last executing test programs: 37.3167675s ago: executing program 0 (id=7): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @dev}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000085c) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000010000107000a0000000c0002006e6c38303231310000000000000000"], 0x20}}, 0x0) close(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xffffffffffffff16, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 35.358512631s ago: executing program 0 (id=11): syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) userfaultfd(0x801) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='ufs\x00', 0x18642, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)=@rc={0x1f, @any, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="0bc2a715c4db66f6bf13813dc43910f57f643d2eccd3f81376013fced3515fc408ea19fb316e1969a9b34d85ea858b6383cde8fc9be3fabc447d7f1e61c7a9d4e9aa6e79108bc0875f4023c4d9ea1847e9be4e9f2a4a63ee291c648c519487d4ba60f387eddf1afcad0e216eca2220f45f1b812ff528a131c18ff9a40b9ca6385ad3f64f9a686d201f4db2732d88b24b170b8d2bc513a51ee18acf4aea1b4ddc81d48b397e1f358b8c", 0xa9}], 0x1, &(0x7f0000000240)=[@txtime={{0x14, 0x1, 0x3d, 0x81}}, @timestamping={{0x10, 0x1, 0x25, 0x8}}], 0x24}, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xa26, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x10000}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r5 = openat$vcs(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) pread64(r5, &(0x7f0000000200)=""/200, 0xc8, 0x10000) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x57, 0x0, 0x27}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/igmp6\x00') write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) 33.121340597s ago: executing program 0 (id=24): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000040)="100c06", 0x3, 0xfffffffffffffffc) r1 = openat$qrtrtun(0xffffff9c, &(0x7f0000000140), 0x10a00) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000380)="38d88bf3abe3457b31e8f665f2e8e45faa5b06833512ffd758c4b3ad0e6cf8c893b4714bd68628dc7b42622206497b91acdde9f9ca8e2095648c45315d00b715754036916272f5fe6e7a41a7b84b1528034bfbfaa870e1e5af4b66c7cd76497b9042000335ab3eec5245f729c45ce991f70ef8b4215d5cc48f1cb7ce0a778ffb46ca605e9138b7d8e8e70975304df1ed", 0x90}, {&(0x7f0000000440)="d088de820f27bfeed899a4311d8310367bf891ee6ca7cc0026fa76563b837ec24c42d88332b37a150d1fa6376c523e39a91cb11894479a9eb0207f6c332f1196bbe62b5fcc9925ad863285c36f9e2d4d5471597bceb0d4b6748bdaa65d3fe26fe0ea39ce370e9b3f890dc81658e2c14789fe2d93e55e182b14927c5cdaff7323c5ddf7e09b5649cd453725b492a5575f98eb9a9875dcbcd096839ddf9307305e9aab1c09c7d55be22012552b6cffc0a4dfd8c90b0d02829dac7281588e979260aaf9d5e404744cef4cb131337b8030257a11eb7ef65f3bb5b171c8cfe4e565ff6672ddc4", 0xe4}], 0x2, 0x5, 0x4) r2 = syz_io_uring_setup(0x5fe9, &(0x7f0000000280)={0x0, 0x6e06, 0x1, 0x3, 0xa3}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x47e4, 0x10, 0x0, 0x0, 0x0, r2}) r5 = io_uring_setup(0x79af, &(0x7f0000000100)={0x0, 0xaa00, 0x2}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x2) ioctl$SNDCTL_DSP_RESET(r6, 0x5000, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000005c0)=@IORING_OP_MKDIRAT={0x25, 0x1, 0x0, r2, 0x0, &(0x7f0000000580)='./file0\x00', 0x9c}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000100)=0x3) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000000540)) 24.333902208s ago: executing program 0 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) ptrace(0x10, r4) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x20, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) 24.128695014s ago: executing program 0 (id=62): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000180)=0x67e, 0x4) r2 = syz_open_dev$video4linux(&(0x7f0000000300), 0xc, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x6001, 0x0, 0x0, 0x0, 0x80, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x1ffffe, 0x40, 0x8000, 0x0, 0x0, r4}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r9, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x1c, 0x20004080}, 0x24004084) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x2a, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x40, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000180)=0x6) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f00000013c0)) read$dsp(r8, &(0x7f0000000440)=""/171, 0xab) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@random="cebf901584bc", @random="6a177a00", @val={@void, {0x8100, 0x0, 0x1, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast}}}}, 0x0) 23.83025916s ago: executing program 0 (id=63): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1dc}}, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x161, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x40004}, 0x18) r3 = syz_io_uring_setup(0x4dff, &(0x7f0000002840), &(0x7f00000028c0), &(0x7f0000002900)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x19, &(0x7f0000002f00)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b000000000000000000000000030000000023b5000000000001"]}, 0x71) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffefc}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='siox_set_data\x00', r2}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r8, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0xc0505405, &(0x7f0000000040)={{0x3}}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r11, 0x0, 0x7, 0x9) write$P9_RWRITE(r11, &(0x7f0000000040)={0xb}, 0x11000) read(r10, &(0x7f0000032440)=""/102364, 0x18fdc) write$P9_RAUTH(r11, &(0x7f0000000240)={0x14, 0x67, 0x2, {0x80, 0x0, 0x8}}, 0x14) close_range(r5, r10, 0x0) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') ioctl$DVD_AUTH(r12, 0x5390, 0x0) 23.810809736s ago: executing program 32 (id=63): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000002480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58010000000a010400000000000000000500000a08000240000000000c000440000000000800000508000240000000010c0004400000000000000003f70006002d24f702cdab0eb69b86ebe3d60eeeb04218761ee39e32def64a0e18d2eff651b0a5080887c58c443c278c0d0d49b32f3be127a5ab6be473e1adc3b04964a753f8f4bfc0968794edfb513cc6c587d9b67dbdeeb94d37a8b563e0e4c63d5706681b8d30aaabb4be3fad7dc8b5714df0c9e89789f2665b4324e09ecd3bfd7f71ef1305948f9fd59a10cc5b6c129c7b6e748f4dec7488b3b24982ef533f21d2dacf0504000000add402133ed41e01904073b2bde6c20916c2537f55603f708ca10d1867f604b34f70726e667f95b062d72865f3a4db564f11e415aa55534298382ba88f8b45fae0bd91e3a026779e6472988fe765000900010073797a31000000000900010073797a30000000000900010073797a31000000005c000000030a030000000000000000000500000008000a40000000020900030073797a30000000000900010073797a31000000002800048008000240000000031400030076657468310000000000000000000000080001"], 0x1dc}}, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x161, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x40004}, 0x18) r3 = syz_io_uring_setup(0x4dff, &(0x7f0000002840), &(0x7f00000028c0), &(0x7f0000002900)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x19, &(0x7f0000002f00)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b000000000000000000000000030000000023b5000000000001"]}, 0x71) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffefc}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='siox_set_data\x00', r2}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r8, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0xc0505405, &(0x7f0000000040)={{0x3}}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r11, 0x0, 0x7, 0x9) write$P9_RWRITE(r11, &(0x7f0000000040)={0xb}, 0x11000) read(r10, &(0x7f0000032440)=""/102364, 0x18fdc) write$P9_RAUTH(r11, &(0x7f0000000240)={0x14, 0x67, 0x2, {0x80, 0x0, 0x8}}, 0x14) close_range(r5, r10, 0x0) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') ioctl$DVD_AUTH(r12, 0x5390, 0x0) 12.771767832s ago: executing program 2 (id=118): keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000003d80), 0x200, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000440)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='f2fs_lookup_end\x00', r1, 0x0, 0x40000}, 0x18) getpid() sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) shutdown(r6, 0x1) 11.862258354s ago: executing program 2 (id=136): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000880)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000c00)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [{0xb, 0x7ff, 0x6}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) ioctl(r1, 0x5, &(0x7f00000009c0)="f4181eac3815f9e201e9f8716f529688ce44e321a948ae95e2e16d3b6196abd96f88c50e0930a605b94c883068c41a3272d7f70aabdc848aea81f0071946c89f9d471d29d0fda653ccf4de2172b90418d1de80cebe3822d8528aef7cf3eff76cac56b21eed2d1b048c02a7f6e9ec999861f218149f957f7aaa31d702969078a49cd5ccd2b86b334f09b857e3d787fb0bcae5f21182bf5a043be36108ff319ce81f143bad28d7c38d05407ef437411a4ff2a0d4f739095f39c34990a01e54425984c4097c043916341b8d3134c92c240456ef9313a8feaa03c64c1d90fa46fa65d395bd7ec89e89f972184a38f35bc0740dbd5d02ddf5") rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x7c, 0x30, 0xb, 0x5, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x7f, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x8000}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x40}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="94213731a7b8d9a03d265e171881d53bb19a33579f110b7ce5fcb0927c193e9757397579b86602c3cc18ae85f1c7f24e83a5d974e4a1f0ac138ea00daf05172fa68fb13820c4e9f9ecce2632cdd464248a85d3a2270c7eb1953f", 0x5a, r4}, 0x64) sendmmsg$alg(r0, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="c5253bcd3a036550980f12b99a8eb7f91b16e84130918ebb81f153e6a6208b32be077a8eac51e7a9c55f1d5d24b08623b6ee20c7149d42520c9cdcaf14ce26c3ec82c80f71d731379503f6bf7a9ea7be4af64a63908898b096ec0ceda9b990f5", 0x60}, {&(0x7f00000001c0)="30863deb52c14c02d209c4532ec398a4acf207b11f56781731b6de4e69b73c577cb68f1ce16446e65ae3d771b9e496b7e33721ee3680ca4a8495f33803102ae1d7161fa87fa9940d4c40b593fe14d8669586897c5058851cd16ce996a5cc95341579a431da29bb1654c5b0bc6061c8c3d767e18d0200a9fa9e22c59cff8ce678274164e4bc2471a7af63359336fd6b8c452ab62aefdb0b3b54173c5589c9a1d8b38caac5ac57102a0b3a5bef50491db514568b1c6e5207efa302332dd94db4", 0xbf}, {&(0x7f0000000280)="a32b707ed1ad9e6f7c7726cb8849d6951376e440c823ad06b278eba0d3a37e3b109645933609f7abcfe44478948d737ebf734bb00630b2061018e306847d8f34b1ad70076b01c509cf4ed50dbbc3bb2fb0a4c86e3aef3fa2704b36bc1d94a2f630ffeef256b33e808bda31342f520862900bf613e99648e39bf06eed9f1a56fceade5d0966ed6a8ef83128ecff42d56e029a2e496d68633770fd500ee0a540eb310bfd70cbaf5432fad678f5dcdee1e375ccc7e1d3721a5be12cc7798cb9f3e7", 0xc0}, {&(0x7f0000000340)="d00157e31d4f2b435c5f410c4878968c74fe12e4d6c24dabb8d3a73edf5d0ec900e7882150c7ced2a208392fed01247e1259d4f624e9e1e1183b6b38b92fff010f42b40232a240dddf64e39fdf72db4b3467cb996d95ae44fa2facd45c69b69df0bf7ab9edd0138c014d0e03f02388a6383e09ba7e262faa6ab362c876e3100b5bc2bfca41bd0933f9efc5ae21c26d", 0x8f}, {&(0x7f0000000400)="52a7e594020cdd88496f0d165a69288b9813ef28930125dde4a94039820c8acf05c80da64fc7b3fc3ec3df94c8a0f90aa810e68a593b653802abde959b7449155397241fee1c32ac30c91359545c7b4b4072278a9fc1e9b38c98", 0x5a}, {&(0x7f0000000480)="627588fc663380648eb44c589571ff56310ec82e55f1cd9b115e306ff114d5a585591b86edd655523b6e3d36582bf0f83f21824a529a69c161841f682dc75bad674e1db9f40be76d9b67d61db2d41edc4e", 0x51}, {&(0x7f0000000500)="99a7e04942aadb13d3194732ffaa09e0d6c7cfa1cdc4588b2404c42effbddc162fce00ccacb08774d68a865892a82c1491f5425add2dd9019aadb6cfdfb7634a43166e7779c71fc7b853935262134b66c1fe6f9757e7f33f86524c33eb010ff8c1245dbacd95265edf8383fa9b314b399ec6681433d4c85b1fb9d67f164294c6b097f1ebc75b416fbd8253e078a62abdaf21ff6d60bfe3c8375c8b05a2df4bdb5d6772f5fcd8f6676079b722c397", 0xae}], 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x224, 0x40}], 0x1, 0x4004010) listen(r4, 0x0) read$FUSE(r0, &(0x7f0000004440)={0x2020}, 0x2020) 11.799093898s ago: executing program 2 (id=139): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setgroups(0x2, &(0x7f00000000c0)=[0x0, 0x0]) sendmsg$unix(0xffffffffffffffff, 0x0, 0x1001) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0x1) r2 = syz_io_uring_setup(0x35c9, &(0x7f00000004c0)={0x0, 0x1ffffc, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$inet(0xa, 0x801, 0x84) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x20000000009) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)=""/149, 0x95}], 0x1}, 0x100) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x3b94, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x6, 0xa, 0xffffffff, 0x2, 0x2, 0x3e7}) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000ef4d0000520000000008000041000600", @ANYRES32=r1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="050000000000000003000000000000000000000000000000000000005ce84ac9dc41fc9dae706e81049b29626ed4003996c104ed1acf7232f3d0e7556c2b5ac20557d721abbc28d2a32465d206d4fe7f6c59651e1441b2335a63186927dc25d34ab4ebbcbfc1a2603836974d9e878e0a12d8489dac9cdcb2938074892759a848767c1f0f9dc9ba42865b251eb882e29c63a120b531bfec418305d089c5653368d0989207a11f0f68a48acd853e663fa579e4132a76cade7323690cd3fd80cc2a85a089fac3f64491ec66ea1f6fcb065fbf768f2c2fab09bc7faa70ece988e03b"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc}, 0x4c) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000200)={0x5, 