last executing test programs: 16.752218539s ago: executing program 2 (id=421): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x200000100000011, 0x1, 0x5) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4000000000000, &(0x7f00000006c0), 0x13f}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4000000000000, &(0x7f00000006c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340), 0x106, 0x3}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = open$dir(0x0, 0x0, 0x0) mkdirat(r5, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(r5, &(0x7f0000000080)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4000040) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000026000000000000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x98, &(0x7f0000000180)={0x0, 0x800, 0x1000000f}}) (async) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x98, &(0x7f0000000180)={0x0, 0x800, 0x1000000f}}) fcntl$setstatus(r4, 0x4, 0x0) 16.686258975s ago: executing program 2 (id=422): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) syz_emit_ethernet(0xc2, &(0x7f00000002c0)={@local, @link_local, @val={@void, {0x8100, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b74000c00e63b9ba2ea4f115a67245b00", "584cbf2649a50f2dbc436fa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "9cfd56d3c86e55010000000000000000000000004137dfff2f8f00", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r2 = syz_io_uring_setup(0x83b, &(0x7f00000000c0)={0x0, 0x11e, 0x0, 0x1, 0x319}, &(0x7f0000000140)=0x0, &(0x7f0000000400)=0x0) (async) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) setreuid(0xee00, 0xee00) (async) r5 = socket(0x1d, 0x2, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r5, 0x0, 0x0, 0x0, 0x80800}) (async, rerun: 32) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000003c0), 0x12) 16.056304941s ago: executing program 2 (id=429): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/uevent_helper', 0x149a82, 0x0) sendfile(r2, r2, 0x0, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000000), &(0x7f0000000100)=r0}, 0x1c) 16.055859899s ago: executing program 2 (id=430): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000000000085000000050000001801000020786c250000000000202020db1af8ff51000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000005a00000000000000"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0x343c5b55, r0, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%pI4 \x00'}, 0x1c) r5 = syz_open_dev$mouse(&(0x7f0000000500), 0x1, 0x200100) r6 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r7 = openat$ipvs(0xffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x19091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x887008, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) statfs(&(0x7f0000000840)='./file1\x00', &(0x7f0000000880)=""/54) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r9, &(0x7f0000003240)={0x2020}, 0x2020) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r11 = openat$vsock(0xffffff9c, &(0x7f0000000680), 0x201, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x18, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0xd, 0x5, 0x0, 0xc}, @exit, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9b}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x8, 0x1, &(0x7f0000000140)=""/1, 0x41100, 0x4c, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x2, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[r4, r5, r6, r7, r8, r9, r10, r11], &(0x7f0000000700)=[{0x1, 0x4, 0xe, 0x3}, {0x5, 0x3, 0xe}, {0x3, 0x2, 0x1, 0x8}, {0x3, 0x3, 0xa, 0x8}, {0x1, 0x5, 0xe, 0xc}, {0x5, 0x1, 0x10, 0xc73985ed0478442d}], 0x10, 0x3fe}, 0x94) 16.018701469s ago: executing program 2 (id=432): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x10, 0x110, 0x2}}], 0x10}, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x33517727) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDCTL_DSP_GETOPTR(r4, 0x800c5012, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) 15.264381944s ago: executing program 2 (id=436): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x700c2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x2080483) pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9) socket$inet(0x2, 0x2, 0x1) (async) socket$inet(0x2b, 0x801, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f0000000ec0), 0x0, 0x2, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x18) (async, rerun: 64) connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) (rerun: 64) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x680800, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 15.135321759s ago: executing program 32 (id=436): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x700c2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x2080483) pwritev(r0, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9) socket$inet(0x2, 0x2, 0x1) (async) socket$inet(0x2b, 0x801, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f0000000ec0), 0x0, 0x2, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x18) (async, rerun: 64) connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) (rerun: 64) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x680800, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 4.106365445s ago: executing program 0 (id=498): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x6, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0xeeef0000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000080)=@x86={0x8, 0x6, 0x1, 0x0, 0xfffffff9, 0x7a, 0x2f, 0x8, 0x4, 0x3, 0x3, 0x9, 0x0, 0x9, 0x8, 0xf7, 0x3, 0x7f, 0x62, '\x00', 0x1, 0x3}) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x3) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) sendfile(r9, r9, 0x0, 0x9) ioctl$SNDCTL_SEQ_TESTMIDI(r9, 0x40045108, &(0x7f0000000180)=0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd29, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xf3a}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010101}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x54}}, 0x0) 3.164605486s ago: executing program 0 (id=505): r0 = socket$kcm(0x10, 0x400000002, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r2, &(0x7f00000001c0)='m', 0x1, 0x1}]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000bb80)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 2.796384606s ago: executing program 0 (id=508): openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x404000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) (async, rerun: 32) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) (async, rerun: 64) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 64) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x0, 0x153502) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0xffffffb4) (async, rerun: 32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 32) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (rerun: 64) ftruncate(r3, 0x2000009) (async) sendfile(r2, r3, 0x0, 0x7ffff004) syz_emit_ethernet(0x0, 0x0, 0x0) (async) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) 2.794707339s ago: executing program 1 (id=510): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x18) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '\x00\x00\x00', 0x20, 0xe8c}, 0x2d, 0xfffffffffffffff9) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, r3, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'new '}, 0x19, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) symlinkat(&(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r4, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r6, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}}, 0x8000) 2.696294766s ago: executing program 1 (id=511): set_mempolicy(0x4005, 0x0, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000540)={'pimreg0\x00', 0x54, 0x7ff}) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='1', 0x1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001c96157e4123c37c12221705c29e3222f038690be15d284fa4a7bae8cb12ac05316fbe119dddf43f79318d6153545a3b0dbb48541eb5bc1d358a207a551ffff5c695e94c50ba11f2ca7353158b4f3cb563a90b07d5e6701026963697c1c4846d703967faca1a01b5ac95c1611caa6726562d58980fbc2e721aeb2db43f65efc927199e412e1a83f334e8381d03967311cf8fac43c2e265e239394c4843f7ee797bd7a4ef4f0b3c4ea9251986ebf6886a1220233e3241ef82007c373f582c2fdcfdc09b05dd667f3fd7a728120badca378c9513ab10e779d1fd86026494d55f", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf250800000014000200fc00000000000000000000000000000108000500ac14143d"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x4) r7 = syz_io_uring_setup(0x984, &(0x7f0000000740)={0x0, 0xdc08, 0x10100, 0x101, 0x20e, 0x0, r6}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x5) r11 = dup(r10) ioctl$SIOCSIFHWADDR(r11, 0x8910, &(0x7f0000002640)={'team_slave_0\x00', @random="76e04c34b99d"}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r13 = socket$inet_udp(0x2, 0x2, 0x0) splice(r12, 0x0, r13, 0x0, 0x4ffe6, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 2.606210747s ago: executing program 4 (id=513): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0000000108653904030405ffffff09c56a3000", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x8905, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000a40)={0x1c, r6, 0x131, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x408d1}, 0x8880) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000000c0)={0x100000001, {0x10, 0x8000, 0x1, 0xb, 0x80000000}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r10 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r7, 0x0, 0x4000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r11, 0x0, 0xd}, 0x18) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000bc0), 0x101001, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r12, 0x330f, 0x6000000000000000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.525664227s ago: executing program 0 (id=514): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x541141) r5 = dup(r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x708, 0x41e3, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000140)) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000300), 0x9, 0x1ab882) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000240)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r10, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r12, r13, 0x3, 0x0, 0xffffffff, 0x804, {0xffff0000, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000011000100000000000000000000004100", @ANYRES32=0x0, @ANYBLOB="0a00000000e1ffa2d787040000"], 0x20}}, 0x4084) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES16, @ANYRESDEC=r1], 0x110}, 0x1, 0x0, 0x0, 0x4004000}, 0xfa02d05ab8560dcc) fanotify_mark(r1, 0x401, 0x12, r0, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r14, &(0x7f0000000180), 0x8) 2.385986309s ago: executing program 4 (id=515): setrlimit(0x9, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}) io_setup(0x2004, &(0x7f0000000680)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x0) setrlimit(0x9, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}) (async) io_setup(0x2004, &(0x7f0000000680)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) 2.38477437s ago: executing program 4 (id=516): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000003780), 0x802, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000037c0)={0x10, 0xff, 0xd93b}) 2.315801477s ago: executing program 4 (id=517): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lstat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x9, 0x20, 0x2, 0x0, 0x2004cc, 0x8000002, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x767], 0xeeef0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000200)) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r4}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) 1.841857248s ago: executing program 4 (id=519): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$uhid(0xffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE(r1, &(0x7f0000000140)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x4}}, 0x11c) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$uhid(0xffffff9c, &(0x7f0000000100), 0x802, 0x0) (async) write$UHID_CREATE(r1, &(0x7f0000000140)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x4}}, 0x11c) (async) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) (async) 1.725973433s ago: executing program 4 (id=520): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_DIRENT(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d5", @ANYRES32], 0x58) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, 0x0) r2 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX=r2, @ANYBLOB="1fa469e1fbabf939ad9dd08535d6dca360aaf7b34bf2eebff765b38d8fce6400d187b5b396446d373a175542a1c9e08780b8824d2e2a00f0268e3dbaf7323821a2da5c22678062d9fd12ad7bf9c8fa28060787b23c68663463978fe3ad34ea226d628c2dfdfbfd6f0fe1151c70779ad129fdc936db8750460170eb72462f8369402a0865f96cb526e1d649cab24e31117d3febd4f06b2268da92314d0ac5334487c5c76a6a7eb5f4b13c03ebc87b9d9982d8f5f5ca419344bee40428984935a7ce772e3721a7755940d241618829dbfb71f3aa785b12de3c851d23c8d33066f6ec8efe40e8d0ff558b5e31f2d5d6be6ea9eb6e56", @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000200)={r4, r4, 0x0, 0x0, 0x0, 0x81, 0xc, 0x0, 0x0, 0x2, 0x2, 0xbfffffff, 'syz0\x00'}) shutdown(r4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') read$eventfd(r9, &(0x7f0000000280), 0x8) gettid() 1.542943134s ago: executing program 1 (id=521): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0)={r2}, &(0x7f0000000040)=0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 1.542545237s ago: executing program 0 (id=522): r0 = epoll_create1(0x80000) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) (async, rerun: 32) socket$kcm(0xa, 0x5, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x28e) (rerun: 32) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r6 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x5c}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) (async) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"/1833], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) (rerun: 32) 1.446160831s ago: executing program 1 (id=523): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x4, 0x3, 0x1, "c5b283bbcb95bf349150da21b36ecf0dcf1b97930fe3c6b8eba4d99182acc17c", 0x34324d59}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4014f50b, &(0x7f0000000080)={0x0, 0x9, 0x1}) (async) unshare(0x80) (async, rerun: 64) unshare(0x30030080) (async, rerun: 64) unshare(0xc000280) (async, rerun: 32) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 32) sendmsg$netlink(r1, &(0x7f00000007c0)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)=[{&(0x7f0000000100)={0x10, 0x22, 0x8, 0x70bd27, 0x25dfdbfd}, 0x10}, {&(0x7f0000000140)={0xe8, 0x1b, 0x20, 0x70bd2c, 0x25dfdbfc, "", [@generic="0b241dee2004a9b2e575246452e36812b63aa0cdbd35c86243cd486c20ca4d966f9ce90cc0d147cef4d7fe0691b08444ca1ebffbb4404198c1400e49101365cb82edb260c45773240f7a32f3e55e9e961f8f8a023a5e0c8fd18607ab6141fe11a739788313f8c51db9a2524780c95701a2355299bc316fbf5b98c146ed4ab4bb1e58e67060c09f8fac28d9ddc173145ac5c3ab2ab33116c8f93609463dcee87ab804242135364f93918933c9dceed9e224bcbb24fd31e6d8301833a7355eb69a4a8156e5d5aee283b9b152ffff28906103abb7191e484d32"]}, 