040d40 [ 181.420131][ T9601] RBP: 0000000000000024 R08: 0000000000000005 R09: 0000000000000009 [ 181.422607][ T9601] R10: 0000000000000024 R11: 0000000000000000 R12: 0000000000040d40 [ 181.425097][ T9601] R13: 1ffff920005b7f0f R14: ffffffff9ae77a24 R15: 0000000000000024 [ 181.427603][ T9601] ? __do_fast_syscall_32+0x7c/0x3a0 [ 181.429296][ T9601] ? do_fast_syscall_32+0x32/0x80 [ 181.430910][ T9601] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.432971][ T9601] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 181.434990][ T9601] ? kasan_quarantine_put+0x10a/0x240 [ 181.436711][ T9601] ? lockdep_hardirqs_on+0x7c/0x110 [ 181.438440][ T9601] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 181.440406][ T9601] ? policy_nodemask+0xea/0x4e0 [ 181.442016][ T9601] alloc_pages_mpol+0x1fb/0x550 [ 181.443548][ T9601] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 181.445232][ T9601] ? v9fs_fid_get_acl+0x7a/0x120 [ 181.446750][ T9601] ___kmalloc_large_node+0xed/0x160 [ 181.448444][ T9601] ? v9fs_fid_get_acl+0x7a/0x120 [ 181.450027][ T9601] __kmalloc_large_node_noprof+0x1c/0x70 [ 181.451821][ T9601] __kmalloc_noprof.cold+0xc/0x61 [ 181.453576][ T9601] ? __pfx_iget5_locked+0x10/0x10 [ 181.455117][ T9601] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 181.457061][ T9601] v9fs_fid_get_acl+0x7a/0x120 [ 181.458644][ T9601] v9fs_get_acl+0xee/0x530 [ 181.460093][ T9601] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 181.461792][ T9601] v9fs_mount+0x4fd/0xa90 [ 181.463119][ T9601] ? rcu_is_watching+0x12/0xc0 [ 181.464627][ T9601] ? __pfx_v9fs_mount+0x10/0x10 [ 181.466141][ T9601] ? aa_get_newest_label+0xd2/0x250 [ 181.467770][ T9601] ? apparmor_capable+0x114/0x1d0 [ 181.469429][ T9601] ? __pfx_v9fs_mount+0x10/0x10 [ 181.470990][ T9601] legacy_get_tree+0x10c/0x220 [ 181.472535][ T9601] vfs_get_tree+0x8b/0x340 [ 181.473966][ T9601] path_mount+0x1513/0x2000 [ 181.475431][ T9601] ? __pfx_path_mount+0x10/0x10 [ 181.477007][ T9601] ? kmem_cache_free+0x2d1/0x4d0 [ 181.478584][ T9601] ? putname+0x154/0x1a0 [ 181.479947][ T9601] ? getname_flags.part.0+0x1c5/0x550 [ 181.481640][ T9601] ? __ia32_sys_mount+0x28b/0x310 [ 181.483244][ T9601] __ia32_sys_mount+0x28b/0x310 [ 181.484816][ T9601] ? __pfx___ia32_sys_mount+0x10/0x10 [ 181.486737][ T9601] ? rcu_is_watching+0x12/0xc0 [ 181.488322][ T9601] __do_fast_syscall_32+0x7c/0x3a0 [ 181.489957][ T9601] do_fast_syscall_32+0x32/0x80 [ 181.491532][ T9601] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.493608][ T9601] RIP: 0023:0xf701e579 [ 181.494970][ T9601] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 181.501035][ T9601] RSP: 002b:00000000f540e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 181.503657][ T9601] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800003c0 [ 181.506188][ T9601] RDX: 0000000080000b80 RSI: 0000000000000000 RDI: 0000000080000500 [ 181.508731][ T9601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.511259][ T9601] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 181.513745][ T9601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.516323][ T9601] [ 181.517967][ T9601] Kernel Offset: disabled [ 181.519333][ T9601] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:41:03 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8561a2b5 RDI=ffffffff9b0ff700 RBP=ffffffff9b0ff6c0 RSP=ffffc90002dbf140 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000002e R14=ffffffff9b0ff6c0 R15=ffffffff8561a250 RIP=ffffffff8561a2df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974bd000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080002100 CR3=000000006f315000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=0000000000000001 Opmask02=00000000ffff7fdf Opmask03=0000000000000000 Opmask04=00000000ffffefff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055855726fd50 000055855726fd50 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005585570bc5e0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4fa6bf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4fa6b52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4fa6bf1b40 000055800f5ff8c2 0000000000000031 0000000000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003a756b733a322e 392d3533712d6370 7276633a3174633a 554d45516e76633a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000071470 RCX=ffffffff822c4863 RDX=ffff88802270a440 RSI=ffffffff822c476b RDI=0000000000000007 RBP=0000000000000001 RSP=ffffc90002d7ef58 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000001470 R11=0000000000000000 R12=ffff888041c66300 R13=ffff888041c662fc R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff81bb0bb1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975bd000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008012c018 CR3=000000006acf4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000039820 RBX=ffff8880519b4880 RCX=ffffc90031a02000 RDX=0000000000080000 RSI=ffffffff817e2aa3 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc9000345fca8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=dffffc0000000000 R13=0000000000010000 R14=ffff8880519b0000 R15=fffffffffffbfeff RIP=ffffffff8b9430e0 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976bd000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000562c58c98000 CR3=0000000055ddb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff95e5c1d0 RBX=00000000000001c2 RCX=0000000000026f8a RDX=0000000000000144 RSI=00000000000003c8 RDI=ffffffff977fe768 RBP=0000000000000030 RSP=ffffc9000352ef80 R8 =ffffffff95e302e0 R9 =0000000000000207 R10=ffffc9000352f120 R11=0000000000000000 R12=ffffffff8196e840 R13=ffffc9000352f020 R14=ffffffff8196f350 R15=ffffffff97800988 RIP=ffffffff8197082f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977bd000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032df5ff8 CR3=0000000055ddb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000