0xfffffffc, 0x64a, 0x2, 0x8, "75b988ff79772b02401fd3110e6787f873a6df"}) 11.723010873s ago: executing program 2 (id=144): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) mkdir(&(0x7f0000000200)='./file1\x00', 0x40) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, &(0x7f00000000c0)=0x5b) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000cc0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000600)="ff"}) syz_clone3(&(0x7f0000000840)={0x44020100, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$evdev(0x0, 0x3f, 0x822f01) openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r6, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f000008b000/0x3000)=nil) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) shmat(r2, &(0x7f000027e000/0x1000)=nil, 0x4000) mlockall(0x7) shmat(0x0, &(0x7f000037e000/0x4000)=nil, 0x7000) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r7, &(0x7f0000000100)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 11.579727716s ago: executing program 2 (id=145): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x4000000, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}}, 0x0) 11.400241497s ago: executing program 2 (id=148): keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000003d80), 0x200, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000440)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='f2fs_lookup_end\x00', r1, 0x0, 0x40000}, 0x18) r2 = getpid() sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x8) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) shutdown(r8, 0x1) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000540)=""/175, 0xaf}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB]) 11.397049349s ago: executing program 33 (id=148): keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000003d80), 0x200, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000440)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='f2fs_lookup_end\x00', r1, 0x0, 0x40000}, 0x18) r2 = getpid() sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x8) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) shutdown(r8, 0x1) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000540)=""/175, 0xaf}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB]) 5.34986903s ago: executing program 1 (id=199): keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000003d80), 0x200, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000440)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='f2fs_lookup_end\x00', r1, 0x0, 0x40000}, 0x18) r2 = getpid() sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x8) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) shutdown(r8, 0x1) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000540)=""/175, 0xaf}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 4.063569341s ago: executing program 1 (id=213): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x2, 0x2a82) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_io_uring_complete(0x0) close_range(r3, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000340)={0x230, 0x7d, 0x40, {{0x500, 0xef, 0x0, 0xb000000, {0x0, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000480)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x18, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$sr(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r8, &(0x7f00000020c0)={0x2020}, 0xfffffffffffffed7) syz_emit_vhci(&(0x7f0000004100)=ANY=[@ANYBLOB="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"], 0x1004) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000280)=@caif=@rfm={0x25, 0x10, "2415864f5485c061888e3e93e15af539"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)="b8b28225ea772f0daee8c7c98100e05188fb7cb440cdeaee04", 0x19}], 0x1}, 0x0) 3.550594251s ago: executing program 4 (id=209): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000640)=0x6) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_io_uring_setup(0x112, &(0x7f0000000a00)={0x0, 0x0, 0x10}, &(0x7f0000000580)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x43, 0x0, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) preadv2(r3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/97, 0x61}], 0x1, 0x0, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x200000000000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0xfffffffffffffe88) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$I2C(&(0x7f0000003000), 0x80000, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x20) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "1b6c8fe9124f9ba1"}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000180)={0xffff, 0x0, 0x0, 0x0, 0x0, "823af9032ae9da23"}) socket$nl_generic(0x10, 0x3, 0x10) 3.424433536s ago: executing program 3 (id=210): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000080)=r2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f0000000680)={0x2, @win={{0x9, 0xc, 0x8, 0x8}, 0x8, 0x0, &(0x7f00000002c0)={{0xb, 0x9, 0x9, 0x3}, &(0x7f0000000240)={{0x0, 0x2, 0x0, 0xc}, &(0x7f0000000040)={{0x99, 0x7, 0x1000, 0x8}}}}, 0x9, &(0x7f0000000480)="7c3db5b614f551010688956184f9a4681f27eaafa9b323316972c712ecc898a0adee2cf5cd1faafb1bae4b8f8eaa26a896c410bf6d572cf357ddf4b9f05aec5de92c2dcfcbfe3eddc40b0d495a56d8c0342910db18be55e897fc416978238af0101868eafea5029d2597d3ca9984b6bb2b1e150c8723b1ae43a420df1cf03770f02625a974423a3142fd9b903082920cb4e66ba5c0ae5416aa898ad3fbbaefaec7d450754fc1dc20f3149b3970a3d26e93b60b8ef96f820e9feb659febd10943b9a152ce177be19cfdac4d34c2435a1376d9", 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = shmget$private(0x0, 0x9000, 0x10, &(0x7f0000ff7000/0x9000)=nil) r7 = shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmdt(r7) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, &(0x7f00000000c0)=0x6, 0x8, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000a00)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xfa, "039fee", "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"}}, 0x110) r8 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r8, &(0x7f0000002340), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x8, @local, 0x0, 0x0, 'ovf\x00'}, 0x2c) write(r0, &(0x7f0000000940)="1780869ebe3ab666866b62437305091cbfc88b25c79f27ef660a312084e156e3f466d4e9d07290895bf9ffa77236e87006e9dae59b2f657fda59b0156b64ca994df45f428e6a921f909fa4c84cf27192a3c5918af57450e9c9e5df4e6cb8406925b6bc46befc1438295732f21a5286661d1094a8adac3bfd55188c77bd7d744e8f7588f02bdc7064623a1800"/155, 0x9b) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f043}) 2.923194779s ago: executing program 1 (id=212): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) openat$fuse(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) 2.568797517s ago: executing program 4 (id=214): keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000003d80), 0x200, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000440)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='f2fs_lookup_end\x00', r1, 0x0, 0x40000}, 0x18) r2 = getpid() sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x8) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) shutdown(r8, 0x1) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000540)=""/175, 0xaf}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB]) 2.475470935s ago: executing program 3 (id=215): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20008800}, 0xee) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000004900020025bd7000fedbdf250a000000", @ANYRES32=r4, @ANYBLOB="050000000800020007000000080002000100000014000100fc01000000000000000000000000000114000100fc020000000000000000000000000000d0b291535c733d92c366fc204b1ddc9adb904d985007d97a0a5e3615f05a74196b9bb13f60db3d620faee40ee169865bd79eccd5ec73b30211940f3bcf53b15f8ebc1431bb031df96c1120da941121bb297cc13334ee5014605200d9688678498770b828eb88cf9081d07f7252df93c095bc"], 0x54}, 0x1, 0x0, 0x0, 0x10000002}, 0x94) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f00000000c0)=0x82f, 0x4) 2.475206686s ago: executing program 3 (id=216): get_thread_area(0x0) syz_io_uring_setup(0x5565, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x63, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0xa0e00, 0x200, 0x1}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x12345}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000880}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f00000001c0), 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x33363248, 0x0, 0xa, [{}, {0x10}], 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket(0x22, 0x2, 0x3) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='signal_deliver\x00'}, 0x18) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r3], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x1f4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x3e, 0x0}, 0x14) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000240)=@security={'security\x00', 0xe, 0x4, 0x414, 0xffffffff, 0xd8, 0xd8, 0x22c, 0xffffffff, 0xffffffff, 0x34c, 0x34c, 0x34c, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0x5, 0x6}, {0x3, 0x5, 0x3}, {0xffffffffffffffff, 0x3, 0x2}, 0xa, 0x1}}}, {{@uncond, 0x0, 0xf8, 0x154, 0x0, {}, [@common=@ipv6header={{0x24}, {0x40, 0x0, 0x1}}, @common=@frag={{0x30}, {[0x7, 0x6], 0xfff, 0x2b, 0x3}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], 0x4e24, 0x4e22, 0x4e23, 0x4e23, 0xfffffff9, 0x1ea1, 0xff, 0x0, 0x1}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x1f}, [0x0, 0xff, 0xff000000, 0xff000000], [0xffffff00, 0xffffffff, 0xff000000, 0xffffff00], 'veth1_to_batadv\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x22, 0x6, 0x6, 0x10}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d3], 0x7, 0x9, 0x2}}, @common=@mh={{0x24}, {'\t}', 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x5, 0x6}, {0x2, 0x3, 0x1}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x470) 1.790162376s ago: executing program 1 (id=217): keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000003d80), 0x200, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000440)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='f2fs_lookup_end\x00', r1, 0x0, 0x40000}, 0x18) getpid() sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x8) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.665626279s ago: executing program 4 (id=218): r0 = openat$zero(0xffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x2, 0x100, 0xfff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0xfb, 0x4, 0x5, 0x20, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7800, 0x2, 0xfffffff8}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffff7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @alu={0x4, 0x0, 0x7, 0xb, 0x3, 0xfffffffffffffff8, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xab, &(0x7f00000001c0)=""/171, 0x40f00, 0x28, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000000340)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xf, 0x400, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0], 0x0, 0x10, 0x0, @void, @value}, 0x94) fcntl$getownex(r0, 0x10, &(0x7f00000004c0)={0x0, 0x0}) sched_setaffinity(r3, 0x8, &(0x7f0000000500)=0x61f) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000540)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r4, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3844}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) r5 = creat(&(0x7f00000007c0)='./file0\x00', 0x8) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000800)=@req={0x17, 0x4, 0x9, 0xfffffffd}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x5, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xffffff17}]}, &(0x7f0000000880)='GPL\x00', 0xffffff80, 0xd9, &(0x7f00000008c0)=""/217, 0x41000, 0x66, '\x00', r1, 0x25, r5, 0x8, &(0x7f00000009c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x8, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000a40)=[{0x5, 0x4, 0x3}, {0x1, 0x5, 0x4, 0x7}], 0x10, 0x0, @void, @value}, 0x94) r6 = userfaultfd(0x1) unlink(&(0x7f0000000b40)='./file0\x00') ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000b80)) setsockopt$inet_dccp_int(r5, 0x21, 0x10, &(0x7f0000000bc0)=0xfff, 0x4) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000c00)={0x37478000000, 0x101, 0x8, 0x8, 0x7, 0x20000000, "afb5b68e243b7a24e616f7d536a52733", 0x3, 0x6b, 0x1e, 0x3, 0x8, 0x6}) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000c40)=0x5, 0x4) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000c80)={0xce29, 0x9, 0x970, 0x7, 0x17f, 0x4}) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000cc0)={{0x0, 0x0, 0x80}}) mmap$snddsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r5, 0x6000) ftruncate(r6, 0x7) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000002d40)={@mcast1}, &(0x7f0000002d80)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000002dc0), &(0x7f0000002e00)=0x4) unshare(0x20030400) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000002e80)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002e40), 0x106}}, 0x20) r7 = syz_open_dev$mouse(&(0x7f0000002ec0), 0x2202, 0x200) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000002f00)={0xf2, 0x6}, 0x2) mkdir(&(0x7f0000002f40)='./file0\x00', 0x31) 1.530235349s ago: executing program 5 (id=219): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) 1.480162644s ago: executing program 4 (id=220): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0xd0, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1ffd, 0x2, 0x0, 0x0, "0062ba07008d9ecf3affff231500f786ff00"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r2, @ANYRES16=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYRESOCT=r0], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000081) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x4010) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x3ffe, 0x0, @mcast2, 0x8066}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000380)=@gcm_128={{0x304}, "0ca474864549ddec", '\x00', "6563aff3", "5ba3b7deb8fd11a3"}, 0x28) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0xfffffd9d) sendfile(r6, r7, 0x0, 0x8000002b) 1.300283904s ago: executing program 5 (id=221): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001fffffff3000000000001"], 0x114}], 0x1, 0x0, 0x0, 0xf000}, 0x0) 1.264377025s ago: executing program 5 (id=222): keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000003d80), 0x200, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000440)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xb, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='f2fs_lookup_end\x00', r1, 0x0, 0x40000}, 0x18) getpid() sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x8) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) shutdown(r7, 0x1) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.262250876s ago: executing program 3 (id=223): open(&(0x7f0000000000)='./file0\x00', 0x191080, 0x1) memfd_create(0x0, 0x67912babbd1ab0d3) 1.211715592s ago: executing program 3 (id=224): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES64=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1a, 0x4, 0x8, 0xb, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x6}, 0x18) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x1, 0x34324152, 0x0, 0x0, [{0x3}, {}, {0x1}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0941cbd2b100000000000000000000008000000000010006f03a3fad5a22ca629399e16cf7029206d6650c6f21e38e012c42422b69c3da46460a77734d42c54c11ac77e222e3916bb5b43abff3723e7b79697d030668f8b3c6e4b8f3634f7d9df1a5310f7d377c231ce0f7ae10526d91f47dd0fb068680d2eb74ac943303c664b08f723682f86803f118fcd5f21cb7f54243", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)='/', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) fcntl$setstatus(r0, 0x4, 0x400) keyctl$dh_compute(0x17, &(0x7f0000000040)={r5, r6, r6}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="440e059a2a200007"], 0x8) syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xffffffff, 0x400, 0x0, 0x2000}, &(0x7f0000000080)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x28, 0x0, @fd_index=0x3}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000001140)={0xdf, 0x0, 0x20000}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000002020000000900010073797a30000000000900020073797a32000000001c0004801800010c0002800800014000000003140000001100010000000000000000000000000a00000000000000000084e3070ccb78f5444f811e7b76e03ad54bb549a58c9accddb5e08808e5ed63cc8d1f0c399b567bcf7023306403d132f291403ed3974c3c9607dba8434bb1d4848cb65b5a0174fd2cf6f17c0b367d3be5d1ea207854e67d398092b001e72d9f6982e027478bd9dd2e8021387028d83da5f514d006323261a207d0617d83a8a7d301d0396c3dd6e8a707371c"], 0x70}}, 0x0) unshare(0x68040200) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) socketpair(0x15, 0x800, 0x0, &(0x7f0000000100)) 819.014542ms ago: executing program 1 (id=225): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000017c0)=@newlink={0xb4, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x8c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x200}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb, 0x50}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xfffffff7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2d8, 0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x47, 0x80}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0xb4}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000009, 0x10, r4, 0xad98c000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r8) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB="05"], 0x10) close(r10) close(r11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, r9, 0x7, 0x70bd2f, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x50000001}, 0x44000) sendmsg$NLBL_UNLABEL_C_ACCEPT(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r9, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:var_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x840) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x38, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0xfffffffe}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x1000b, 0x5}, {}]}}) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r15, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r13, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r12, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x80) 490.692387ms ago: executing program 1 (id=226): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) socket(0x2a, 0x2, 0xe2) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='contention_end\x00', r5}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syslog(0x2, &(0x7f0000000480)=""/137, 0x89) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)={0x3c, 0x0, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}]}]}, 0x3c}}, 0x0) setsockopt(r0, 0x3, 0xad, 0x0, 0x0) 288.641482ms ago: executing program 5 (id=227): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r1, 0x0) sigaltstack(&(0x7f0000001000)={0x0, 0x80000000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) fcntl$addseals(r2, 0x409, 0x8) preadv2(r0, &(0x7f0000000180)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, 0xe23, 0x3, 0x10) 140.082902ms ago: executing program 5 (id=228): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 64) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = open(0x0, 0x14507f, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x11, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lstat(0x0, &(0x7f0000000440)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async, rerun: 64) chdir(&(0x7f0000000080)='./file1\x00') (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) r3 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) (async) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x3874) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x17, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xd}, @ldst={0x3, 0x1, 0x0, 0xa, 0x5, 0xfffffffffffffffe, 0x8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}]}, &(0x7f0000000200)='syzkaller\x00', 0x5205, 0xd, &(0x7f0000000280)=""/13, 0x41100, 0x50, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000600)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xe, 0x7ff, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[r4, r2, 0xffffffffffffffff, r2, r4, r4, 0xffffffffffffffff, r6], &(0x7f0000000700)=[{0x5, 0x5, 0x6}, {0x2, 0x5, 0x10}], 0x10, 0x451, @void, @value}, 0x94) (rerun: 32) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 32) 139.858567ms ago: executing program 4 (id=229): read$FUSE(0xffffffffffffffff, &(0x7f0000002340)={0x2020}, 0x2020) 59.206783ms ago: executing program 5 (id=230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="d0a0354dffab6d96cf5af62f669301533c8ef0a2f70375aa3994272dbf0bf432561763f6fa79389e3b6509eaf1bb2057e0280a43ca8cef1db2399424873f5e62323125ce18c702c574a0158d07924d425a"], 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r5 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f00000004c0)={0x0, "03f250d2528e22061e2daedcbbf930dedf4904d8f9e64faada797532454dd344c00c8a3f00c5f54db700000000001000"}) 322.843µs ago: executing program 4 (id=231): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000001c0)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xfffffffffffffe64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x25d}, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r11, 0x8800000) r12 = open(&(0x7f0000000040)='./file1\x00', 0x121000, 0x0) r13 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendfile(r13, r12, 0x0, 0x4000000053d2) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) r14 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r14, 0x40045532, &(0x7f0000000580)) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2df0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180fff0000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:25731' (ED25519) to the list of known hosts. [ 32.675042][ T5856] cgroup: Unknown subsys name 'net' [ 32.820532][ T5856] cgroup: Unknown subsys name 'cpuset' [ 32.823692][ T5856] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.661192][ T5856] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.661952][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.664343][ T5932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.670646][ T5939] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.673498][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.675820][ T5939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.678311][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.681057][ T5944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.683787][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.685994][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.688539][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.690725][ T5940] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.692631][ T5940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.695013][ T5940] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.695844][ T5939] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.696896][ T5940] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.699070][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.701069][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.702660][ T5939] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.709596][ T66] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.711911][ T66] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 35.713771][ T5944] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.713905][ T66] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 35.716247][ T5944] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.719979][ T5944] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.864494][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 35.880150][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 35.934180][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 36.010546][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.013439][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.016129][ T5931] bridge_slave_0: entered allmulticast mode [ 36.018727][ T5931] bridge_slave_0: entered promiscuous mode [ 36.024182][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.026685][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.028762][ T5931] bridge_slave_1: entered allmulticast mode [ 36.030766][ T5931] bridge_slave_1: entered promiscuous mode [ 36.085808][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 36.102933][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.104850][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.106724][ T5934] bridge_slave_0: entered allmulticast mode [ 36.109198][ T5934] bridge_slave_0: entered promiscuous mode [ 36.125377][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.127718][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.129652][ T5934] bridge_slave_1: entered allmulticast mode [ 36.131652][ T5934] bridge_slave_1: entered promiscuous mode [ 36.141940][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.171434][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.174672][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.186563][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.188840][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.190746][ T5937] bridge_slave_0: entered allmulticast mode [ 36.192859][ T5937] bridge_slave_0: entered promiscuous mode [ 36.195863][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.217068][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.219048][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.220952][ T5937] bridge_slave_1: entered allmulticast mode [ 36.223179][ T5937] bridge_slave_1: entered promiscuous mode [ 36.242727][ T5934] team0: Port device team_slave_0 added [ 36.254443][ T5931] team0: Port device team_slave_0 added [ 36.272560][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.276109][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.279561][ T5934] team0: Port device team_slave_1 added [ 36.281790][ T5931] team0: Port device team_slave_1 added [ 36.293262][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.295289][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.298910][ T5941] bridge_slave_0: entered allmulticast mode [ 36.301027][ T5941] bridge_slave_0: entered promiscuous mode [ 36.350619][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.352771][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.354734][ T5941] bridge_slave_1: entered