0xe8}, {&(0x7f0000000240)={0x410, 0x1e, 0x10, 0x70bd2a, 0x25dfdbfe, "", [@generic="bc0e48a87e4c94ec99a324243494d19e0376ac2503cb1890c69da043d4ca169cbace9c1cd5b963862dc4467e720c04976d34a9e257c7ca3e976790e69eccfa63149038ccddb3db9119fb6aa174fe7b8220a3a61a19db52ff9c", @generic="6583749bb1973b4316fc0d4c510d5947296de0f47ed85dd8e00ad2f29c3fc69a4f96d1281328fc5701964f3519fa5588738757f70e985e25ed7acb33eb8828cf342e4d6473a01fb9a7b257c115fd558b2e70dc36ece25db86b9a9718f09be98712f33dcdc95e7757421f6db5805b8fe539f92c7a6461fe14f64af14a0780356035a28ee89c65cb9786ed07c3b127f30cbe80d8bd52e43f8f6cc0eb9d5faff9db9fe23d7584174b6405f172ef4929a4386d", @nested={0x2f3, 0x82, 0x0, 0x1, [@generic="2371c5191d66095c18db643825474b6a353b4adae95ac73193c19dc78fbb122e93f00f648dd69254912c568023aa627ad79e36cb987a630190e0a1daa25369d817afa77670f309bf00a330215282c5add8a72406a086871d4d970c60a768df755f0848f914e7a2a856c1a6a64501d51f890cdcb0", @generic="19f608fffa5e9347d37ae418158327c79990cfd86c6efd8e31fe6e76db30f986c189831a52ad8c10f557358de08e68cfe9c6bd686564cddc952a98d5610a26eb02ea8301ca9ec3e8c5b62291e17ff52b9b39c0f9bf5ae495a50625d81cd196632e78498da57548", @nested={0x4, 0x7a}, @generic="aa8fd31818b41dfdd4188d0815a17e2de1df4cd16de55f5c6bc1b4ba025b47b77112340f6df31bfef315ebe0d28cb638256fdccc38e601f307a31563cc6c4d3ac0da617593b4e980f8e856e7ecd1dfe6558fed3e96008eb059d32010d8881f27373f027c3cd4dc0b42910c36acc833ed6b138b4b78ebf8d1b62242ebeab3e2190bef0c3aa687ba05197f10ddffa4fd6d10406c861af27a7ca1737ba92ed4ddae3a2560cee4868c13ffa9e73c36e9f248c1fd2b32e820dc5fa4943858c4c6314ebad86203b17cb74d6e5c4ec12496497036bf78d5f033", @generic="4eff2ae6db0360edf802bf0caa0468d6ed393397e5e73a2617802e2ff50d4b1efad6ce97033457cc0a75197403190f13a99ed0e30386e36dc27f6f019fc7103aa1e2ec7f6ce39d9a965fa860521f5989e52615b8165191a8bc1ab544cd28bd8ddcb251ab6912a33fe92104bf45a582ccc4f5f9a35bd90d265e3a116e6f54cbbd6d6d6e3350d6d15944d916e2ce6d1e7e3ca56323e8c3d3a6ab63744155f142159faae89ae5ee7b38d548c79653d45398e7b60389b2429d2b3982fd490a1491986e103d3380c7a7d08a170abce58af4e0a3035b4a09773117123d1076", @typed={0x5, 0x12d, 0x0, 0x0, @str='\x00'}, @generic="eec062e7c1e2cf65246e9a2d30386b4baa919ef016b20f67cadb4b45554984b1a1da355ff545072ae13997a7c172e7d8212e2c2f6f7d080b0454e5c85716efa40a2507d2e0845ae9e9b0c068c262aba6549181dffc6f"]}]}, 0x410}, {&(0x7f0000000680)={0xb0, 0x27, 0x4, 0x70bd25, 0x25dfdbfc, "", [@typed={0xc, 0x76, 0x0, 0x0, @u64=0xe}, @nested={0x94, 0x7f, 0x0, 0x1, [@nested={0x4, 0x12f}, @nested={0x4, 0x5b}, @nested={0x4, 0x57}, @typed={0x8, 0x48, 0x0, 0x0, @u32=0x5a}, @generic="74501d13eb15a181ae9747dbf6ad4b8270d6ec03788daf16b2328a0d7aee56fc0e13671c37bdc8ad0a4b96e4c801b3dce46a31ae711a8e79e4526639112af55653a045a78799ba4ebe4fbf76852aadcd82473d7a893a6adef205b0ab1d00f3b2b46538ec8bb1dc63762c1d7ca8db9f73dc078f74bc0890576e65342e"]}]}, 0xb0}], 0x4, &(0x7f0000000780)=[@rights={{0xc}}, @rights={{0x18, 0x1, 0x1, [r0, r0, r0]}}], 0x24, 0x20000885}, 0x10) unshare(0x10000) (async, rerun: 32) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000800), r3) (async, rerun: 32) syz_open_dev$sndmidi(&(0x7f0000000840), 0x5, 0x109000) (rerun: 32) r4 = accept4(r1, &(0x7f0000000880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000900)=0x80, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x84100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x90, 0x9, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x8015) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000ac0)=0x4080, 0x4) ioctl$NBD_PRINT_DEBUG(0xffffffffffffffff, 0xab06) (async) pipe2(&(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) (async, rerun: 64) unshare(0xa80) (rerun: 64) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8abb, 0x18}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x10}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x3}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfe0}, @NL80211_ATTR_BSS_CTS_PROT={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) (async) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000c40)={0x0, 0x24, 0x23}, &(0x7f0000000c80)={'enc=', 'raw', ' hash=', {'wp256-generic\x00'}}, &(0x7f0000000d00)="4265dd25b114a4f62c22bbed7d583887e0595606931e500ee8e86f9806aabf9d0d6cc95d", &(0x7f0000000d40)=""/35) (async, rerun: 64) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000dc0), r6) (rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1, 0x7ff, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24000800}, 0x4) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001ec0)={&(0x7f0000000f80)={0xf00, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x3c4, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @initial, @broadcast, @device_a, {0x6, 0x9}, "", @void, @value=@ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x90c, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x19}, @device_a, @device_b, @initial, {0x5, 0xc3f}, "", @void, @value=@ver_80211n={0x0, 0x7ff7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1e2, 0x33, @mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_b, @initial, {0x6, 0x4}, @value=@ver_80211n={0x0, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x9}, {0x2, 0x1}, {0x5}, {0x60}, {0x21, 0x1}, {0x9, 0x1}]}, @val={0x3, 0x1, 0xb1}, @val={0x2d, 0x1a, {0x1, 0x2, 0x2, 0x0, {0xffffffffffffff06, 0x100, 0x0, 0x6, 0x0, 0x1, 0x1}, 0x0, 0x8}}, @val={0x72, 0x6}, [{0xdd, 0xbd, "f746cefa5bc3af0c319bbf40adaeb243eab81c726d33a2570084ccd4a4eae16e7a50ffcd502aad12facda1e16efcd55e2d612739479ccef6a7bc6b971f1a8e135aeee937226750be12e56b87a1752f85149a0b460b36a2ce3dfe44b92785b1507a0c4745e57dd300760d44a80d3335b01c87e49368fb54c10e4ac662056689ca48927e3e28a90bf979ab576421e21006d1d4b85156d1917620f0cbfe0396e54302e069e55c98c7ca2c94823b216d2ecdea856a7b71642ac84fcad9612d"}, {0xdd, 0x35, "f7eda3c1cbcda1070690d49d881bcdd3d4d2ad62f951e9810a8e52d9585d95d50b323b67ba3933378288a36142936ec83a546c5692"}, {0xdd, 0x93, "d76f36cc9cc0a7a0db3a32d9f429896365a48baa6454ae267c9f59f41b7314ec76b6786666f938c015c298cc44764858b42f81215ea378313f242a328e3eaa357023b6181e13fc8cd8f0b9537929e46b761b069756cd7624723bfa9606ed0364b87d2fde0b2b44c5357127111b0c7d88fff8c2b048bebe57cd25199c6058908faf3ccc01740393ecd712709a943c7227faa587"}]}}]}, 0xf00}, 0x1, 0x0, 0x0, 0x1}, 0x20000050) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001f80), r4) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r10, 0x5, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c001}, 0x50) (async) r11 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r11, &(0x7f0000002340)={0x18, &(0x7f0000002100)={0x40, 0x23, 0x68, {0x68, 0xbad1ec4ee6422d06, "af597dffc1ad8a418f7729ff00050d6c772db3a09b3af3c338c6ebd4306d24f9689a832e41ee85a6f5a9eb81d5aabe283179efe67adf5a125f29eaad934b551b169f7048efa74422ba9af1a7d967c5585062de91f20363492e1175d0af8e3353bbd9a60a559a"}}, &(0x7f0000002180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}, &(0x7f00000021c0)={0x0, 0xf, 0xbe, {0x5, 0xf, 0xbe, 0x6, [@generic={0x76, 0x10, 0x3, "fc9ba648c40a36a8207c02583b5b02f6df24f4e59ab530d16bb19fce62d31726c1d95dde44503caaa314c4ff42990ec43652c96da270eb77dd24d6c57d85f0161d280b8d1618ad8eed2b0b145a6c5ed2ff81a87143dbae13683c4efad63ab00853c5e11bcda936eafd9373a4198878da9c6e96"}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0xe44, 0x0, 0x53, [0xff00, 0x3f3f, 0xc03f]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x5, 0x7, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4, 0x7, 0xf000}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "978b908714bdd01946dc3ea4beba7cd3"}]}}, &(0x7f00000022c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0xe, 0x4, "1f60c279", "4f4c4cf5"}}, &(0x7f0000002300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0xf, 0x9, 0x6, 0xd, 0xc75}}}, &(0x7f0000002780)={0x44, &(0x7f0000002380)={0x20, 0xc, 0x2f, "d7e7fdd79e2cc2e4f4ef7f58788532de7ac3f28ffe46d7c922953ca8a6ccb4eca2e55b4eaf901284c9af30f52490df"}, &(0x7f00000023c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000002400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000002440)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000002480)={0x20, 0x0, 0x4, {0x0, 0x20}}, &(0x7f00000024c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000002500)={0x40, 0x9, 0x1}, &(0x7f0000002540)={0x40, 0xb, 0x2, "97ff"}, &(0x7f0000002580)={0x40, 0xf, 0x2, 0xfffb}, &(0x7f00000025c0)={0x40, 0x13, 0x6}, &(0x7f0000002600)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000002640)={0x40, 0x19, 0x2, '4J'}, &(0x7f0000002680)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000026c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000002700)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000002740)={0x40, 0x21, 0x1, 0x4}}) 1.358793002s ago: executing program 1 (id=524): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x0) fanotify_mark(r6, 0x105, 0x5000003a, r5, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x104, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xe, 0xc, "7c6fd008b80fe85b55e2"}, @NFTA_CHAIN_HOOK={0x84, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x56b132a0}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7d97c8ba}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6tnl0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b0f3371}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}]}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x63638022}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2dffc31f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x11e80f46}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x12c}, 0x1, 0x0, 0x0, 0x8800}, 0x240000d0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r7 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) 1.356231466s ago: executing program 3 (id=525): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000200)=0x3, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0xfffffffc}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r3, 0x0) pipe2$9p(&(0x7f0000002480)={0xffffffffffffffff}, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000001080)={0x0, 0xdd, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES64=r6, @ANYRES16=0x0], 0x10}, 0x1, 0x0, 0x0, 0x20004805}, 0x44011) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000200)=0x3, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0xfffffffc}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r3, 0x0) (async) pipe2$9p(&(0x7f0000002480), 0x80000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000001080)={0x0, 0xdd, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES64=r6, @ANYRES16=0x0], 0x10}, 0x1, 0x0, 0x0, 0x20004805}, 0x44011) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r5}, 0x10) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 1.266182434s ago: executing program 3 (id=526): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) read$FUSE(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x578410eb) socket$kcm(0x10, 0x2, 0x0) 515.972698ms ago: executing program 0 (id=527): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x400, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) rt_sigpending(0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) 225.988979ms ago: executing program 1 (id=528): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffffffffeeb, 0x0, 0x52}, 0x4004800) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, 0x0) syz_clone(0x3063500, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r4, 0x6c9, 0x9, &(0x7f00000002c0)=""/247, &(0x7f0000000000)=0xf7) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r6, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r5, 0x407, 0x100004) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0xfff2, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7, 0x3, 0xbb1}, {0x6, 0x9, 0x3, 0x2}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$eventfd(r5, &(0x7f0000000240), 0xffffff14) sendmsg$nl_route_sched(r3, 0x0, 0x2400c800) r11 = inotify_init1(0x80c00) inotify_add_watch(r11, &(0x7f0000000180)='./control\x00', 0x64000ba6) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 220.751477ms ago: executing program 3 (id=529): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18", @ANYRESOCT], 0x0, 0x8000, 0x0, 0x0, 0x41100}, 0x94) r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x66, 0x0, 0x26, 0x2f, 0x0, @multicast2, @empty}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r2}, 0x38) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', r1, 0x4, 0x9, 0x41, 0xfffff758, 0x0, @mcast2, @private1, 0x40, 0x7, 0x6, 0x3}}) 62.560892ms ago: executing program 3 (id=530): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0], 0x0, 0xfb, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000002900)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x11, 0x0, 0x1, [@generic="25b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f88d6e1db9b2bb2e5c90fafb663cdebaede447dc8f6f61c6615fcf740adda4853b2d23adb37"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@generic="de8c97b31a91a8a023b05393504138093e90b932d665a1a7046ce0a22af9b359fe19fff69fbcbcdfa8f03d4125e94d2fe6648f010000001992a9ae4641c3574aec30d99d6e50fab6bcd25d8fd82de6d61873f59df4b8f35e2d272583f6367dcb603fc8748d784aecc3c952", @generic="43770b39830585bc959d029bbe724f3d7419014db98cef27243d938963bf0e376585356e35d7e94e8317cf754893c1e3c759f36ba62b6e5d50a512e197997d23c8359703e6835ef80430647061bd67990b3000dac732c78ea611f69cbe309165de8dd756978c974d941ecdff6128012a5b36d152dc5819ceb6c3313cf9d983fd64638384b59950769baa54bcebb76f89fc055b5293e2a443dcf1c76f65f1ff971e30c82881bf33c661ec87f56e32de"]}]}, 0x184}}, 0x0) 53.647995ms ago: executing program 3 (id=531): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x800}, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xf2, "55e837db5e92d12ae0f1e43a199717facef0116fcd4b02103daf233e9e0c1afcbab79079b3bfb83ab8e199e6822ae80c8094a5bc01e4802149738436aca1b680132d4bfe08558ce8fd97112f8da721baf58f47fa9bf5beff3a3caf7810af69d77f1fa7a29311cf005916d6d7983cf6f466726e00c0cd7f31e5f9b84336f19a8456929e9b0a62776641a7ca005bd0f5588d3b06461af2ce12ee008e4750cc8a83bc38c8b68057f53966de720e2dddd3c5196a950613c365a27c8d772f4e0b42e7cd642f45d112cb46b5f23c15cb8008e3e079d53dc8d417a7d530da228d6d69ad2c5e4290e8431abfa1fe41908caff7632524"}, &(0x7f0000000280)=0xfa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={r4, 0x84, &(0x7f00000003c0)=[@in6={0xa, 0x4e22, 0x1, @local, 0x2}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x10000, @mcast1, 0x8}, @in6={0xa, 0x4e21, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000300)=0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000031c0)={0xe8, 0x41, 0x107, 0x0, 0x25dfdbfb, {0x1, 0x7c}, [@nested={0x4, 0xe1}, @nested={0xd0, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0xc4, 0x62, 0x0, 0x1, [@nested={0xc0, 0x55, 0x0, 0x1, [@nested={0xbc, 0x9, 0x0, 0x1, [@typed={0x8, 0x13d, 0x0, 0x0, @u32=0x800}, @generic="6e6b9de9ce012312dc6d070dc258475a1471aa15f1a877d8ee184f44959505949eda1fdea2bca70049566bfee917ff388b9ade69d7a6ac19f7280e14a743ae49e0a4007d99cf3c5dc17ee249ef721c27e775e72b593f013dccb65903b0d3220e95002f0d78f4633e55d9c48cb30d666eb2d12dc9a76009a0e79b4110aa5f27ced335713d520b82d2131c1ac8023474af19e5acbc1b720da44e2d8d0cdf3419ab", @typed={0x8, 0x1e, 0x0, 