allmulticast mode [ 36.357106][ T5941] bridge_slave_1: entered promiscuous mode [ 36.361850][ T5937] team0: Port device team_slave_0 added [ 36.380420][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.382278][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.389159][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.393538][ T5937] team0: Port device team_slave_1 added [ 36.404345][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.406199][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.413393][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.419274][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.421103][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.428344][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.443829][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.447019][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.448870][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.456659][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.477704][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.498340][ T5941] team0: Port device team_slave_0 added [ 36.500207][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.502035][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.509364][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.528732][ T5941] team0: Port device team_slave_1 added [ 36.530509][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.532254][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.539842][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.553510][ T5931] hsr_slave_0: entered promiscuous mode [ 36.555643][ T5931] hsr_slave_1: entered promiscuous mode [ 36.574000][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.576330][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.582988][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.600030][ T5934] hsr_slave_0: entered promiscuous mode [ 36.602389][ T5934] hsr_slave_1: entered promiscuous mode [ 36.604647][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.607417][ T5934] Cannot create hsr debugfs directory [ 36.609537][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.611458][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.618498][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.667898][ T5937] hsr_slave_0: entered promiscuous mode [ 36.669771][ T5937] hsr_slave_1: entered promiscuous mode [ 36.671504][ T5937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.673425][ T5937] Cannot create hsr debugfs directory [ 36.756333][ T5941] hsr_slave_0: entered promiscuous mode [ 36.759570][ T5941] hsr_slave_1: entered promiscuous mode [ 36.761578][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.763590][ T5941] Cannot create hsr debugfs directory [ 36.894864][ T5931] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.901086][ T5931] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.911726][ T5931] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.916336][ T5931] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.930154][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.934976][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.939000][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.947489][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.963475][ T5937] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.967181][ T5937] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.970819][ T5937] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.974558][ T5937] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.008939][ T5941] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.013148][ T5941] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.017880][ T5941] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.021653][ T5941] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.047962][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.072041][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.076222][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.086839][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.088880][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.108414][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.111227][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.113105][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.128435][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.130344][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.132838][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.134647][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.142504][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.151927][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.161490][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.170668][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.172521][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.178271][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.185362][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.187821][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.195198][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.197058][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.205414][ T5934] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.208535][ T5934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.228290][ T5937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.237707][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.239577][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.256611][ T5941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.271554][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.295220][ T5931] veth0_vlan: entered promiscuous mode [ 37.300494][ T5931] veth1_vlan: entered promiscuous mode [ 37.303554][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.311899][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.329780][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.341487][ T5934] veth0_vlan: entered promiscuous mode [ 37.345001][ T5931] veth0_macvtap: entered promiscuous mode [ 37.354042][ T5931] veth1_macvtap: entered promiscuous mode [ 37.362803][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.370660][ T5934] veth1_vlan: entered promiscuous mode [ 37.377352][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.384506][ T5937] veth0_vlan: entered promiscuous mode [ 37.390418][ T5931] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.393442][ T5931] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.396351][ T5931] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.399549][ T5931] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.410508][ T5941] veth0_vlan: entered promiscuous mode [ 37.420466][ T5937] veth1_vlan: entered promiscuous mode [ 37.424660][ T5941] veth1_vlan: entered promiscuous mode [ 37.443346][ T5934] veth0_macvtap: entered promiscuous mode [ 37.451715][ T5934] veth1_macvtap: entered promiscuous mode [ 37.477897][ T5937] veth0_macvtap: entered promiscuous mode [ 37.481072][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.484244][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.488728][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.493347][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.493554][ T5934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.496213][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.500100][ T5934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.505437][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.510270][ T5937] veth1_macvtap: entered promiscuous mode [ 37.513125][ T5941] veth0_macvtap: entered promiscuous mode [ 37.516411][ T5934] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.519164][ T5934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.521531][ T5934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.523895][ T5934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.534999][ T5941] veth1_macvtap: entered promiscuous mode [ 37.543567][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.545458][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.546342][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.550719][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.554323][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.557389][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.560531][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.577613][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.578716][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.579853][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.583076][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.588921][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.591627][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.594103][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.596919][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.601035][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.604534][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.608942][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.611466][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.614121][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.617620][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.622892][ T5931] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.625920][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.627711][ T5937] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.630089][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.632445][ T5937] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.637261][ T5937] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.640087][ T5937] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.649982][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.652737][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.655277][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.658283][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.661067][ T5941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.664279][ T5941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.669378][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.678623][ T5941] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.681733][ T5941] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.684715][ T5941] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.687640][ T5941] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.718063][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.720193][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.728369][ T5944] Bluetooth: hci0: command tx timeout [ 37.728381][ T5932] Bluetooth: hci1: command tx timeout [ 37.746458][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.748845][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 37.750722][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.753278][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.755577][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.761147][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.763161][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.819126][ T5932] Bluetooth: hci3: command tx timeout [ 37.819282][ T5944] Bluetooth: hci2: command tx timeout [ 37.947253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.043340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.047185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.054867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 38.145787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.171625][ T6004] netfs: Couldn't get user pages (rc=-14) [ 38.184675][ T39] audit: type=1326 audit(1734290311.190:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 38.190540][ T39] audit: type=1326 audit(1734290311.190:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 38.196378][ T39] audit: type=1326 audit(1734290311.190:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 38.201689][ T39] audit: type=1326 audit(1734290311.190:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 38.207590][ T39] audit: type=1326 audit(1734290311.200:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.3.4" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 38.248126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.760093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.762231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.764388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 38.766481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 39.257472][ T63] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 39.600273][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12'. [ 39.657445][ T63] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 39.806910][ T5944] Bluetooth: hci1: command tx timeout [ 39.816986][ T5944] Bluetooth: hci0: command tx timeout [ 39.820359][ T63] usb 5-1: Using ep0 maxpacket: 16 [ 39.849990][ T63] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 39.852342][ T63] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 39.854396][ T63] usb 5-1: Product: syz [ 39.855488][ T63] usb 5-1: Manufacturer: syz [ 39.856693][ T63] usb 5-1: SerialNumber: syz [ 39.859345][ T63] usb 5-1: config 0 descriptor?? [ 39.898577][ T5932] Bluetooth: hci3: command tx timeout [ 39.902003][ T5944] Bluetooth: hci2: command tx timeout [ 39.976242][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'. [ 40.027305][ T6052] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 40.599202][ T6053] ======================================================= [ 40.599202][ T6053] WARNING: The mand mount option has been deprecated and [ 40.599202][ T6053] and is ignored by this kernel. Remove the mand [ 40.599202][ T6053] option from the mount to silence this warning. [ 40.599202][ T6053] ======================================================= [ 40.738921][ T6065] [U] [ 40.739873][ T6065] [U] [ 40.740903][ T6065] [U] [ 40.741924][ T6065] [U] [ 40.743027][ T6065] [U] [ 40.744110][ T6065] [U] [ 40.745138][ T6065] [U] [ 40.746147][ T6065] [U] [ 40.747462][ T6065] [U] [ 40.748507][ T6065] [U] [ 40.749529][ T6065] [U] [ 40.750533][ T6065] [U] [ 40.751501][ T6065] [U] [ 40.752221][ T6065] [U] [ 40.753029][ T6065] [U] [ 40.754058][ T6065] [U] [ 40.755114][ T6065] [U] [ 40.755996][ T6065] [U] [ 40.756780][ T6065] [U] [ 40.757521][ T6065] [U] [ 40.758993][ T6065] [U] [ 40.760035][ T6065] [U] [ 40.761043][ T6065] [U] [ 40.762055][ T6065] [U] [ 40.763106][ T6065] [U] [ 40.764137][ T6065] [U] [ 40.765152][ T6065] [U] [ 40.766182][ T6065] [U] [ 40.767728][ T6065] [U] [ 40.768762][ T6065] [U] [ 40.769780][ T6065] [U] [ 40.770670][ T6065] [U] [ 40.771574][ T6065] [U] [ 40.772317][ T6065] [U] [ 40.773280][ T6065] [U] [ 40.774364][ T6065] [U] [ 40.775420][ T6065] [U] [ 40.776452][ T6065] [U] [ 40.777489][ T6065] [U] [ 40.778478][ T6065] [U] [ 40.779744][ T6065] [U] [ 40.780781][ T6065] [U] [ 40.781800][ T6065] [U] [ 40.782831][ T6065] [U] [ 40.783894][ T6065] [U] [ 40.784875][ T6065] [U] [ 40.786057][ T6065] [U] [ 40.787090][ T6065] [U] [ 40.788217][ T6065] [U] [ 40.789238][ T6065] [U] [ 40.790055][ T6065] [U] [ 40.790868][ T6065] [U] [ 40.792442][ T6065] [U] [ 40.792750][ T6066] netlink: 'syz.2.16': attribute type 27 has an invalid length. [ 40.793454][ T6065] [U] [ 40.793499][ T6065] [U] [ 40.798156][ T6065] [U] [ 40.799427][ T6065] [U] [ 40.800328][ T6065] [U] [ 40.801058][ T6065] [U] [ 40.801786][ T6065] [U] [ 40.802537][ T6065] [U] [ 40.803290][ T6065] [U] [ 40.804115][ T6065] [U] [ 40.805005][ T6065] [U] [ 40.806049][ T6065] [U] [ 40.807112][ T6065] [U] [ 40.808112][ T6065] [U] [ 40.809086][ T6065] [U] [ 40.810829][ T6065] [U] [ 40.811868][ T6065] [U] [ 40.812833][ T6065] [U] [ 40.813865][ T6065] [U] [ 40.814922][ T6065] [U] [ 40.815956][ T6065] [U] [ 40.816992][ T6065] [U] [ 40.818027][ T6065] [U] [ 40.819485][ T6065] [U] [ 40.820530][ T6065] [U] [ 40.821543][ T6065] [U] [ 40.822517][ T6065] [U] [ 40.823582][ T6065] [U] [ 40.824313][ T6065] [U] [ 40.825044][ T6065] [U] [ 40.825779][ T6065] [U] [ 40.826545][ T6065] [U] [ 40.827582][ T6065] [U] [ 40.828613][ T6065] [U] [ 40.829648][ T6065] [U] [ 40.830806][ T6065] [U] [ 40.831835][ T6065] [U] [ 40.832855][ T6065] [U] [ 40.833877][ T6065] [U] [ 40.834631][ T6065] [U] [ 40.835337][ T6065] [U] [ 40.836057][ T6065] [U] [ 40.836795][ T6065] [U] [ 40.837658][ T6065] [U] [ 40.838417][ T6065] [U] [ 40.839199][ T6065] [U] [ 40.840124][ T6065] [U] [ 40.841161][ T6065] [U] [ 40.842000][ T6065] [U] [ 40.842743][ T6065] [U] [ 40.843527][ T6065] [U] [ 40.848071][ T6065] [U] [ 40.848830][ T6065] [U] [ 40.849630][ T6065] [U] [ 40.850442][ T6065] [U] [ 40.853762][ T6065] [U] [ 40.854703][ T6065] [U] [ 40.855473][ T6065] [U] [ 40.856200][ T6065] [U] [ 40.857098][ T6065] [U] [ 40.857844][ T6065] [U] [ 40.858586][ T6065] [U] [ 40.859336][ T6065] [U] [ 40.860110][ T6065] [U] [ 40.860840][ T6065] [U] [ 40.861617][ T6065] [U] [ 40.862345][ T6065] [U] [ 40.863120][ T6065] [U] [ 40.863936][ T6065] [U] [ 40.864719][ T6065] [U] [ 40.865476][ T6065] [U] [ 40.866258][ T6065] [U] [ 40.867063][ T6065] [U] [ 40.867304][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.867785][ T6065] [U] [ 40.872026][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.995290][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.000854][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.113120][ T6066] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.116053][ T6066] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.119421][ T6066] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.121515][ T6066] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.149943][ T6067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16'. [ 41.309890][ T6075] netlink: 68 bytes leftover after parsing attributes in process `syz.1.19'. [ 41.502704][ T6058] [U] [ 41.771814][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 41.826899][ T5974] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 41.833837][ T6082] hsr_slave_1 (unregistering): left promiscuous mode [ 41.886874][ T5944] Bluetooth: hci0: command tx timeout [ 41.888541][ T5932] Bluetooth: hci1: command tx timeout [ 41.966999][ T5932] Bluetooth: hci2: command tx timeout [ 41.967659][ T5944] Bluetooth: hci3: command tx timeout [ 41.976908][ T5974] usb 7-1: Using ep0 maxpacket: 8 [ 41.981417][ T5974] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 41.984309][ T5974] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 41.986951][ T5974] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 41.989431][ T5974] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 41.992935][ T5974] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 41.995281][ T5974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.204244][ T5974] usb 7-1: GET_CAPABILITIES returned 0 [ 42.205794][ T5974] usbtmc 7-1:16.0: can't read capabilities [ 42.464057][ T30] usb 5-1: USB disconnect, device number 2 [ 42.522426][ T6097] fuse: Unknown parameter 'ZÔ?0x0000000000000004' [ 43.540103][ T6117] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 43.967962][ T5944] Bluetooth: hci1: command tx timeout [ 43.968095][ T5932] Bluetooth: hci0: command tx timeout [ 44.014175][ T6119] @: renamed from vlan0 (while UP) [ 44.022863][ T6119] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 44.024635][ T6119] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 44.027431][ T6119] vhci_hcd vhci_hcd.0: Device attached [ 44.032438][ T6119] process 'syz.3.27' launched './file0' with NULL argv: empty string added [ 44.046867][ T5932] Bluetooth: hci2: command tx timeout [ 44.057208][ T5932] Bluetooth: hci3: command tx timeout [ 44.058796][ T6121] vhci_hcd: connection closed [ 44.060127][ T64] vhci_hcd: stop threads [ 44.063626][ T64] vhci_hcd: release socket [ 44.065220][ T64] vhci_hcd: disconnect device [ 44.626703][ T30] usb 7-1: USB disconnect, device number 2 [ 44.674704][ T6139] mkiss: ax0: crc mode is auto. [ 45.614702][ T6156] binder: 6155:6156 ioctl c0306201 200001c0 returned -14 [ 45.777762][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39'. [ 45.945507][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'. [ 46.057319][ T5932] Bluetooth: hci0: command tx timeout [ 46.273915][ T6178] tipc: Enabling of bearer rejected, failed to enable media [ 47.054393][ T6187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.44'. [ 47.134294][ T6189] netlink: 'syz.1.45': attribute type 30 has an invalid length. [ 47.152076][ T6189] tipc: Trying to set illegal importance in message [ 47.880168][ T6203] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 48.142233][ T6205] netlink: 'syz.1.48': attribute type 1 has an invalid length. [ 48.145775][ T6205] netlink: 224 bytes leftover after parsing attributes in process `syz.1.48'. [ 48.150673][ T6205] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.159028][ T6205] netlink: 'syz.1.48': attribute type 10 has an invalid length. [ 48.171447][ T6205] team0: Port device geneve1 added [ 48.996678][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.52'. [ 49.037481][ T6221] netlink: 'syz.2.53': attribute type 1 has an invalid length. [ 49.039445][ T6221] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.53'. [ 49.151319][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 49.157070][ T6225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 49.195828][ T6226] block device autoloading is deprecated and will be removed. [ 49.213923][ T6228] Bluetooth: MGMT ver 1.23 [ 49.326875][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 49.328405][ T5932] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 49.331194][ T5932] Bluetooth: hci2: Injecting HCI hardware error event [ 49.335080][ T5944] Bluetooth: hci2: hardware error 0x00 [ 49.486949][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 49.490857][ T8] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 49.495245][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 49.499006][ T8] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 49.502616][ T8] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 49.507620][ T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 49.510887][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.721394][ T8] usb 7-1: GET_CAPABILITIES returned 0 [ 49.723286][ T8] usbtmc 7-1:16.0: can't read capabilities [ 50.526854][ T5932] Bluetooth: hci3: command tx timeout [ 50.638375][ T6240] No control pipe specified [ 50.709362][ T6241] netlink: 256 bytes leftover after parsing attributes in process `syz.1.58'. [ 51.406900][ T5944] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 51.814886][ T1134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.868795][ T1134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.909329][ T5932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.911793][ T5932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.914253][ T5932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.918644][ T5932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.921496][ T5932] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 51.923598][ T5932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.927983][ T1134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.988049][ T1134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.034488][ T6267] chnl_net:caif_netlink_parms(): no params data found [ 52.080457][ T30] usb 7-1: USB disconnect, device number 3 [ 52.118211][ T6071] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.131438][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.133447][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.135416][ T6267] bridge_slave_0: entered allmulticast mode [ 52.137783][ T6267] bridge_slave_0: entered promiscuous mode [ 52.140714][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.143369][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.145791][ T6267] bridge_slave_1: entered allmulticast mode [ 52.149589][ T6267] bridge_slave_1: entered promiscuous mode [ 52.191258][ T6267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.198584][ T6267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.215376][ T1134] bridge_slave_1: left allmulticast mode [ 52.218353][ T1134] bridge_slave_1: left promiscuous mode [ 52.221428][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.228829][ T1134] bridge_slave_0: left allmulticast mode [ 52.230927][ T1134] bridge_slave_0: left promiscuous mode [ 52.233438][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.276862][ T6071] usb 8-1: Using ep0 maxpacket: 8 [ 52.279517][ T6071] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 52.283426][ T6071] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 52.286363][ T6071] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 52.289579][ T6071] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 52.293953][ T6071] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 52.296951][ T6071] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.505720][ T6071] usb 8-1: GET_CAPABILITIES returned 0 [ 52.507532][ T6071] usbtmc 8-1:16.0: can't read capabilities [ 52.591011][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.595214][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.599406][ T1134] bond0 (unregistering): Released all slaves [ 52.635334][ T6267] team0: Port device team_slave_0 added [ 52.640196][ T6267] team0: Port device team_slave_1 added [ 52.658574][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.660551][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.667701][ T6267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.672204][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.673942][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.680390][ T6267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.713049][ T6267] hsr_slave_0: entered promiscuous mode [ 52.715008][ T6267] hsr_slave_1: entered promiscuous mode [ 52.716859][ T6267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.718733][ T6267] Cannot create hsr debugfs directory [ 52.811825][ T6267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.815182][ T6267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.818799][ T6267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.821883][ T6267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.879492][ T6267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.889907][ T6267] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.894668][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.896554][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.901143][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.904471][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.945971][ T1134] hsr_slave_0: left promiscuous mode [ 52.957516][ T1134] hsr_slave_1: left promiscuous mode [ 52.960330][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.963080][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.968507][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.971222][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.003700][ T1134] veth1_macvtap: left promiscuous mode [ 53.006027][ T1134] veth0_macvtap: left promiscuous mode [ 53.010799][ T1134] veth1_vlan: left promiscuous mode [ 53.012413][ T1134] veth0_vlan: left promiscuous mode [ 53.601802][ T6289] capability: warning: `syz.1.75' uses 32-bit capabilities (legacy support in use) [ 53.638138][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 53.698877][ T946] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 53.707967][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 53.857050][ T946] usb 7-1: Using ep0 maxpacket: 8 [ 53.879771][ T946] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 53.883815][ T946] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 53.888860][ T946] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 53.892328][ T946] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.897001][ T946] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 53.900152][ T946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.976939][ T5932] Bluetooth: hci1: command tx timeout [ 54.115280][ T946] usb 7-1: GET_CAPABILITIES returned 0 [ 54.116726][ T946] usbtmc 7-1:16.0: can't read capabilities [ 54.492803][ T6267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.673004][ T6267] veth0_vlan: entered promiscuous mode [ 54.677616][ T6267] veth1_vlan: entered promiscuous mode [ 54.690128][ T6267] veth0_macvtap: entered promiscuous mode [ 54.693211][ T6267] veth1_macvtap: entered promiscuous mode [ 54.700765][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.703998][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.706563][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.709773][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.713273][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.719798][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.722585][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.724834][ T6267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.730580][ T6267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.733693][ T6267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.741739][ T6267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.746058][ T6267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.749864][ T6267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.751985][ T6267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.793865][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.798959][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.809649][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.812607][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.889464][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.64'. [ 55.337712][ T5976] usb 8-1: USB disconnect, device number 2 [ 55.437429][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.71'. [ 56.048946][ T5932] Bluetooth: hci1: command tx timeout [ 56.471909][ T6071] usb 7-1: USB disconnect, device number 4 [ 56.485740][ T6346] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.490831][ T6346] netlink: 'syz.4.77': attribute type 25 has an invalid length. [ 56.493405][ T6346] netlink: 184 bytes leftover after parsing attributes in process `syz.4.77'. [ 56.496111][ T6346] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 56.770930][ T6356] netlink: 60 bytes leftover after parsing attributes in process `syz.4.81'. [ 57.475096][ T6371] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 57.485020][ T5932] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 57.908704][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 57.966928][ T5976] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 58.056898][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 58.061514][ T25] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 58.064385][ T25] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 58.066819][ T25] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 58.069081][ T25] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.072532][ T25] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 58.074813][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.127012][ T5932] Bluetooth: hci1: command tx timeout [ 58.136870][ T5976] usb 7-1: Using ep0 maxpacket: 8 [ 58.141635][ T5976] usb 7-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 58.144955][ T5976] usb 7-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 58.150224][ T5976] usb 7-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 58.153644][ T5976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.156576][ T5976] usb 7-1: Product: syz [ 58.158263][ T5976] usb 7-1: Manufacturer: syz [ 58.160066][ T5976] usb 7-1: SerialNumber: syz [ 58.165391][ T5976] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 58.169737][ T5976] dvb-usb: bulk message failed: -22 (3/0) [ 58.226416][ T5976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 58.230408][ T5976] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 58.235041][ T5976] usb 7-1: media controller created [ 58.243471][ T5976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 58.253473][ T5976] dvb-usb: bulk message failed: -22 (6/0) [ 58.255816][ T5976] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 58.261706][ T5976] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input5 [ 58.276164][ T5976] dvb-usb: schedule remote query interval to 150 msecs. [ 58.278781][ T5976] dvb-usb: bulk message failed: -22 (3/0) [ 58.283330][ T25] usb 8-1: GET_CAPABILITIES returned 0 [ 58.284589][ T25] usbtmc 8-1:16.0: can't read capabilities [ 58.297713][ T5976] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 58.371987][ T5976] usb 7-1: USB disconnect, device number 5 [ 58.403982][ T5976] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 59.253791][ T6402] netlink: 60 bytes leftover after parsing attributes in process `syz.1.95'. [ 59.267298][ T6403] netlink: 'syz.2.97': attribute type 4 has an invalid length. [ 59.278835][ T6403] netlink: 52 bytes leftover after parsing attributes in process `syz.2.97'. [ 59.468783][ T6410] tipc: Started in network mode [ 59.470654][ T6410] tipc: Node identity e0000001, cluster identity 4711 [ 59.473187][ T6410] tipc: Enabling of bearer rejected, failed to enable media [ 59.480144][ T6410] netlink: 'syz.2.99': attribute type 10 has an invalid length. [ 59.497052][ T6410] Zero length message leads to an empty skb [ 59.525429][ T6413] Invalid ELF header type: 2 != 1 [ 60.207424][ T5932] Bluetooth: hci1: command tx timeout [ 60.230960][ T6407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 60.289819][ T6426] FAULT_INJECTION: forcing a failure. [ 60.289819][ T6426] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 60.294909][ T6426] CPU: 2 UID: 0 PID: 6426 Comm: syz.4.104 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 60.298555][ T6426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.302403][ T6426] Call Trace: [ 60.303644][ T6426] [ 60.304741][ T6426] dump_stack_lvl+0x16c/0x1f0 [ 60.306478][ T6426] should_fail_ex+0x497/0x5b0 [ 60.308226][ T6426] _copy_from_iter+0x29b/0x1400 [ 60.310051][ T6426] ? trace_lock_acquire+0x14e/0x1f0 [ 60.311887][ T6426] ? __pfx__copy_from_iter+0x10/0x10 [ 60.313840][ T6426] ? __virt_addr_valid+0x1a4/0x590 [ 60.315733][ T6426] ? __virt_addr_valid+0x5e/0x590 [ 60.317562][ T6426] ? __phys_addr_symbol+0x30/0x80 [ 60.319412][ T6426] ? __check_object_size+0x488/0x710 [ 60.321343][ T6426] file_tty_write.constprop.0+0x48d/0x9a0 [ 60.323385][ T6426] vfs_write+0x5ae/0x1150 [ 60.324990][ T6426] ? __pfx_tty_write+0x10/0x10 [ 60.326424][ T6426] ? __pfx_vfs_write+0x10/0x10 [ 60.327919][ T6426] ? __fget_files+0x40/0x3a0 [ 60.329153][ T6426] ksys_write+0x12b/0x250 [ 60.330539][ T6426] ? __pfx_ksys_write+0x10/0x10 [ 60.332287][ T6426] __do_fast_syscall_32+0x73/0x120 [ 60.334125][ T6426] do_fast_syscall_32+0x32/0x80 [ 60.335920][ T6426] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.338238][ T6426] RIP: 0023:0xf70ae579 [ 60.339760][ T6426] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 60.346709][ T6426] RSP: 002b:00000000f50a055c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 60.349737][ T6426] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020002080 [ 60.352545][ T6426] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.355359][ T6426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.358140][ T6426] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 60.360977][ T6426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.363852][ T6426] [ 60.708404][ T1015] usb 8-1: USB disconnect, device number 3 [ 60.772704][ T6441] FAULT_INJECTION: forcing a failure. [ 60.772704][ T6441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.777629][ T6441] CPU: 2 UID: 0 PID: 6441 Comm: syz.2.108 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 60.781185][ T6441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.784879][ T6441] Call Trace: [ 60.786047][ T6441] [ 60.787106][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 60.788759][ T6441] should_fail_ex+0x497/0x5b0 [ 60.790425][ T6441] _copy_from_iter+0x29b/0x1400 [ 60.792136][ T6441] ? trace_lock_acquire+0x14e/0x1f0 [ 60.793947][ T6441] ? __alloc_skb+0x200/0x380 [ 60.795548][ T6441] ? __pfx__copy_from_iter+0x10/0x10 [ 60.797363][ T6441] ? __virt_addr_valid+0x1a4/0x590 [ 60.799140][ T6441] ? __virt_addr_valid+0x5e/0x590 [ 60.800870][ T6441] ? __phys_addr_symbol+0x30/0x80 [ 60.802592][ T6441] ? __check_object_size+0x4a1/0x710 [ 60.804463][ T6441] netlink_sendmsg+0x813/0xd70 [ 60.806098][ T6441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.807926][ T6441] ____sys_sendmsg+0x9ae/0xb40 [ 60.809588][ T6441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 60.811363][ T6441] ? get_compat_msghdr+0x11b/0x170 [ 60.813020][ T6441] ___sys_sendmsg+0x135/0x1e0 [ 60.814671][ T6441] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.816442][ T6441] ? __pfx_lock_release+0x10/0x10 [ 60.818282][ T6441] ? trace_lock_acquire+0x14e/0x1f0 [ 60.820071][ T6441] ? __fget_files+0x206/0x3a0 [ 60.821676][ T6441] __sys_sendmsg+0x16e/0x220 [ 60.823254][ T6441] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.825001][ T6441] __do_fast_syscall_32+0x73/0x120 [ 60.826718][ T6441] do_fast_syscall_32+0x32/0x80 [ 60.828343][ T6441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 60.830530][ T6441] RIP: 0023:0xf7f72579 [ 60.831982][ T6441] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 60.838404][ T6441] RSP: 002b:00000000f50c655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 60.841191][ T6441] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200008c0 [ 60.843838][ T6441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 60.846434][ T6441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 60.849061][ T6441] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 60.851754][ T6441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 60.854359][ T6441] [ 61.010224][ T6442] Bluetooth: hci4: Frame reassembly failed (-84) [ 61.013171][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 62.088269][ T6474] netlink: 'syz.4.116': attribute type 10 has an invalid length. [ 62.099879][ T6474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.102824][ T6474] team0: Port device bond0 added [ 62.163495][ T6474] PKCS7: Unknown OID: [5] (bad) [ 62.165461][ T6474] PKCS7: Only support pkcs7_signedData type [ 62.287005][ T5944] Bluetooth: hci1: command tx timeout [ 62.866353][ T6485] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 62.878288][ T5944] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 63.087638][ T5932] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 63.483413][ T6502] Process accounting resumed [ 63.763027][ T6527] usb usb7: usbfs: process 6527 (syz.2.136) did not claim interface 0 before use [ 63.800241][ T6531] netlink: 'syz.2.139': attribute type 1 has an invalid length. [ 63.802282][ T6531] netlink: 'syz.2.139': attribute type 2 has an invalid length. [ 63.847065][ T63] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 64.030312][ T63] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 64.033503][ T63] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 64.035902][ T6555] tmpfs: Bad value for 'mpol' [ 64.037795][ T63] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 64.037808][ T63] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.040768][ T6518] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 64.061999][ T63] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 64.110478][ T6557] netlink: 48 bytes leftover after parsing attributes in process `syz.1.147'. [ 64.148513][ T5931] syz-executor (5931) used greatest stack depth: 21104 bytes left [ 64.176921][ T5976] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 64.250994][ T5942] usb 8-1: USB disconnect, device number 4 [ 64.302203][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.305911][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.309088][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.312323][ T5932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.316027][ T5932] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.321699][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.346903][ T5976] usb 9-1: Using ep0 maxpacket: 8 [ 64.349456][ T5976] usb 9-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 64.352311][ T5976] usb 9-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 64.357893][ T5976] usb 9-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 64.360777][ T5976] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.363453][ T5976] usb 9-1: Product: syz [ 64.365033][ T5976] usb 9-1: Manufacturer: syz [ 64.366846][ T5976] usb 9-1: SerialNumber: syz [ 64.371777][ T5976] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 64.375788][ T5976] dvb-usb: bulk message failed: -22 (3/0) [ 64.394573][ T6563] chnl_net:caif_netlink_parms(): no params data found [ 64.398638][ T5976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 64.401486][ T5976] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 64.404627][ T5976] usb 9-1: media controller created [ 64.412671][ T5976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 64.418244][ T5976] dvb-usb: bulk message failed: -22 (6/0) [ 64.419802][ T5976] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 64.423702][ T5976] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input6 [ 64.428698][ T5976] dvb-usb: schedule remote query interval to 150 msecs. [ 64.430841][ T5976] dvb-usb: bulk message failed: -22 (3/0) [ 64.447577][ T5976] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 64.467903][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.469866][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.471907][ T6563] bridge_slave_0: entered allmulticast mode [ 64.473872][ T6563] bridge_slave_0: entered promiscuous mode [ 64.477172][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.479123][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.481162][ T6563] bridge_slave_1: entered allmulticast mode [ 64.483332][ T6563] bridge_slave_1: entered promiscuous mode [ 64.503614][ T6563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.508025][ T6563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.535354][ T6563] team0: Port device team_slave_0 added [ 64.542628][ T6563] team0: Port device team_slave_1 added [ 64.562812][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.564938][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.576827][ T6563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.581735][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.584050][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.586181][ T63] usb 9-1: USB disconnect, device number 2 [ 64.592403][ T6563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.612976][ T63] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 64.643133][ T6563] hsr_slave_0: entered promiscuous mode [ 64.645469][ T6563] hsr_slave_1: entered promiscuous mode [ 64.647742][ T6563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.649873][ T6563] Cannot create hsr debugfs directory [ 64.724353][ T6563] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.727835][ T6563] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.730818][ T6563] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.733724][ T6563] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.765846][ T6563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.825561][ T6563] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.827492][ T6583] autofs: Unknown parameter '' [ 64.852513][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.854447][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.857081][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.858963][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.939874][ T6563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.075684][ T6563] veth0_vlan: entered promiscuous mode [ 65.082858][ T6563] veth1_vlan: entered promiscuous mode [ 65.101016][ T6563] veth0_macvtap: entered promiscuous mode [ 65.105489][ T6563] veth1_macvtap: entered promiscuous mode [ 65.115892][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.119810][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.123303][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.127052][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.130554][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.133426][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.136741][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.142892][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.145614][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.150733][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.154409][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.157910][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.161558][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.166314][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.170967][ T6563] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.173139][ T6563] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.175380][ T6563] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.177668][ T6563] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.201269][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.203378][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.212633][ T1237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.215390][ T1237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.701623][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 65.704152][ T6624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.162'. [ 65.706320][ T6624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.162'. [ 65.708599][ T6624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.162'. [ 65.711146][ T6624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.162'. [ 65.741878][ T6616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.161'. [ 66.366954][ T5944] Bluetooth: hci0: command tx timeout [ 67.666738][ T6684] Bluetooth: hci4: Frame reassembly failed (-84) [ 67.682293][ T75] Bluetooth: hci4: Frame reassembly failed (-84) [ 67.682346][ T75] Bluetooth: hci4: Frame reassembly failed (-84) [ 67.682374][ T75] Bluetooth: hci4: Frame reassembly failed (-84) [ 67.682400][ T75] Bluetooth: hci4: Frame reassembly failed (-84) [ 67.682426][ T75] Bluetooth: hci4: Frame reassembly failed (-84) [ 68.189582][ T6695] FAULT_INJECTION: forcing a failure. [ 68.189582][ T6695] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 68.194623][ T6695] CPU: 1 UID: 0 PID: 6695 Comm: syz.5.180 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 68.198297][ T6695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.202003][ T6695] Call Trace: [ 68.203207][ T6695] [ 68.204263][ T6695] dump_stack_lvl+0x16c/0x1f0 [ 68.205913][ T6695] should_fail_ex+0x497/0x5b0 [ 68.207582][ T6695] ? fs_reclaim_acquire+0xae/0x150 [ 68.209409][ T6695] should_fail_alloc_page+0xe7/0x130 [ 68.211270][ T6695] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 68.213426][ T6695] __alloc_pages_noprof+0x190/0x25b0 [ 68.214910][ T6695] ? rcu_is_watching+0x12/0xc0 [ 68.216587][ T6695] ? __alloc_pages_noprof+0x402/0x25b0 [ 68.218489][ T6695] ? rcu_is_watching+0x12/0xc0 [ 68.220179][ T6695] ? __alloc_pages_noprof+0x402/0x25b0 [ 68.222077][ T6695] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 68.224077][ T6695] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 68.226074][ T6695] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 68.228155][ T6695] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.230224][ T6695] ? policy_nodemask+0xea/0x4e0 [ 68.231947][ T6695] alloc_pages_mpol_noprof+0x2c9/0x610 [ 68.233873][ T6695] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 68.235982][ T6695] ? alloc_vmcs_cpu+0x168/0x230 [ 68.237667][ T6695] ? __pfx_alloc_vmcs_cpu+0x10/0x10 [ 68.239482][ T6695] ? alloc_pages_mpol_noprof+0x315/0x610 [ 68.241442][ T6695] get_free_pages_noprof+0xc/0x40 [ 68.243196][ T6695] alloc_loaded_vmcs+0x198/0x2d0 [ 68.244957][ T6695] ? __pfx_alloc_loaded_vmcs+0x10/0x10 [ 68.246858][ T6695] ? do_raw_spin_unlock+0x172/0x230 [ 68.248404][ T6695] ? kvm_find_user_return_msr+0xb5/0xf0 [ 68.249924][ T6695] vmx_vcpu_create+0x22d/0xcf0 [ 68.251229][ T6695] ? __pfx_vmx_vcpu_create+0x10/0x10 [ 68.252648][ T6695] kvm_arch_vcpu_create+0x690/0xae0 [ 68.254072][ T6695] kvm_vm_ioctl+0xf93/0x3df0 [ 68.255351][ T6695] ? stack_trace_save+0x95/0xd0 [ 68.256631][ T6695] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 68.257811][ T6695] ? __pfx_mark_lock+0x10/0x10 [ 68.259106][ T6695] ? stack_depot_save_flags+0x28/0x9e0 [ 68.260565][ T6695] ? kasan_save_stack+0x42/0x60 [ 68.262186][ T6695] ? kasan_save_stack+0x33/0x60 [ 68.263924][ T6695] ? kasan_save_track+0x14/0x30 [ 68.265610][ T6695] ? kasan_save_free_info+0x3b/0x60 [ 68.267414][ T6695] ? __kasan_slab_free+0x51/0x70 [ 68.269163][ T6695] ? kfree+0x14f/0x4b0 [ 68.270603][ T6695] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 68.272544][ T6695] ? security_file_ioctl_compat+0x9b/0x240 [ 68.274583][ T6695] ? __do_compat_sys_ioctl+0x4e/0x2c0 [ 68.276448][ T6695] ? __do_fast_syscall_32+0x73/0x120 [ 68.278296][ T6695] ? do_fast_syscall_32+0x32/0x80 [ 68.280047][ T6695] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.281846][ T6695] ? kvm_arch_vm_compat_ioctl+0x2d1/0x480 [ 68.283351][ T6695] ? hlock_class+0x4e/0x130 [ 68.284607][ T6695] ? mark_lock+0xb5/0xc60 [ 68.285773][ T6695] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 68.287471][ T6695] ? __pfx_mark_lock+0x10/0x10 [ 68.288761][ T6695] ? find_held_lock+0x2d/0x110 [ 68.290050][ T6695] ? tomoyo_path_number_perm+0x298/0x5b0 [ 68.291963][ T6695] ? __pfx_lock_release+0x10/0x10 [ 68.293736][ T6695] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 68.295711][ T6695] ? tomoyo_path_number_perm+0x190/0x5b0 [ 68.297664][ T6695] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 68.299760][ T6695] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.301815][ T6695] ? do_vfs_ioctl+0x513/0x1950 [ 68.303507][ T6695] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.305281][ T6695] kvm_vm_compat_ioctl+0x399/0x440 [ 68.307102][ T6695] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 68.309081][ T6695] ? __pfx_lock_release+0x10/0x10 [ 68.310830][ T6695] ? trace_lock_acquire+0x14e/0x1f0 [ 68.312660][ T6695] ? __fget_files+0x206/0x3a0 [ 68.314330][ T6695] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 68.316262][ T6695] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 68.318101][ T6695] __do_fast_syscall_32+0x73/0x120 [ 68.319903][ T6695] do_fast_syscall_32+0x32/0x80 [ 68.321596][ T6695] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 68.323816][ T6695] RIP: 0023:0xf7fe0579 [ 68.325245][ T6695] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 68.332013][ T6695] RSP: 002b:00000000f513655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 68.334923][ T6695] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae41 [ 68.337648][ T6695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.340261][ T6695] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 68.343004][ T6695] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 68.345752][ T6695] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.348496][ T6695] [ 68.349718][ C1] vkms_vblank_simulate: vblank timer overrun [ 68.457253][ T5932] Bluetooth: hci0: command tx timeout [ 69.763957][ T5944] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 70.349615][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.200'. [ 70.355508][ T6756] netlink: 241 bytes leftover after parsing attributes in process `syz.5.200'. [ 70.361495][ T6756] netlink: 241 bytes leftover after parsing attributes in process `syz.5.200'. [ 70.529727][ T5932] Bluetooth: hci0: command tx timeout [ 70.689941][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.692005][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.116856][ T946] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 71.280582][ T946] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 71.282959][ T946] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 71.285922][ T946] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 71.288414][ T946] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 71.291302][ T946] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 71.295968][ T946] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 71.300812][ T946] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 71.303049][ T946] usb 8-1: Product: syz [ 71.304194][ T946] usb 8-1: Manufacturer: syz [ 71.307551][ T946] cdc_wdm 8-1:1.0: skipping garbage [ 71.308997][ T946] cdc_wdm 8-1:1.0: skipping garbage [ 71.311716][ T946] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 71.313321][ T946] cdc_wdm 8-1:1.0: Unknown control protocol [ 71.508549][ T6768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.511034][ T6768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.514435][ T946] usb 8-1: USB disconnect, device number 5 [ 72.208399][ T946] IPVS: starting estimator thread 0... [ 72.306922][ T6810] IPVS: using max 39 ests per chain, 93600 per kthread [ 72.466902][ T6814] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:0 [ 72.606960][ T5932] Bluetooth: hci0: command tx timeout [ 72.709744][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 74.481275][ T6855] netlink: 20 bytes leftover after parsing attributes in process `syz.3.224'. [ 74.736068][ T5932] Bluetooth: hci0: command tx timeout [ 75.521104][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.230'. [ 75.605253][ T6881] [ 75.605923][ T6881] ============================= [ 75.607334][ T6881] [ BUG: Invalid wait context ] [ 75.608791][ T6881] 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 Not tainted [ 75.611232][ T6881] ----------------------------- [ 75.613427][ T6881] iou-wrk-6880/6881 is trying to lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 75.614899][ T6881] ffff8880231d40d8 (&sighand->siglock){-.