0x0, @fd}, @typed={0xffffffffffffffaf, 0x83, 0x0, 0x0, @uid}]}]}]}]}]}, 0xe8}}, 0x4010) 0s ago: executing program 3 (id=532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="b01c23fa275b35708a456ebc86e45fa43335e6f829791a661b97d99244a1d9cedaeb66c71403ff3ac2274e3ec2b123746860f562fdf963d61d5d579c23ab3c5f20aeebfd4bcf90806f1f35c4cad66402b51d8e89fd4782a98d1c168114c8620c71773f5a53e22e85209d0aec47a8055b4c473482", 0x74}, {&(0x7f0000000380)="cac411e41916ab3ce1338ef98806f1ea2f8ed01599e92881c0c6c1e49330c4f199850ee5111a75a1376a0b9b5ee9fae0df42f475b2679966e3986a333b37d052083fd7b28f", 0x45}], 0x2}, 0x24000004) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002f0001010000ca95f399720d5b9e0080"], 0x14}], 0x1}, 0x0) ioprio_get$pid(0x2, 0x0) fcntl$setlease(r3, 0x400, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000024d564b00000000ff"]) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="8000020000000000007d2e0000000000"], 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000100)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) epoll_create1(0x0) r11 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r11, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x4, 0x5, 0x3, 0x4, 0x5, 0xcc7, 0xf63, 0xb, 0xa, 0x100, 0x2, 0x9, 0xffffff7d, 0x40, 0x6, 0x101, 0x0, 0x1a449, 0x2, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0xa, 0xe69, 0x3f, 0x8, 0x6, 0xfffffffe, 0xfffffff8]}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:14967' (ED25519) to the list of known hosts. [ 41.932225][ T5893] cgroup: Unknown subsys name 'net' [ 42.109440][ T5893] cgroup: Unknown subsys name 'cpuset' [ 42.113676][ T5893] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.963619][ T5893] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.765033][ T5974] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.768219][ T5974] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.771231][ T5974] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.774191][ T5974] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.777288][ T5974] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.780948][ T5335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.784447][ T5335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.795968][ T5335] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.801391][ T5978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.805393][ T5978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.805620][ T5985] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.809942][ T5978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.811858][ T5985] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.814736][ T5987] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.819409][ T5987] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.822042][ T5987] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.848085][ T5978] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.851745][ T5978] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.857402][ T5978] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.860375][ T5978] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.060064][ T5975] chnl_net:caif_netlink_parms(): no params data found [ 47.067748][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 47.180293][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 47.219579][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.222986][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.225990][ T5972] bridge_slave_0: entered allmulticast mode [ 47.229742][ T5972] bridge_slave_0: entered promiscuous mode [ 47.267786][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.270707][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.273584][ T5972] bridge_slave_1: entered allmulticast mode [ 47.277339][ T5972] bridge_slave_1: entered promiscuous mode [ 47.304044][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.306822][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.309777][ T5975] bridge_slave_0: entered allmulticast mode [ 47.313235][ T5975] bridge_slave_0: entered promiscuous mode [ 47.317313][ T5982] chnl_net:caif_netlink_parms(): no params data found [ 47.365660][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.368308][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.370585][ T5975] bridge_slave_1: entered allmulticast mode [ 47.373169][ T5975] bridge_slave_1: entered promiscuous mode [ 47.443465][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.451302][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.455798][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.461410][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.561226][ T5972] team0: Port device team_slave_0 added [ 47.577647][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.579923][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.582171][ T5980] bridge_slave_0: entered allmulticast mode [ 47.584752][ T5980] bridge_slave_0: entered promiscuous mode [ 47.588748][ T5975] team0: Port device team_slave_0 added [ 47.591461][ T5972] team0: Port device team_slave_1 added [ 47.606900][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.609239][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.611487][ T5980] bridge_slave_1: entered allmulticast mode [ 47.614044][ T5980] bridge_slave_1: entered promiscuous mode [ 47.617688][ T5975] team0: Port device team_slave_1 added [ 47.654087][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.656334][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.659087][ T5982] bridge_slave_0: entered allmulticast mode [ 47.661766][ T5982] bridge_slave_0: entered promiscuous mode [ 47.709673][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.712180][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.714396][ T5982] bridge_slave_1: entered allmulticast mode [ 47.717456][ T5982] bridge_slave_1: entered promiscuous mode [ 47.734498][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.736643][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.745707][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.750370][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.752536][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.760955][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.779354][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.782684][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.784846][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.792669][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.799023][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.801242][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.810195][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.828152][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.863870][ T5982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.869891][ T5982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.874189][ T5980] team0: Port device team_slave_0 added [ 47.877567][ T5980] team0: Port device team_slave_1 added [ 47.959734][ T5982] team0: Port device team_slave_0 added [ 47.979914][ T5975] hsr_slave_0: entered promiscuous mode [ 47.982203][ T5975] hsr_slave_1: entered promiscuous mode [ 47.999035][ T5972] hsr_slave_0: entered promiscuous mode [ 48.001229][ T5972] hsr_slave_1: entered promiscuous mode [ 48.003283][ T5972] debugfs: 'hsr0' already exists in 'hsr' [ 48.005122][ T5972] Cannot create hsr debugfs directory [ 48.007856][ T5982] team0: Port device team_slave_1 added [ 48.023632][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.025814][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.033813][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.039500][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.042289][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.052046][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.075919][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.078279][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.086149][ T5982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.138064][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.141002][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.151746][ T5982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.262014][ T5980] hsr_slave_0: entered promiscuous mode [ 48.264325][ T5980] hsr_slave_1: entered promiscuous mode [ 48.266363][ T5980] debugfs: 'hsr0' already exists in 'hsr' [ 48.268279][ T5980] Cannot create hsr debugfs directory [ 48.306058][ T5982] hsr_slave_0: entered promiscuous mode [ 48.308576][ T5982] hsr_slave_1: entered promiscuous mode [ 48.310616][ T5982] debugfs: 'hsr0' already exists in 'hsr' [ 48.312415][ T5982] Cannot create hsr debugfs directory [ 48.563998][ T5972] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.586018][ T5972] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.591855][ T5972] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.602826][ T5972] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.619732][ T5975] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.623829][ T5975] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.629396][ T5975] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.637718][ T5975] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.678912][ T5980] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.683607][ T5980] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.688459][ T5980] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.692686][ T5980] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.749548][ T5982] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.753631][ T5982] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.759059][ T5982] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.765634][ T5982] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.807431][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.814813][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.836448][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.838925][ T5978] Bluetooth: hci1: command tx timeout [ 48.845578][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.847350][ T5978] Bluetooth: hci2: command tx timeout [ 48.848237][ T5335] Bluetooth: hci0: command tx timeout [ 48.858501][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.860835][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.864381][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.866614][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.870502][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.872722][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.887156][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.889403][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.905589][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.917034][ T5335] Bluetooth: hci3: command tx timeout [ 48.932502][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.945401][ T5982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.950673][ T3735] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.952924][ T3735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.964104][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.966470][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.982093][ T5982] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.000019][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.002301][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.006588][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.009029][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.050930][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.068547][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.090834][ T5972] veth0_vlan: entered promiscuous mode [ 49.101303][ T5972] veth1_vlan: entered promiscuous mode [ 49.113290][ T5975] veth0_vlan: entered promiscuous mode [ 49.122527][ T5975] veth1_vlan: entered promiscuous mode [ 49.132590][ T5972] veth0_macvtap: entered promiscuous mode [ 49.142417][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.146791][ T5972] veth1_macvtap: entered promiscuous mode [ 49.164455][ T5982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.169771][ T5975] veth0_macvtap: entered promiscuous mode [ 49.176174][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.183695][ T5975] veth1_macvtap: entered promiscuous mode [ 49.188930][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.206314][ T1137] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.209805][ T1137] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.220248][ T1137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.222976][ T1137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.236277][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.247537][ T5980] veth0_vlan: entered promiscuous mode [ 49.252188][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.259111][ T5980] veth1_vlan: entered promiscuous mode [ 49.274247][ T1137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.279991][ T5982] veth0_vlan: entered promiscuous mode [ 49.286529][ T1137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.289770][ T1137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.292381][ T1137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.297837][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.300242][ T5982] veth1_vlan: entered promiscuous mode [ 49.300377][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.316518][ T5980] veth0_macvtap: entered promiscuous mode [ 49.328469][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.328532][ T5980] veth1_macvtap: entered promiscuous mode [ 49.331044][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.359394][ T5982] veth0_macvtap: entered promiscuous mode [ 49.364374][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.366126][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.366826][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.372291][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.374593][ T5972] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.385916][ T5982] veth1_macvtap: entered promiscuous mode [ 49.402067][ T166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.407490][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.409358][ T166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.411076][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.509394][ T1138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.512890][ T1138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.517874][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.522104][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.536227][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.541492][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.551474][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.554334][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.585926][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.588885][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.611560][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.617241][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.625339][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.628225][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.648585][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.653625][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.847667][ T6072] usb 1-1: USB disconnect, device number 2 [ 50.072628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.277309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.717976][ T6083] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6'. [ 50.732747][ T6083] Bluetooth: MGMT ver 1.23 [ 50.806686][ T6087] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5'. [ 50.917155][ T5335] Bluetooth: hci0: command tx timeout [ 50.927057][ T5335] Bluetooth: hci2: command tx timeout [ 50.928028][ T5978] Bluetooth: hci1: command tx timeout [ 50.978664][ T6098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11'. [ 51.000774][ T5978] Bluetooth: hci3: command tx timeout [ 51.041577][ T6102] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9'. [ 51.078215][ T6099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11'. [ 51.081225][ T6099] nbd: nbd64 already in use [ 51.167880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 51.198576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.198597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 51.204003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.206619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.403482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 51.406137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 51.546861][ T6113] Zero length message leads to an empty skb [ 51.608206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 52.237494][ T6108] binder: 6107:6108 ioctl 81009431 80000240 returned -22 [ 52.456376][ T6118] overlayfs: missing 'lowerdir' [ 52.462684][ T6118] lo: entered promiscuous mode [ 52.465503][ T6118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 52.877119][ T6056] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 52.997384][ T5978] Bluetooth: hci2: command tx timeout [ 52.997637][ T5335] Bluetooth: hci1: command tx timeout [ 52.999151][ T5978] Bluetooth: hci0: command tx timeout [ 53.007029][ T6056] usb 8-1: device descriptor read/64, error -71 [ 53.067711][ T6124] macvlan2: entered allmulticast mode [ 53.069403][ T6124] veth1_vlan: entered allmulticast mode [ 53.075429][ T6124] veth1_vlan: left allmulticast mode [ 53.077024][ T5978] Bluetooth: hci3: command tx timeout [ 53.257345][ T6056] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 53.397102][ T6056] usb 8-1: device descriptor read/64, error -71 [ 53.517071][ T6056] usb usb8-port1: attempt power cycle [ 53.689997][ T6139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 53.741316][ T6142] input: syz1 as /devices/virtual/input/input5 [ 53.796777][ T6150] netlink: 52 bytes leftover after parsing attributes in process `syz.2.21'. [ 53.877495][ T6056] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 53.908952][ T6056] usb 8-1: device descriptor read/8, error -71 [ 53.999089][ T6159] netlink: 32 bytes leftover after parsing attributes in process `syz.0.26'. [ 54.177056][ T6056] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 54.207434][ T6056] usb 8-1: device descriptor read/8, error -71 [ 54.321207][ T6056] usb usb8-port1: unable to enumerate USB device [ 54.467149][ T34] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 54.597621][ T34] usb 8-1: device descriptor read/64, error -71 [ 54.847080][ T34] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 55.008187][ T34] usb 8-1: device descriptor read/64, error -71 [ 55.087254][ T5978] Bluetooth: hci2: command tx timeout [ 55.087905][ T5335] Bluetooth: hci1: command tx timeout [ 55.157009][ T5335] Bluetooth: hci3: command tx timeout [ 55.405896][ T34] usb usb8-port1: attempt power cycle [ 55.547615][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 56.280732][ T6201] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.401500][ T6206] vivid-007: ================= START STATUS ================= [ 56.404519][ T6206] vivid-007: Enable Output Cropping: true [ 56.406371][ T6206] vivid-007: Enable Output Composing: true [ 56.408318][ T6206] vivid-007: Enable Output Scaler: true [ 56.410076][ T6206] vivid-007: Tx RGB Quantization Range: Automatic [ 56.412555][ T6206] vivid-007: Transmit Mode: HDMI [ 56.414666][ T6206] vivid-007: Hotplug Present: 0x00000000 [ 56.416814][ T6206] vivid-007: RxSense Present: 0x00000000 [ 56.418667][ T6206] vivid-007: EDID Present: 0x00000000 [ 56.420392][ T6206] vivid-007: ================== END STATUS ================== [ 56.433638][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 56.543791][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'. [ 56.819852][ T6228] netlink: 480 bytes leftover after parsing attributes in process `syz.1.42'. [ 56.825478][ T6228] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.841333][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 57.087078][ T1324] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.248729][ T1324] usb 6-1: Using ep0 maxpacket: 8 [ 57.252242][ T1324] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 57.267792][ T1324] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 57.272704][ T1324] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 57.275743][ T1324] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 57.281685][ T1324] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 57.284669][ T1324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.297642][ T1324] usbtmc 6-1:16.0: bulk endpoints not found [ 57.508765][ T6235] mmap: syz.0.45 (6235) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.747020][ T6056] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 57.847008][ T60] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.899022][ T6056] usb 5-1: not running at top speed; connect to a high speed hub [ 57.902726][ T6056] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 57.909093][ T6056] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.911921][ T6056] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.915920][ T6056] usb 5-1: Product: syz [ 57.917385][ T6056] usb 5-1: Manufacturer: syz [ 57.918834][ T6056] usb 5-1: SerialNumber: syz [ 57.998637][ T60] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 58.002052][ T60] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 58.005071][ T60] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 58.007951][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.013451][ T6243] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 58.020160][ T60] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 58.133658][ T6056] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 58.135859][ T6056] cdc_ncm 5-1:1.0: bind() failure [ 58.140354][ T6056] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 58.142494][ T6056] cdc_ncm 5-1:1.1: bind() failure [ 58.146460][ T6056] usb 5-1: USB disconnect, device number 2 [ 58.179058][ T1463] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 58.328157][ T1463] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 58.331235][ T1463] usb 8-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 58.334803][ T1463] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 58.337990][ T1463] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.817206][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'. [ 59.325056][ T6262] block nbd0: Send control failed (result -22) [ 59.328309][ T6262] block nbd0: Request send failed, requeueing [ 59.332436][ T67] block nbd0: Dead connection, failed to find a fallback [ 59.335453][ T67] block nbd0: shutting down sockets [ 59.337943][ T67] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 59.820507][ T34] usb 6-1: USB disconnect, device number 2 [ 59.904250][ T6283] loop6: detected capacity change from 0 to 8388608 [ 59.907953][ T6283] Buffer I/O error on dev loop6, logical block 0, async page read [ 59.911400][ T6283] Buffer I/O error on dev loop6, logical block 0, async page read [ 59.914758][ T6283] Buffer I/O error on dev loop6, logical block 0, async page read [ 59.918885][ T6283] Buffer I/O error on dev loop6, logical block 0, async page read [ 59.922295][ T6283] Buffer I/O error on dev loop6, logical block 0, async page read [ 59.925772][ T6283] Buffer I/O error on dev loop6, logical block 0, async page read [ 59.929279][ T6283] Buffer I/O error on dev loop6, logical block 0, async page read [ 59.932716][ T6283] Buffer I/O error on dev loop6, logical block 0, async page read [ 59.936072][ T6283] ldm_validate_partition_table(): Disk read failed. [ 59.938926][ T6283] Buffer I/O error on dev loop6, logical block 0, async page read [ 59.942314][ T6283] Buffer I/O error on dev loop6, logical block 0, async page read [ 59.945776][ T6283] Dev loop6: unable to read RDB block 0 [ 59.948856][ T6283] loop6: unable to read partition table [ 59.950729][ T6283] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 60.527057][ T60] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 60.628803][ T6056] usb 7-1: USB disconnect, device number 2 [ 60.681323][ T6298] tipc: Started in network mode [ 60.682943][ T6298] tipc: Node identity c2e0176e0eff, cluster identity 4711 [ 60.685674][ T6298] tipc: Enabled bearer , priority 0 [ 60.692438][ T6300] syzkaller0: entered promiscuous mode [ 60.694331][ T6300] syzkaller0: entered allmulticast mode [ 60.697002][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.701053][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.704503][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.710274][ T6301] tipc: Resetting bearer [ 60.713998][ T60] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.717270][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.727386][ T60] usb 5-1: config 0 descriptor?? [ 60.735442][ T6298] tipc: Resetting bearer [ 60.743004][ T6298] tipc: Disabling bearer [ 60.954590][ T1463] usb 8-1: USB disconnect, device number 9 [ 61.025598][ T6315] netlink: 'syz.3.63': attribute type 29 has an invalid length. [ 61.164541][ T60] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 61.492937][ T6322] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 61.495694][ T6322] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 61.501026][ T6322] vhci_hcd vhci_hcd.0: Device attached [ 61.529108][ C0] plantronics 0003:047F:FFFF.0002: hid_field_extract() called with n (132) > 32! (syz.1.62) [ 61.543722][ T6322] devtmpfs: Unknown parameter 'nr_bloZks' [ 61.767158][ T6057] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 61.772367][ T6323] vhci_hcd: connection closed [ 61.773255][ T6324] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 61.777207][ T1175] vhci_hcd: stop threads [ 61.779317][ T1175] vhci_hcd: release socket [ 61.781821][ T1175] vhci_hcd: disconnect device [ 62.603981][ T60] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 63.020851][ T6357] vxfs: WRONG superblock magic 00000000 at 1 [ 63.023212][ T6357] vxfs: WRONG superblock magic 00000000 at 8 [ 63.025200][ T6357] vxfs: can't find superblock. [ 63.330584][ T6362] autofs: Unknown parameter 'dax' [ 63.422403][ T6374] netlink: 'syz.0.77': attribute type 10 has an invalid length. [ 63.424943][ T6374] netlink: 168 bytes leftover after parsing attributes in process `syz.0.77'. [ 63.590709][ T6390] ======================================================= [ 63.590709][ T6390] WARNING: The mand mount option has been deprecated and [ 63.590709][ T6390] and is ignored by this kernel. Remove the mand [ 63.590709][ T6390] option from the mount to silence this warning. [ 63.590709][ T6390] ======================================================= [ 63.610052][ T6390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 63.616668][ T6390] autofs: Unknown parameter ''.n*(' [ 63.675150][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 63.679116][ T6391] netlink: 'syz.2.82': attribute type 18 has an invalid length. [ 63.692889][ T6391] vxlan0: entered promiscuous mode [ 63.697769][ T1138] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.701490][ T1138] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.704919][ T1138] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.709118][ T1138] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.873207][ T6394] tipc: Started in network mode [ 63.874839][ T6394] tipc: Node identity c, cluster identity 4711 [ 63.876801][ T6394] tipc: Node number set to 12 [ 64.047057][ T60] usb 5-1: device descriptor read/64, error -71 [ 64.287083][ T60] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 64.633122][ T40] audit: type=1326 audit(1756780446.424:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.87" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 64.643099][ T40] audit: type=1326 audit(1756780446.424:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.87" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 64.652035][ T40] audit: type=1326 audit(1756780446.424:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.87" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 64.656791][ T6396] 9pnet_virtio: no channels available for device 127.0.0.1 [ 64.663291][ T40] audit: type=1326 audit(1756780446.424:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.87" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 64.663772][ T1324] IPVS: starting estimator thread 0... [ 64.671666][ T40] audit: type=1326 audit(1756780446.424:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.87" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 64.680614][ T40] audit: type=1326 audit(1756780446.424:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.87" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 64.687387][ T40] audit: type=1326 audit(1756780446.424:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.87" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 64.696534][ T40] audit: type=1326 audit(1756780446.424:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.87" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 64.704224][ T40] audit: type=1326 audit(1756780446.424:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.87" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 64.711613][ T40] audit: type=1326 audit(1756780446.424:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.87" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 64.767118][ T6410] IPVS: using max 46 ests per chain, 110400 per kthread [ 64.998110][ T6415] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 65.001395][ T6415] team0: Port device batadv1 added [ 65.808796][ T6432] netlink: 'syz.1.93': attribute type 1 has an invalid length. [ 65.816068][ T6432] netlink: 244 bytes leftover after parsing attributes in process `syz.1.93'. [ 65.825289][ T6432] NCSI netlink: No device for ifindex 0 [ 65.832434][ T6431] netlink: 'syz.1.93': attribute type 1 has an invalid length. [ 65.841532][ T6431] netlink: 244 bytes leftover after parsing attributes in process `syz.1.93'. [ 65.848001][ T6431] NCSI netlink: No device for ifindex 0 [ 66.437087][ T60] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 66.898869][ T6056] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 66.906993][ T6057] vhci_hcd: vhci_device speed not set [ 66.933104][ T6461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.101'. [ 67.049275][ T6056] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.053969][ T6056] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.058326][ T6056] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.063240][ T6056] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.066238][ T6056] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.072437][ T6056] usb 6-1: config 0 descriptor?? [ 67.270913][ T10] cfg80211: failed to load regulatory.db [ 67.471666][ T6120] usb 5-1: USB disconnect, device number 3 [ 67.503045][ T6056] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 67.515559][ T6056] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 68.067819][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 68.242113][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.252913][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.255884][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.260043][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.262838][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.266641][ T10] usb 5-1: config 0 descriptor?? [ 68.676491][ T10] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 69.020631][ T6504] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 69.034592][ T6506] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.085536][ T6511] IPVS: set_ctl: invalid protocol: 41 172.20.20.19:20002 [ 69.361686][ T6527] netlink: 168 bytes leftover after parsing attributes in process `syz.3.114'. [ 69.470462][ T10] usb 6-1: USB disconnect, device number 3 [ 70.098583][ T6533] mkiss: ax0: crc mode is auto. [ 70.808305][ T6120] usb 5-1: USB disconnect, device number 4 [ 70.930367][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.932458][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.160759][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 71.195877][ T6574] warning: `syz.3.128' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.230803][ T6574] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.365749][ T6574] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.567691][ T6574] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.833021][ T6574] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.010057][ T1175] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.083702][ T1175] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.129116][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.176750][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.195154][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 72.241718][ T6596] 9pnet_fd: Insufficient options for proto=fd [ 72.246000][ T6584] netfs: Couldn't get user pages (rc=-14) [ 72.274019][ T6596] IPVS: Error joining to the multicast group [ 72.453590][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'. [ 72.468483][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 72.477046][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.629617][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.634145][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.638492][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.643774][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.647376][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.657462][ T10] usb 5-1: config 0 descriptor?? [ 72.730642][ T6607] syz.3.137 (6607) used greatest stack depth: 19560 bytes left [ 72.743996][ T6611] syz_tun: entered allmulticast mode [ 72.908837][ T6610] syz_tun: left allmulticast mode [ 73.095706][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 73.159059][ T6626] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 73.511409][ T6635] tipc: Enabled bearer , priority 0 [ 73.514229][ T6635] syzkaller0: entered promiscuous mode [ 73.516021][ T6635] syzkaller0: entered allmulticast mode [ 73.531466][ T6635] tipc: Resetting bearer [ 73.537740][ T6634] tipc: Resetting bearer [ 73.549867][ T6634] tipc: Disabling bearer [ 74.547552][ T6643] lo speed is unknown, defaulting to 1000 [ 74.549949][ T6643] lo speed is unknown, defaulting to 1000 [ 74.557394][ T10] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 74.560814][ T6643] lo speed is unknown, defaulting to 1000 [ 74.572431][ T6643] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 74.582543][ T6643] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 74.626240][ T6643] lo speed is unknown, defaulting to 1000 [ 74.638269][ T6643] lo speed is unknown, defaulting to 1000 [ 74.642782][ T6643] lo speed is unknown, defaulting to 1000 [ 74.646584][ T6643] lo speed is unknown, defaulting to 1000 [ 74.843853][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 74.843868][ T40] audit: type=1326 audit(1756780468.839:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.2.149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 74.856727][ T40] audit: type=1326 audit(1756780468.839:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.2.149" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 74.863844][ T40] audit: type=1326 audit(1756780468.839:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.2.149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 74.871830][ T40] audit: type=1326 audit(1756780468.839:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.2.149" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 74.881820][ T40] audit: type=1326 audit(1756780468.839:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.2.149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 74.892149][ T40] audit: type=1326 audit(1756780468.839:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.2.149" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 74.903011][ T6653] loop6: detected capacity change from 0 to 63 [ 74.903312][ T40] audit: type=1326 audit(1756780468.899:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.2.149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 74.909035][ T6653] buffer_io_error: 18 callbacks suppressed [ 74.909045][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.915377][ T40] audit: type=1326 audit(1756780468.899:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.2.149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 74.916215][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.937203][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.941049][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.944514][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.948773][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.952207][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.953364][ T40] audit: type=1326 audit(1756780468.949:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.2.149" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 74.958697][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.965504][ T6653] ldm_validate_partition_table(): Disk read failed. [ 74.965717][ T40] audit: type=1326 audit(1756780468.959:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6650 comm="syz.2.149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 74.968287][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.979100][ T6653] Buffer I/O error on dev loop6, logical block 0, async page read [ 74.981895][ T6653] Dev loop6: unable to read RDB block 0 [ 74.984039][ T6653] loop6: unable to read partition table [ 74.985864][ T6653] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 75.020241][ T6651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.149'. [ 76.162929][ T9] usb 5-1: USB disconnect, device number 5 [ 76.275977][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 76.422449][ T6668] loop1: detected capacity change from 0 to 524287999 [ 76.428123][ T6668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.153'. [ 76.555505][ T6697] sp0: Synchronizing with TNC [ 76.672716][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'. [ 76.737819][ T53] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 76.873350][ T6717] CUSE: info not properly terminated [ 76.907041][ T53] usb 8-1: Using ep0 maxpacket: 16 [ 76.910403][ T53] usb 8-1: config 0 has no interfaces? [ 76.913851][ T53] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 76.917481][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.920931][ T53] usb 8-1: Product: syz [ 76.924277][ T53] usb 8-1: Manufacturer: syz [ 76.978394][ T53] usb 8-1: SerialNumber: syz [ 76.989541][ T53] usb 8-1: config 0 descriptor?? [ 77.717747][ T53] usb 8-1: USB disconnect, device number 10 [ 77.740278][ T6722] block nbd3: Attempted send on invalid socket [ 77.742989][ T6722] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.747859][ T6722] vxfs: unable to read disk superblock at 1 [ 77.750873][ T6722] block nbd3: Attempted send on invalid socket [ 77.753459][ T6722] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.756941][ T6722] vxfs: unable to read disk superblock at 8 [ 77.758866][ T6722] vxfs: can't find superblock. [ 77.961234][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.176'. [ 78.236145][ T6739] netlink: 'syz.2.174': attribute type 10 has an invalid length. [ 78.238648][ T6120] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 78.251366][ T6739] batman_adv: batadv0: Adding interface: team0 [ 78.253392][ T6739] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.261760][ T6739] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 78.266846][ T6739] netlink: 'syz.2.174': attribute type 10 has an invalid length. [ 78.269463][ T6739] netlink: 2 bytes leftover after parsing attributes in process `syz.2.174'. [ 78.272257][ T6739] team0: entered promiscuous mode [ 78.273874][ T6739] team_slave_0: entered promiscuous mode [ 78.275796][ T6739] team_slave_1: entered promiscuous mode [ 78.279265][ T6739] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.281773][ T6739] batman_adv: batadv0: Interface activated: team0 [ 78.283809][ T6739] batman_adv: batadv0: Interface deactivated: team0 [ 78.286118][ T6739] batman_adv: batadv0: Removing interface: team0 [ 78.290291][ T6739] bridge0: port 3(team0) entered blocking state [ 78.292502][ T6739] bridge0: port 3(team0) entered disabled state [ 78.294719][ T6739] team0: entered allmulticast mode [ 78.296691][ T6739] team_slave_0: entered allmulticast mode [ 78.299790][ T6739] team_slave_1: entered allmulticast mode [ 78.304574][ T6739] bridge0: port 3(team0) entered blocking state [ 78.307612][ T6739] bridge0: port 3(team0) entered forwarding state [ 78.388790][ T6120] usb 8-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 78.392265][ T6120] usb 8-1: config 1 interface 0 has no altsetting 0 [ 78.396832][ T6120] usb 8-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.40 [ 78.399869][ T6120] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.402405][ T6120] usb 8-1: Product: ㈕뗀筘궕黠å¢ì§žê‰µä¿¨ï£Žå°·× åˆŸç¥ºáƒ€ì†™á°â»šã¬ë¶Šâ£ìƒ°ãšžä‚‘驣췭ê†ï†±ä„¶ä¾†å§´ì™‚塾놰 [ 78.406424][ T6120] usb 8-1: Manufacturer: à°š [ 78.407973][ T6120] usb 8-1: SerialNumber: í’²ã¦„ï§—á‚£ã¢‘ï´‚â³žé”æ©£ë‘ºê§¢á©€è¯›ÞŒå¤¤êƒ” [ 78.412459][ T6736] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.693390][ T6743] Illegal XDP return value 6743 on prog (id 35) dev N/A, expect packet loss! [ 78.750750][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 78.828136][ T6736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.831115][ T6736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.857770][ T6736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.861620][ T6736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.867785][ T6736] binder: 6735:6736 ioctl c4089434 80005680 returned -22 [ 78.871609][ T6736] binder: 6735:6736 ioctl 50009401 80005f00 returned -22 [ 78.888353][ T6120] usbhid 8-1:1.0: can't add hid device: -71 [ 78.890353][ T6120] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 78.905761][ T6120] usb 8-1: USB disconnect, device number 11 [ 78.974841][ T6754] random: crng reseeded on system resumption [ 79.104465][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 79.259144][ T6771] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.345699][ T6771] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.404344][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'. [ 79.420740][ T6773] bridge0: port 3(team0) entered disabled state [ 79.484288][ T6773] team0 (unregistering): left allmulticast mode [ 79.486215][ T6773] team_slave_0: left allmulticast mode [ 79.488018][ T6773] team_slave_1: left allmulticast mode [ 79.490498][ T6773] bridge0: port 3(team0) entered disabled state [ 79.496543][ T6773] team_slave_0: left promiscuous mode [ 79.501094][ T6773] team0 (unregistering): Port device team_slave_0 removed [ 79.503764][ T6773] team_slave_1: left promiscuous mode [ 79.508140][ T6773] team0 (unregistering): Port device team_slave_1 removed [ 79.535775][ T6771] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.573609][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 79.593870][ T6777] IPVS: Error joining to the multicast group [ 79.637641][ T6771] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.667146][ T53] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 79.729939][ T3735] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.738613][ T3735] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.746075][ T3735] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.749842][ T6780] block nbd0: Device being setup by another task [ 79.758888][ T3735] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.822959][ T53] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.826851][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 79.831359][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 79.831388][ T53] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.831425][ T53] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.831443][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.837957][ T53] usb 8-1: config 0 descriptor?? [ 79.846990][ T6779] nbd0: detected capacity change from 0 to 1024 [ 79.878174][ T63] Bluetooth: hci1: command 0x0406 tx timeout [ 79.902309][ T6780] lo speed is unknown, defaulting to 1000 [ 80.120099][ T6789] process 'syz.2.193' launched './file0' with NULL argv: empty string added [ 80.150522][ T40] kauditd_printk_skb: 50 callbacks suppressed [ 80.150533][ T40] audit: type=1800 audit(1756780474.149:96): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.193" name="/" dev="fuse" ino=0 res=0 errno=0 [ 80.188809][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 80.255268][ T53] usbhid 8-1:0.0: can't add hid device: -71 [ 80.264104][ T53] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 80.277513][ T53] usb 8-1: USB disconnect, device number 12 [ 80.550035][ T6779] block nbd0: shutting down sockets [ 80.612960][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 80.691902][ T6824] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 80.707948][ T6824] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 80.729254][ T6824] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 80.731598][ T6824] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.740660][ T6824] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.752867][ T6824] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 80.754946][ T6824] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.760772][ T6824] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.135248][ T6839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.209'. [ 81.586016][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 81.760325][ T6866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.217'. [ 82.121031][ T6872] (syz.1.218,6872,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 82.124339][ T6872] (syz.1.218,6872,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 82.446192][ T6880] capability: warning: `syz.1.220' uses deprecated v2 capabilities in a way that may be insecure [ 82.478637][ T6865] syz.2.211 (6865): drop_caches: 1 [ 82.479866][ T6860] syz.2.211 (6860): drop_caches: 1 [ 82.519174][ T6882] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.221'. [ 82.571298][ T6885] binder: 6883:6885 ioctl 400c620e 80000040 returned -22 [ 82.654469][ T6890] netlink: zone id is out of range [ 82.656685][ T6890] netlink: zone id is out of range [ 82.656707][ T6885] fuse: Bad value for 'user_id' [ 82.658989][ T6890] netlink: zone id is out of range [ 82.659013][ T6890] netlink: zone id is out of range [ 82.659020][ T6890] netlink: zone id is out of range [ 82.659027][ T6890] netlink: zone id is out of range [ 82.659033][ T6890] netlink: zone id is out of range [ 82.659040][ T6890] netlink: zone id is out of range [ 82.659047][ T6890] netlink: zone id is out of range [ 82.659053][ T6890] netlink: zone id is out of range [ 82.675410][ T6885] fuse: Bad value for 'user_id' [ 82.757161][ T5978] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.757222][ T5335] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.767077][ T5335] Bluetooth: hci1: command 0x0406 tx timeout [ 83.630958][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.227'. [ 83.634978][ C2] vcan0: j1939_session_tx_dat: 0xffff888051ad7c00: queue data error: -100 [ 83.842853][ T6897] netlink: 24 bytes leftover after parsing attributes in process `syz.3.226'. [ 84.093501][ T6909] nvme_fabrics: missing parameter 'transport=%s' [ 84.095711][ T6909] nvme_fabrics: missing parameter 'nqn=%s' [ 84.160446][ T6918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.229'. [ 84.536597][ T6923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'. [ 84.566056][ T6923] bridge1: port 1(veth3) entered blocking state [ 84.569684][ T6923] bridge1: port 1(veth3) entered disabled state [ 84.571822][ T6923] veth3: entered allmulticast mode [ 84.574178][ T6923] veth3: entered promiscuous mode [ 84.600856][ T6923] vlan2: entered allmulticast mode [ 84.602638][ T6923] veth0_to_hsr: entered allmulticast mode [ 84.837126][ T5335] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.837152][ T5978] Bluetooth: hci1: command 0x0406 tx timeout [ 84.839140][ T5335] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.980735][ T40] audit: type=1326 audit(1756780478.979:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.238" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7fc00000 [ 85.102023][ T6948] netlink: 'syz.3.239': attribute type 10 has an invalid length. [ 85.136519][ T6948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.147984][ T6948] team0: Port device bond0 added [ 85.251085][ T6948] team0 (unregistering): Port device team_slave_0 removed [ 85.256764][ T6948] team0 (unregistering): Port device team_slave_1 removed [ 85.261022][ T6948] team0 (unregistering): Port device bond0 removed [ 85.704952][ T6958] capability: warning: `syz.0.241' uses 32-bit capabilities (legacy support in use) [ 85.940742][ T6969] bridge_slave_0: left allmulticast mode [ 85.942763][ T6969] bridge_slave_0: left promiscuous mode [ 85.945471][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.964601][ T6969] bridge_slave_1: left allmulticast mode [ 85.966530][ T6969] bridge_slave_1: left promiscuous mode [ 85.970248][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.995545][ T6969] bond0: (slave bond_slave_0): Releasing backup interface [ 86.005528][ T6969] bond0: (slave bond_slave_1): Releasing backup interface [ 86.014318][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.019737][ T6969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.023289][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.025714][ T6969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.204926][ T6969] netlink: 'syz.2.244': attribute type 10 has an invalid length. [ 86.268793][ T6971] __nla_validate_parse: 6 callbacks suppressed [ 86.268806][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'. [ 86.371912][ T6975] netlink: 'syz.2.244': attribute type 10 has an invalid length. [ 86.435775][ T6975] bridge0: port 1(netdevsim0) entered blocking state [ 86.439074][ T6975] bridge0: port 1(netdevsim0) entered disabled state [ 86.441564][ T6975] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 86.651221][ T6975] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 86.654840][ T6975] bridge0: port 1(netdevsim0) entered blocking state [ 86.657281][ T6975] bridge0: port 1(netdevsim0) entered forwarding state [ 86.927542][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 86.929914][ T5978] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.197079][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 88.231313][ T7016] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 88.284173][ T7022] netlink: 20 bytes leftover after parsing attributes in process `syz.3.256'. [ 88.290061][ T7022] tmpfs: Unknown parameter 'fsuuid' [ 88.301762][ T7009] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.304907][ T7009] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.310010][ T7009] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.865460][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'. [ 89.934981][ T7057] cgroup: No subsys list or none specified [ 89.937660][ T7058] cgroup: No subsys list or none specified [ 90.350476][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 90.354502][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'. [ 90.358624][ T5978] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.358639][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.361195][ T5978] Bluetooth: hci1: command 0x0406 tx timeout [ 90.897059][ T40] audit: type=1326 audit(1756780484.899:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.1.271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 90.905338][ T40] audit: type=1326 audit(1756780484.899:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.1.271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 90.919553][ T40] audit: type=1326 audit(1756780484.899:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.1.271" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 90.927921][ T40] audit: type=1326 audit(1756780484.899:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.1.271" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 90.935124][ T40] audit: type=1326 audit(1756780484.899:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.1.271" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fd8579 code=0x7ffc0000 [ 90.944935][ T40] audit: type=1326 audit(1756780484.899:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.1.271" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd8598 code=0x7ffc0000 [ 90.953117][ T40] audit: type=1326 audit(1756780484.899:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.1.271" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd8598 code=0x7ffc0000 [ 90.961382][ T40] audit: type=1326 audit(1756780484.899:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.1.271" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd8598 code=0x7ffc0000 [ 90.969232][ T40] audit: type=1326 audit(1756780484.899:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.1.271" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd8598 code=0x7ffc0000 [ 90.979828][ T40] audit: type=1326 audit(1756780484.899:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.1.271" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd8598 code=0x7ffc0000 [ 91.174865][ T7079] net_ratelimit: 8 callbacks suppressed [ 91.174882][ T7079] netlink: zone id is out of range [ 91.183023][ T7079] netlink: zone id is out of range [ 91.185336][ T7079] netlink: zone id is out of range [ 91.187642][ T7079] netlink: zone id is out of range [ 91.189819][ T7079] netlink: zone id is out of range [ 91.191984][ T7079] netlink: zone id is out of range [ 91.194164][ T7079] netlink: zone id is out of range [ 91.195975][ T7079] netlink: zone id is out of range [ 91.201065][ T7079] netlink: zone id is out of range [ 91.202984][ T7079] netlink: zone id is out of range [ 91.245204][ T7083] FAULT_INJECTION: forcing a failure. [ 91.245204][ T7083] name failslab, interval 1, probability 0, space 0, times 1 [ 91.245449][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 91.249341][ T7083] CPU: 1 UID: 0 PID: 7083 Comm: syz.3.275 Not tainted syzkaller #0 PREEMPT(full) [ 91.249357][ T7083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.249363][ T7083] Call Trace: [ 91.249366][ T7083] [ 91.249371][ T7083] dump_stack_lvl+0x16c/0x1f0 [ 91.249402][ T7083] should_fail_ex+0x512/0x640 [ 91.249420][ T7083] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 91.249435][ T7083] should_failslab+0xc2/0x120 [ 91.249449][ T7083] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 91.249460][ T7083] ? __alloc_skb+0x2b2/0x380 [ 91.249476][ T7083] __alloc_skb+0x2b2/0x380 [ 91.249489][ T7083] ? __pfx___alloc_skb+0x10/0x10 [ 91.249502][ T7083] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 91.249519][ T7083] netlink_alloc_large_skb+0x69/0x130 [ 91.249535][ T7083] netlink_sendmsg+0x6a1/0xdd0 [ 91.249551][ T7083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.249566][ T7083] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 91.249580][ T7083] ____sys_sendmsg+0xa98/0xc70 [ 91.249591][ T7083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.249600][ T7083] ? get_compat_msghdr+0x11a/0x170 [ 91.249619][ T7083] ___sys_sendmsg+0x134/0x1d0 [ 91.249633][ T7083] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.249652][ T7083] ? find_held_lock+0x2b/0x80 [ 91.249671][ T7083] __sys_sendmsg+0x16d/0x220 [ 91.249685][ T7083] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.249704][ T7083] ? rcu_is_watching+0x12/0xc0 [ 91.249716][ T7083] __do_fast_syscall_32+0x7c/0x3a0 [ 91.249732][ T7083] do_fast_syscall_32+0x32/0x80 [ 91.249746][ T7083] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 91.249759][ T7083] RIP: 0023:0xf706e579 [ 91.249767][ T7083] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 91.249776][ T7083] RSP: 002b:00000000f545e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 91.249786][ T7083] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 91.249792][ T7083] RDX: 0000000000004010 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.249798][ T7083] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 91.249803][ T7083] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 91.249809][ T7083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 91.249821][ T7083] [ 91.423550][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 91.428075][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 91.431006][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 91.434164][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 91.818278][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 91.855194][ T7128] netlink: 14 bytes leftover after parsing attributes in process `syz.3.288'. [ 91.933927][ T7128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.939973][ T7128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.948399][ T7128] bond0 (unregistering): Released all slaves [ 93.533099][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 94.680015][ T7187] syz.3.301 uses obsolete (PF_INET,SOCK_PACKET) [ 95.405956][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 95.667098][ T6120] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 95.817110][ T6120] usb 7-1: Using ep0 maxpacket: 32 [ 95.826271][ T6120] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 95.833041][ T6120] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 95.840042][ T6120] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.843918][ T6120] usb 7-1: Product: syz [ 95.846364][ T6120] usb 7-1: Manufacturer: syz [ 95.848411][ T6120] usb 7-1: SerialNumber: syz [ 95.853113][ T6120] usb 7-1: config 0 descriptor?? [ 96.058097][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.061040][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.063966][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.067386][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.070392][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.073116][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.076246][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.079975][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.085044][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.089830][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.099992][ T9] usb 7-1: USB disconnect, device number 3 [ 96.810312][ T7226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.311'. [ 96.898444][ T7228] lo speed is unknown, defaulting to 1000 [ 97.348778][ T7240] FAULT_INJECTION: forcing a failure. [ 97.348778][ T7240] name failslab, interval 1, probability 0, space 0, times 0 [ 97.353842][ T7240] CPU: 1 UID: 0 PID: 7240 Comm: syz.1.314 Not tainted syzkaller #0 PREEMPT(full) [ 97.353857][ T7240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.353863][ T7240] Call Trace: [ 97.353867][ T7240] [ 97.353871][ T7240] dump_stack_lvl+0x16c/0x1f0 [ 97.353888][ T7240] should_fail_ex+0x512/0x640 [ 97.353910][ T7240] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 97.353925][ T7240] should_failslab+0xc2/0x120 [ 97.353939][ T7240] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 97.353950][ T7240] ? __lock_acquire+0x62e/0x1ce0 [ 97.353963][ T7240] ? __alloc_skb+0x2b2/0x380 [ 97.353979][ T7240] __alloc_skb+0x2b2/0x380 [ 97.353991][ T7240] ? __pfx___alloc_skb+0x10/0x10 [ 97.354005][ T7240] ? find_held_lock+0x2b/0x80 [ 97.354017][ T7240] ovs_ct_limit_cmd_reply_start+0x55/0x1f0 [ 97.354036][ T7240] ovs_ct_limit_cmd_set+0x16e/0xa90 [ 97.354048][ T7240] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 97.354058][ T7240] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 97.354076][ T7240] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 97.354095][ T7240] genl_family_rcv_msg_doit+0x209/0x2f0 [ 97.354111][ T7240] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 97.354131][ T7240] ? bpf_lsm_capable+0x9/0x10 [ 97.354141][ T7240] ? security_capable+0x7e/0x260 [ 97.354155][ T7240] ? ns_capable+0xd7/0x110 [ 97.354169][ T7240] genl_rcv_msg+0x55c/0x800 [ 97.354180][ T7240] ? __pfx_genl_rcv_msg+0x10/0x10 [ 97.354195][ T7240] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 97.354210][ T7240] netlink_rcv_skb+0x158/0x420 [ 97.354224][ T7240] ? __pfx_genl_rcv_msg+0x10/0x10 [ 97.354240][ T7240] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.354259][ T7240] ? netlink_deliver_tap+0x1ae/0xd30 [ 97.354275][ T7240] genl_rcv+0x28/0x40 [ 