-.}-{3:3}, at: __lock_task_sighand+0xc2/0x340 [ 75.617549][ T6881] other info that might help us debug this: [ 75.619271][ T6881] context-{5:5} [ 75.620209][ T6881] 4 locks held by iou-wrk-6880/6881: [ 75.621720][ T6881] #0: ffffffff8dc87840 (sched_map-wait-type-override){+.+.}-{3:3}, at: schedule+0x1fd/0x350 [ 75.624365][ T6881] #1: ffff888025af78c0 (&acct->lock){+.+.}-{2:2}, at: io_wq_dec_running+0x126/0x250 [ 75.626832][ T6881] #2: ffffffff8ddba940 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590 [ 75.629360][ T6881] #3: ffffffff8ddba940 (rcu_read_lock){....}-{1:3}, at: __lock_task_sighand+0x3f/0x340 [ 75.631885][ T6881] stack backtrace: [ 75.632875][ T6881] CPU: 3 UID: 0 PID: 6881 Comm: iou-wrk-6880 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 75.635761][ T6881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.638628][ T6881] Call Trace: [ 75.639508][ T6881] [ 75.640295][ T6881] dump_stack_lvl+0x116/0x1f0 [ 75.641583][ T6881] __lock_acquire+0x878/0x3c40 [ 75.642935][ T6881] ? __pfx___lock_acquire+0x10/0x10 [ 75.644338][ T6881] ? __pfx___lock_acquire+0x10/0x10 [ 75.645767][ T6881] ? hlock_class+0x4e/0x130 [ 75.646973][ T6881] lock_acquire.part.0+0x11b/0x380 [ 75.648309][ T6881] ? __lock_task_sighand+0xc2/0x340 [ 75.649744][ T6881] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 75.651254][ T6881] ? rcu_is_watching+0x12/0xc0 [ 75.652525][ T6881] ? trace_lock_acquire+0x14e/0x1f0 [ 75.653905][ T6881] ? trace_lock_acquire+0x14e/0x1f0 [ 75.655374][ T6881] ? __lock_task_sighand+0xc2/0x340 [ 75.656758][ T6881] ? lock_acquire+0x2f/0xb0 [ 75.657966][ T6881] ? __lock_task_sighand+0xc2/0x340 [ 75.659400][ T6881] _raw_spin_lock_irqsave+0x3a/0x60 [ 75.660810][ T6881] ? __lock_task_sighand+0xc2/0x340 [ 75.662174][ T6881] __lock_task_sighand+0xc2/0x340 [ 75.663527][ T6881] group_send_sig_info+0x290/0x300 [ 75.664882][ T6881] ? __pfx_group_send_sig_info+0x10/0x10 [ 75.666371][ T6881] ? __pfx___lock_acquire+0x10/0x10 [ 75.667837][ T6881] ? hlock_class+0x4e/0x130 [ 75.669041][ T6881] ? __lock_acquire+0x15a9/0x3c40 [ 75.670354][ T6881] bpf_send_signal_common+0x415/0x520 [ 75.671772][ T6881] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 75.673326][ T6881] ? trace_lock_acquire+0x14e/0x1f0 [ 75.674724][ T6881] ? bpf_trace_run2+0x1c2/0x590 [ 75.676091][ T6881] bpf_send_signal+0x1d/0x30 [ 75.677364][ T6881] bpf_prog_631417f49dd64198+0x25/0x48 [ 75.678810][ T6881] bpf_trace_run2+0x34c/0x590 [ 75.680050][ T6881] ? __pfx_bpf_trace_run2+0x10/0x10 [ 75.681412][ T6881] ? hlock_class+0x4e/0x130 [ 75.682639][ T6881] trace_contention_end.constprop.0+0xf0/0x170 [ 75.684349][ T6881] __pv_queued_spin_lock_slowpath+0x27e/0xc90 [ 75.685947][ T6881] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 75.687685][ T6881] ? lock_acquire.part.0+0x11b/0x380 [ 75.689131][ T6881] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 75.690655][ T6881] do_raw_spin_lock+0x210/0x2c0 [ 75.691936][ T6881] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 75.693354][ T6881] ? lock_acquire+0x2f/0xb0 [ 75.694713][ T6881] ? io_wq_dec_running+0x126/0x250 [ 75.696062][ T6881] io_wq_dec_running+0x126/0x250 [ 75.697389][ T6881] io_wq_worker_sleeping+0xf1/0x120 [ 75.698789][ T6881] schedule+0x2c6/0x350 [ 75.699885][ T6881] schedule_timeout+0x124/0x280 [ 75.701169][ T6881] ? __pfx_schedule_timeout+0x10/0x10 [ 75.702644][ T6881] ? __pfx_process_timeout+0x10/0x10 [ 75.704080][ T6881] ? __pfx_io_run_task_work+0x10/0x10 [ 75.705648][ T6881] ? lock_acquire+0x2f/0xb0 [ 75.706864][ T6881] ? io_wq_worker+0x3b1/0xdf0 [ 75.708141][ T6881] io_wq_worker+0x4ba/0xdf0 [ 75.709350][ T6881] ? __pfx_io_wq_worker+0x10/0x10 [ 75.710702][ T6881] ? ret_from_fork+0x23/0x80 [ 75.711955][ T6881] ? __pfx_lock_release+0x10/0x10 [ 75.713290][ T6881] ? do_raw_spin_lock+0x12d/0x2c0 [ 75.714635][ T6881] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 75.716042][ T6881] ? __pfx_io_wq_worker+0x10/0x10 [ 75.717405][ T6881] ret_from_fork+0x45/0x80 [ 75.718802][ T6881] ? __pfx_io_wq_worker+0x10/0x10 [ 75.720137][ T6881] ret_from_fork_asm+0x1a/0x30 [ 75.721414][ T6881] [ 75.808392][ T104] cfg80211: failed to load regulatory.db [ 75.956821][ T45] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.040965][ T45] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.109361][ T45] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.170807][ T45] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.257054][ T45] bridge_slave_1: left allmulticast mode [ 76.258600][ T45] bridge_slave_1: left promiscuous mode [ 76.260665][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.263983][ T45] bridge_slave_0: left allmulticast mode [ 76.266005][ T45] bridge_slave_0: left promiscuous mode [ 76.268249][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.391625][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.395557][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.399119][ T45] bond0 (unregistering): Released all slaves [ 76.730233][ T45] hsr_slave_0: left promiscuous mode [ 76.732463][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.735081][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.738045][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.740639][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.744758][ T45] veth1_macvtap: left promiscuous mode [ 76.746734][ T45] veth0_macvtap: left promiscuous mode [ 76.748770][ T45] veth1_vlan: left promiscuous mode [ 76.750662][ T45] veth0_vlan: left promiscuous mode [ 76.958789][ T45] team0 (unregistering): Port device team_slave_1 removed [ 76.987829][ T45] team0 (unregistering): Port device team_slave_0 removed [ 77.456120][ T45] IPVS: stop unused estimator thread 0... [ 77.541329][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.589794][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.629463][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.669092][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.736107][ T45] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.790598][ T45] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.829271][ T45] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.889063][ T45] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.956609][ T45] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.020003][ T45] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.100088][ T45] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.161396][ T45] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.220547][ T45] bridge_slave_1: left allmulticast mode [ 78.222514][ T45] bridge_slave_1: left promiscuous mode [ 78.224637][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.228163][ T45] bridge_slave_0: left allmulticast mode [ 78.230034][ T45] bridge_slave_0: left promiscuous mode [ 78.232029][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.235273][ T45] bridge_slave_1: left allmulticast mode [ 78.236900][ T45] bridge_slave_1: left promiscuous mode [ 78.238399][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.240882][ T45] bridge_slave_0: left allmulticast mode [ 78.242336][ T45] bridge_slave_0: left promiscuous mode [ 78.243818][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.247156][ T45] bridge_slave_1: left allmulticast mode [ 78.248645][ T45] bridge_slave_1: left promiscuous mode [ 78.250164][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.252677][ T45] bridge_slave_0: left allmulticast mode [ 78.254162][ T45] bridge_slave_0: left promiscuous mode [ 78.255634][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.336815][ T45] team0: Port device geneve1 removed [ 78.660411][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.664309][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.669260][ T45] bond0 (unregistering): Released all slaves [ 78.674020][ T45] bond1 (unregistering): Released all slaves [ 78.677312][ T45] bond2 (unregistering): Released all slaves [ 78.740768][ T45] team0: Port device bond0 removed [ 78.743752][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.747538][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.751199][ T45] bond0 (unregistering): Released all slaves [ 78.757902][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.762117][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.765930][ T45] bond0 (unregistering): Released all slaves [ 79.312224][ T45] hsr_slave_0: left promiscuous mode [ 79.314549][ T45] hsr_slave_1: left promiscuous mode [ 79.316454][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.318968][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.322523][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.325053][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.329641][ T45] hsr_slave_0: left promiscuous mode [ 79.331811][ T45] hsr_slave_1: left promiscuous mode [ 79.333997][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.336473][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.339335][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.341817][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.346353][ T45] hsr_slave_0: left promiscuous mode [ 79.349331][ T45] hsr_slave_1: left promiscuous mode [ 79.351500][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.353478][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.355627][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.357619][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.362170][ T45] veth1_macvtap: left promiscuous mode [ 79.363682][ T45] veth0_macvtap: left promiscuous mode [ 79.365047][ T45] veth1_vlan: left promiscuous mode [ 79.366418][ T45] veth0_vlan: left promiscuous mode [ 79.368539][ T45] veth1_macvtap: left promiscuous mode [ 79.370032][ T45] veth0_macvtap: left promiscuous mode [ 79.371510][ T45] veth1_vlan: left promiscuous mode [ 79.372895][ T45] veth0_vlan: left promiscuous mode [ 79.374824][ T45] veth1_macvtap: left promiscuous mode [ 79.376297][ T45] veth0_macvtap: left promiscuous mode [ 79.377782][ T45] veth1_vlan: left promiscuous mode [ 79.379157][ T45] veth0_vlan: left promiscuous mode [ 79.621538][ T45] team0 (unregistering): Port device team_slave_1 removed [ 79.659005][ T45] team0 (unregistering): Port device team_slave_0 removed [ 79.905146][ T45] team0 (unregistering): Port device team_slave_1 removed [ 79.916189][ T45] team0 (unregistering): Port device team_slave_0 removed [ 80.084607][ T45] team0 (unregistering): Port device team_slave_1 removed [ 80.090551][ T45] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 19:19:08 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffea0001754740 RCX=ffffffff81e1a626 RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc900031df860 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000005bae R12=dffffc0000000000 R13=0000000000000000 R14=0000000000000000 R15=ffffc900031dfcb8 RIP=ffffffff81993e73 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2ed388 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=1ffff920008aedf7 RBX=dffffc0000000000 RCX=0000000000000000 RDX=0000000000140cca RSI=0000000000000000 RDI=ffffea0001c6fd00 RBP=ffffea0001c6fd00 RSP=ffffc90004576f70 R8 =0000160000000000 R9 =0000000000000000 R10=ffffed100e37e800 R11=dffffc0000000000 R12=0000000000000000 R13=0000000000000000 R14=0000000000000001 R15=0000000000140cca RIP=ffffffff8205222e RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000581fa4c0 CR3=000000005d02e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=0000000000037f68 RCX=ffffffff81755afc RDX=1ffffffff1b05f7e RSI=ffffffff8bb16b80 RDI=ffffffff8d82fbf0 RBP=0000000000000002 RSP=ffffc90002fef2e8 R8 =0000000000000000 R9 =fffffbfff2039b32 R10=ffffffff901cd997 R11=0000000000000000 R12=0000000000000000 R13=000000000003da4c R14=0000000000000001 R15=0000000000000000 RIP=ffffffff817f0a41 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002002c000 CR3=0000000060538000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85140f75 RDI=ffffffff9a665300 RBP=ffffffff9a6652c0 RSP=ffffc900035670b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff85140f10 R15=0000000000000000 RIP=ffffffff85140f9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056ed24c0 CR3=000000005cf2e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000