97.354288][ T7240] netlink_unicast+0x5a7/0x870 [ 97.354304][ T7240] ? __pfx_netlink_unicast+0x10/0x10 [ 97.354318][ T7240] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 97.354336][ T7240] netlink_sendmsg+0x8d1/0xdd0 [ 97.354352][ T7240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.354367][ T7240] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 97.354381][ T7240] ____sys_sendmsg+0xa98/0xc70 [ 97.354393][ T7240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.354401][ T7240] ? get_compat_msghdr+0x11a/0x170 [ 97.354420][ T7240] ___sys_sendmsg+0x134/0x1d0 [ 97.354434][ T7240] ? __pfx____sys_sendmsg+0x10/0x10 [ 97.354454][ T7240] ? find_held_lock+0x2b/0x80 [ 97.354473][ T7240] __sys_sendmsg+0x16d/0x220 [ 97.354486][ T7240] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.354505][ T7240] ? rcu_is_watching+0x12/0xc0 [ 97.354518][ T7240] __do_fast_syscall_32+0x7c/0x3a0 [ 97.354533][ T7240] do_fast_syscall_32+0x32/0x80 [ 97.354547][ T7240] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.354560][ T7240] RIP: 0023:0xf7fd8579 [ 97.354568][ T7240] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 97.354578][ T7240] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 97.354587][ T7240] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 97.354594][ T7240] RDX: 0000000000004010 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.354600][ T7240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 97.354605][ T7240] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 97.354611][ T7240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.354623][ T7240] [ 97.572653][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.315'. [ 97.575527][ T7245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.315'. [ 97.593440][ T1137] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.600712][ T1137] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.612700][ T1137] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.616383][ T1137] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.135801][ T7254] netlink: 129704 bytes leftover after parsing attributes in process `syz.3.320'. [ 98.137149][ T7255] netlink: 129704 bytes leftover after parsing attributes in process `syz.3.320'. [ 98.238722][ T7257] netlink: 'syz.1.321': attribute type 1 has an invalid length. [ 98.258847][ T7255] block nbd0: server does not support multiple connections per device. [ 98.264925][ T7257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.270986][ T7255] block nbd0: shutting down sockets [ 98.465589][ T7257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.468079][ T7257] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 98.472095][ T7257] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 98.644429][ T7273] netlink: 96 bytes leftover after parsing attributes in process `syz.0.324'. [ 99.961860][ T7310] fuse: Unknown parameter '<:D.úôÿ­ò¤&¼þ¿òñ÷+ç¯ýŒ®mà™Ãb±]iwD˜°|ˆHÊmÝûQ#fFaä ãU.À&fŸU^€æ¹$Z€Ð‚"ù†ˆJï·Ô`Ñ¢g8«›œ/-eËaDõhr®_…í$tó„¥2’fЭµ§þÅ@D|dvÇ@ ' [ 100.004471][ T7314] cgroup: subsys name conflicts with all [ 100.015440][ T7314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.336'. [ 100.661072][ T7345] No source specified [ 100.667050][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 102.037201][ T6057] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 102.211099][ T6057] usb 6-1: unable to get BOS descriptor or descriptor too short [ 102.230170][ T6057] usb 6-1: config 7 has an invalid interface number: 67 but max is 0 [ 102.240156][ T6057] usb 6-1: config 7 has no interface number 0 [ 102.263009][ T6057] usb 6-1: string descriptor 0 read error: -22 [ 102.274403][ T6057] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 102.285997][ T6057] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.553370][ T6057] usb 6-1: USB disconnect, device number 4 [ 102.776409][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'. [ 102.882014][ T7413] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 103.109203][ T7416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.356'. [ 104.046840][ T7434] lo speed is unknown, defaulting to 1000 [ 104.154955][ T7440] netlink: 'syz.3.360': attribute type 3 has an invalid length. [ 104.158616][ T7440] netlink: 'syz.3.360': attribute type 1 has an invalid length. [ 104.165282][ T7440] netlink: 220 bytes leftover after parsing attributes in process `syz.3.360'. [ 104.351977][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'. [ 104.389285][ T7455] tipc: Enabled bearer , priority 0 [ 104.391922][ T7455] syzkaller0: entered promiscuous mode [ 104.393705][ T7455] syzkaller0: entered allmulticast mode [ 104.399818][ T7455] tipc: Resetting bearer [ 104.405236][ T7454] tipc: Resetting bearer [ 104.421863][ T7431] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 104.444626][ T7454] tipc: Disabling bearer [ 104.571828][ T7467] net_ratelimit: 5 callbacks suppressed [ 104.571843][ T7467] netlink: zone id is out of range [ 104.576560][ T7467] netlink: zone id is out of range [ 104.579286][ T7467] netlink: zone id is out of range [ 104.581147][ T7467] netlink: zone id is out of range [ 104.582802][ T7467] netlink: zone id is out of range [ 104.584563][ T7467] netlink: zone id is out of range [ 104.586173][ T7467] netlink: zone id is out of range [ 104.588284][ T7467] netlink: zone id is out of range [ 104.589997][ T7467] netlink: zone id is out of range [ 104.591777][ T7467] netlink: zone id is out of range [ 104.679941][ T1339] kernel read not supported for file /dsp1 (pid: 1339 comm: kworker/2:2) [ 104.807442][ T7479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'. [ 105.038898][ T40] kauditd_printk_skb: 827 callbacks suppressed [ 105.038910][ T40] audit: type=1326 audit(1756780498.969:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 105.049743][ T40] audit: type=1326 audit(1756780498.969:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 105.049767][ T40] audit: type=1326 audit(1756780498.969:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 105.076318][ T40] audit: type=1326 audit(1756780499.069:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 105.076348][ T40] audit: type=1326 audit(1756780499.069:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7472 comm="syz.0.373" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f44579 code=0x7ffc0000 [ 105.956373][ T7514] FAULT_INJECTION: forcing a failure. [ 105.956373][ T7514] name failslab, interval 1, probability 0, space 0, times 0 [ 105.961087][ T7514] CPU: 0 UID: 0 PID: 7514 Comm: syz.0.381 Not tainted syzkaller #0 PREEMPT(full) [ 105.961102][ T7514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.961108][ T7514] Call Trace: [ 105.961111][ T7514] [ 105.961115][ T7514] dump_stack_lvl+0x16c/0x1f0 [ 105.961134][ T7514] should_fail_ex+0x512/0x640 [ 105.961150][ T7514] should_failslab+0xc2/0x120 [ 105.961164][ T7514] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 105.961177][ T7514] ? skb_clone+0x190/0x3f0 [ 105.961193][ T7514] skb_clone+0x190/0x3f0 [ 105.961207][ T7514] netlink_deliver_tap+0xabd/0xd30 [ 105.961223][ T7514] netlink_unicast+0x71f/0x870 [ 105.961240][ T7514] ? __pfx_netlink_unicast+0x10/0x10 [ 105.961254][ T7514] ? genl_rcv_msg+0x4bb/0x800 [ 105.961267][ T7514] netlink_ack+0x696/0xb80 [ 105.961284][ T7514] netlink_rcv_skb+0x332/0x420 [ 105.961298][ T7514] ? __pfx_genl_rcv_msg+0x10/0x10 [ 105.961314][ T7514] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.961337][ T7514] genl_rcv+0x28/0x40 [ 105.961351][ T7514] netlink_unicast+0x5a7/0x870 [ 105.961367][ T7514] ? __pfx_netlink_unicast+0x10/0x10 [ 105.961381][ T7514] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 105.961399][ T7514] netlink_sendmsg+0x8d1/0xdd0 [ 105.961415][ T7514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.961430][ T7514] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 105.961444][ T7514] ____sys_sendmsg+0xa98/0xc70 [ 105.961456][ T7514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.961465][ T7514] ? get_compat_msghdr+0x11a/0x170 [ 105.961484][ T7514] ___sys_sendmsg+0x134/0x1d0 [ 105.961498][ T7514] ? __pfx____sys_sendmsg+0x10/0x10 [ 105.961530][ T7514] ? find_held_lock+0x2b/0x80 [ 105.961552][ T7514] __sys_sendmsg+0x16d/0x220 [ 105.961566][ T7514] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.961585][ T7514] ? rcu_is_watching+0x12/0xc0 [ 105.961598][ T7514] __do_fast_syscall_32+0x7c/0x3a0 [ 105.961614][ T7514] do_fast_syscall_32+0x32/0x80 [ 105.961627][ T7514] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 105.961641][ T7514] RIP: 0023:0xf7f44579 [ 105.961649][ T7514] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 105.961659][ T7514] RSP: 002b:00000000f545655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 105.961668][ T7514] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 105.961674][ T7514] RDX: 0000000000004010 RSI: 0000000000000000 RDI: 0000000000000000 [ 105.961680][ T7514] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 105.961685][ T7514] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 105.961691][ T7514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 105.961704][ T7514] [ 106.057225][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.080556][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 107.368528][ T7555] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 108.003124][ T7578] 9pnet_fd: Insufficient options for proto=fd [ 108.071335][ T7580] netlink: 'syz.3.395': attribute type 16 has an invalid length. [ 108.073895][ T7580] netlink: 'syz.3.395': attribute type 3 has an invalid length. [ 108.076867][ T7580] netlink: 132 bytes leftover after parsing attributes in process `syz.3.395'. [ 108.751987][ T7593] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 108.998480][ T7591] lo speed is unknown, defaulting to 1000 [ 109.762306][ T7619] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.406'. [ 109.766466][ T7619] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.406'. [ 109.770348][ T7619] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.406'. [ 109.925068][ T7623] 9pnet_fd: Insufficient options for proto=fd [ 109.936163][ T7623] netlink: 'syz.1.407': attribute type 2 has an invalid length. [ 110.300528][ T7625] overlay: Bad value for 'workdir' [ 110.814898][ T40] audit: type=1326 audit(1756780504.809:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7631 comm="syz.1.411" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd8579 code=0x0 [ 110.823791][ T7630] netlink: 120 bytes leftover after parsing attributes in process `syz.0.410'. [ 110.980764][ T7644] loop2: detected capacity change from 0 to 7 [ 110.984897][ T7644] Dev loop2: unable to read RDB block 7 [ 110.987258][ T7644] loop2: unable to read partition table [ 110.989444][ T7644] loop2: partition table beyond EOD, truncated [ 110.991910][ T7644] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 111.031487][ T7646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.415'. [ 111.902996][ T63] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 112.419419][ T7683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.425'. [ 112.879356][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'. [ 112.894774][ T7705] lo: left promiscuous mode [ 113.107056][ T1463] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 113.113423][ T7707] Attempt to restore checkpoint with obsolete wellknown handles [ 113.181424][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.183962][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.234562][ T7705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.242246][ T7705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.267002][ T1463] usb 6-1: Using ep0 maxpacket: 8 [ 113.278563][ T1463] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.283124][ T1463] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 113.288619][ T1463] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.296070][ T1463] usb 6-1: config 0 descriptor?? [ 113.322634][ T1324] lo speed is unknown, defaulting to 1000 [ 113.326584][ T1324] syz0: Port: 1 Link DOWN [ 113.345945][ T7538] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.349307][ T7538] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.352014][ T7538] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.354722][ T7538] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.510695][ T1463] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 113.634700][ T7530] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.638597][ T7530] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.722164][ T7704] Unsupported ieee802154 address type: 0 [ 113.755897][ T7530] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.759978][ T7530] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.950045][ T5335] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.954666][ T5335] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.958687][ T5335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.959796][ T7530] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.962706][ T5335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.965041][ T7530] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.968393][ T5335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.025135][ T7722] lo speed is unknown, defaulting to 1000 [ 114.162208][ T7530] bridge0: port 1(netdevsim0) entered disabled state [ 114.177819][ T7530] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 114.180968][ T7530] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 114.184992][ T7530] bridge0: port 1(netdevsim0) entered disabled state [ 114.209999][ T7530] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.217619][ T7530] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.295531][ T1324] usb 6-1: USB disconnect, device number 5 [ 114.586517][ T7722] chnl_net:caif_netlink_parms(): no params data found [ 115.195260][ T7530] bond0 (unregistering): Released all slaves [ 115.209343][ T7753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.447'. [ 115.212275][ T7753] netlink: 196 bytes leftover after parsing attributes in process `syz.3.447'. [ 115.215247][ T7753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.447'. [ 115.218654][ T7753] netlink: 196 bytes leftover after parsing attributes in process `syz.3.447'. [ 115.317118][ T7530] tipc: Left network mode [ 115.317878][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.321169][ T7722] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.323657][ T7722] bridge_slave_0: entered allmulticast mode [ 115.326329][ T7722] bridge_slave_0: entered promiscuous mode [ 115.332990][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.335409][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.338289][ T7722] bridge_slave_1: entered allmulticast mode [ 115.341443][ T7722] bridge_slave_1: entered promiscuous mode [ 115.392391][ T7722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.424661][ T7722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.463328][ T7722] team0: Port device team_slave_0 added [ 115.466777][ T7722] team0: Port device team_slave_1 added [ 115.540901][ T7722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.543165][ T7722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.553450][ T7722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.559297][ T7722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.562241][ T7722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.573163][ T7722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.690299][ T7722] hsr_slave_0: entered promiscuous mode [ 115.693425][ T7722] hsr_slave_1: entered promiscuous mode [ 115.696291][ T7722] debugfs: 'hsr0' already exists in 'hsr' [ 115.700385][ T7722] Cannot create hsr debugfs directory [ 115.751490][ T7763] Bluetooth: MGMT ver 1.23 [ 115.753549][ T7763] Bluetooth: hci0: too big key_count value 34945 [ 115.852256][ T7530] hsr_slave_0: left promiscuous mode [ 115.854780][ T7530] hsr_slave_1: left promiscuous mode [ 115.881169][ T7530] veth1_macvtap: left promiscuous mode [ 115.883417][ T7530] veth0_macvtap: left promiscuous mode [ 115.887245][ T7530] veth1_vlan: left promiscuous mode [ 115.890668][ T7530] veth0_vlan: left promiscuous mode [ 115.959835][ T63] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 115.969141][ T63] Bluetooth: hci3: Injecting HCI hardware error event [ 115.973482][ T63] Bluetooth: hci3: hardware error 0x00 [ 116.048000][ T5335] Bluetooth: hci0: command tx timeout [ 116.457880][ T7775] could not allocate digest TFM handle sha1-generic [ 117.186639][ T7722] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.195110][ T7722] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.209505][ T7722] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 117.226357][ T7722] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 117.341972][ T7722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.361388][ T7722] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.372038][ T7532] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.374728][ T7532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.382876][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.386004][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.530138][ T7819] input: syz0 as /devices/virtual/input/input11 [ 117.542323][ T7819] devpts: Bad value for 'max' [ 117.549669][ T7722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.735000][ T7722] veth0_vlan: entered promiscuous mode [ 117.742755][ T7722] veth1_vlan: entered promiscuous mode [ 117.756004][ T7722] veth0_macvtap: entered promiscuous mode [ 117.761193][ T7722] veth1_macvtap: entered promiscuous mode [ 117.771165][ T7722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.779409][ T7722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.785460][ T7534] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.788698][ T7534] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.797341][ T7534] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.800834][ T7534] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.848785][ T7532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.852239][ T7532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.872242][ T7532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.876650][ T7532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.047313][ T63] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 118.117065][ T63] Bluetooth: hci0: command tx timeout [ 118.205553][ T7842] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 118.207307][ T60] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 118.207792][ T7842] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 118.208294][ T7842] vhci_hcd vhci_hcd.0: Device attached [ 118.332007][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 118.378620][ T60] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.382794][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 118.388206][ T60] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.391054][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.395640][ T60] usb 5-1: config 0 descriptor?? [ 118.802211][ T7828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.864120][ T6057] usb 46-1: SetAddress Request (2) to port 0 [ 118.865550][ T7834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.935040][ T6057] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 119.085517][ T7834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.089508][ T7834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.097599][ T7834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.100848][ T7834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.190320][ T7844] vhci_hcd: connection reset by peer [ 119.194653][ T1175] vhci_hcd: stop threads [ 119.196292][ T1175] vhci_hcd: release socket [ 119.198262][ T1175] vhci_hcd: disconnect device [ 119.386703][ T60] usb 5-1: string descriptor 0 read error: -71 [ 119.397500][ T60] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 119.402832][ T60] usb 5-1: USB disconnect, device number 6 [ 119.954763][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 119.958140][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.469'. [ 119.969870][ T7869] binder_alloc: binder_alloc_mmap_handler: 7867 80ffd000-80ffe000 already mapped failed -16 [ 120.197238][ T63] Bluetooth: hci0: command tx timeout [ 121.641571][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.477'. [ 122.277185][ T63] Bluetooth: hci0: command tx timeout [ 123.789525][ T7946] rdma_rxe: rxe_newlink: failed to add syz_tun [ 123.924342][ T7948] sch_fq: defrate 53322 ignored. [ 124.007601][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.493'. [ 124.053693][ T6057] usb 46-1: device descriptor read/8, error -110 [ 124.064652][ T7946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.070509][ T7946] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.187835][ T7946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.191086][ T7946] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.278815][ T7946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.282286][ T7946] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.387418][ T7946] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.390902][ T7946] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.443494][ T6057] usb usb46-port1: attempt power cycle [ 124.507130][ T1175] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.510388][ T1175] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.518136][ T7538] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.521285][ T7538] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.529246][ T7538] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.532498][ T7538] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.541536][ T7538] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.544975][ T7538] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.568307][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 124.766485][ T7974] netlink: 'syz.0.498': attribute type 1 has an invalid length. [ 124.792695][ T7974] bond1: (slave gretap1): making interface the new active one [ 124.795548][ T7974] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 125.017513][ T6057] usb usb46-port1: unable to enumerate USB device [ 125.027535][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 125.055744][ T7984] wg2: entered promiscuous mode [ 125.057509][ T7984] wg2: entered allmulticast mode [ 125.071451][ T10] IPVS: starting estimator thread 0... [ 125.076752][ T7987] tipc: Started in network mode [ 125.078756][ T7987] tipc: Node identity ac1414aa, cluster identity 4711 [ 125.082852][ T7987] net_ratelimit: 46 callbacks suppressed [ 125.082861][ T7987] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 125.089072][ T7987] tipc: Enabled bearer , priority 10 [ 125.167154][ T7988] IPVS: using max 28 ests per chain, 67200 per kthread [ 125.218486][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 125.356987][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 125.497269][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 125.647230][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 125.796970][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 125.815070][ T8006] batadv_slave_1: entered promiscuous mode [ 125.936984][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 125.951549][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.507'. [ 125.956220][ T8010] netlink: 16 bytes leftover after parsing attributes in process `syz.4.507'. [ 125.968716][ T8003] batadv_slave_1: left promiscuous mode [ 126.045498][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'. [ 126.050802][ T8017] netlink: 108 bytes leftover after parsing attributes in process `syz.4.509'. [ 126.054653][ T8017] netlink: 108 bytes leftover after parsing attributes in process `syz.4.509'. [ 126.058637][ T8017] netlink: 108 bytes leftover after parsing attributes in process `syz.4.509'. [ 126.068356][ T8020] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 126.074265][ T8020] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 126.078493][ T10] tipc: Node number set to 2886997162 [ 126.084630][ T8018] netlink: 'syz.4.509': attribute type 3 has an invalid length. [ 126.162793][ T8023] mkiss: ax0: crc mode is auto. [ 126.217077][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 126.279410][ T8034] random: crng reseeded on system resumption [ 126.486963][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 126.998637][ T29] hid-generic 0000:0000:0004.0006: unknown main item tag 0x7 [ 127.002541][ T29] hid-generic 0000:0000:0004.0006: ignoring exceeding usage max [ 127.005554][ T29] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 127.008045][ T29] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 127.010776][ T29] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 127.014133][ T29] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 127.017155][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 127.020502][ T29] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 127.022876][ T29] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 127.025235][ T29] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 127.030252][ T29] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 127.032979][ T29] hid-generic 0000:0000:0004.0006: unknown main item tag 0x0 [ 127.043123][ T29] hid-generic 0000:0000:0004.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 127.100164][ T8053] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input13 [ 127.271601][ T8057] netlink: 'syz.1.521': attribute type 4 has an invalid length. [ 127.274892][ T8057] __nla_validate_parse: 3 callbacks suppressed [ 127.274908][ T8057] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.521'. [ 127.492394][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 127.495768][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 127.512100][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 128.707269][ T5337] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 128.911426][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.532'. [ 128.918815][ T8099] comedi comedi3: c6xdigio: I/O port conflict (0x4,3) [ 128.921831][ T8099] ------------[ cut here ]------------ [ 128.923992][ T8099] Unexpected driver unregister! [ 128.926677][ T8099] WARNING: CPU: 0 PID: 8099 at drivers/base/driver.c:273 driver_unregister+0x90/0xb0 [ 128.929749][ T8099] Modules linked in: [ 128.931721][ T8099] CPU: 0 UID: 0 PID: 8099 Comm: syz.3.532 Not tainted syzkaller #0 PREEMPT(full) [ 128.936976][ T8099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 128.940438][ T8099] RIP: 0010:driver_unregister+0x90/0xb0 [ 128.942248][ T8099] Code: 48 89 ef e8 82 13 4c fc 48 89 df e8 3a 93 ff ff 5b 5d e9 73 99 a6 fb e8 6e 99 a6 fb 90 48 c7 c7 00 8b 42 8c e8 c1 8f 65 fb 90 <0f> 0b 90 90 5b 5d e9 55 99 a6 fb e8 00 fc 0b fc eb 94 e8 f9 fb 0b [ 128.948442][ T8099] RSP: 0018:ffffc900075cf770 EFLAGS: 00010282 [ 128.950513][ T8099] RAX: 0000000000000000 RBX: ffffffff901947a0 RCX: ffffc90027e09000 [ 128.953091][ T8099] RDX: 0000000000080000 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 128.955733][ T8099] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 128.958431][ T8099] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff901946e0 [ 128.961046][ T8099] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880245e4000 [ 128.963724][ T8099] FS: 0000000000000000(0000) GS:ffff8880974c0000(0063) knlGS:00000000f543db40 [ 128.966668][ T8099] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 128.969028][ T8099] CR2: 0000000080006680 CR3: 000000005b2d8000 CR4: 0000000000352ef0 [ 128.971709][ T8099] Call Trace: [ 128.972848][ T8099] [ 128.973862][ T8099] comedi_device_detach_locked+0x12c/0xa50 [ 128.975898][ T8099] comedi_device_detach+0x67/0xb0 [ 128.977692][ T8099] comedi_device_attach+0x43d/0x900 [ 128.979423][ T8099] do_devconfig_ioctl+0x1b1/0x710 [ 128.981126][ T8099] ? __mutex_lock+0x1c5/0x1060 [ 128.982720][ T8099] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 128.984542][ T8099] ? kasan_save_stack+0x42/0x60 [ 128.986198][ T8099] ? kasan_save_stack+0x33/0x60 [ 128.987982][ T8099] ? kasan_save_track+0x14/0x30 [ 128.989769][ T8099] ? kasan_save_free_info+0x3b/0x60 [ 128.992002][ T8099] ? __kasan_slab_free+0x60/0x70 [ 128.994222][ T8099] ? kfree+0x2b4/0x4d0 [ 128.995819][ T8099] ? tomoyo_path_number_perm+0x470/0x580 [ 128.998019][ T8099] comedi_unlocked_ioctl+0x165d/0x2f00 [ 129.000559][ T8099] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 129.003034][ T8099] ? kasan_quarantine_put+0x10a/0x240 [ 129.005371][ T8099] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.007900][ T8099] ? find_held_lock+0x2b/0x80 [ 129.010128][ T8099] ? tomoyo_path_number_perm+0x295/0x580 [ 129.012597][ T8099] ? tomoyo_path_number_perm+0x18d/0x580 [ 129.015070][ T8099] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 129.017941][ T8099] comedi_compat_ioctl+0x1d0/0x990 [ 129.020214][ T8099] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 129.022665][ T8099] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 129.025344][ T8099] ? do_vfs_ioctl+0x128/0x14f0 [ 129.027643][ T8099] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 129.029663][ T8099] ? find_held_lock+0x2b/0x80 [ 129.031423][ T8099] ? hook_file_ioctl_common+0x145/0x410 [ 129.033895][ T8099] ? __fget_files+0x20e/0x3c0 [ 129.036002][ T8099] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 129.038582][ T8099] __ia32_compat_sys_ioctl+0x23f/0x370 [ 129.041031][ T8099] __do_fast_syscall_32+0x7c/0x3a0 [ 129.043440][ T8099] do_fast_syscall_32+0x32/0x80 [ 129.045622][ T8099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 129.048497][ T8099] RIP: 0023:0xf706e579 [ 129.050324][ T8099] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 129.058399][ T8099] RSP: 002b:00000000f543d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 129.062045][ T8099] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000040946400 [ 129.065213][ T8099] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.068113][ T8099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.070681][ T8099] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 129.073206][ T8099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.075881][ T8099] [ 129.077087][ T8099] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 129.079751][ T8099] CPU: 0 UID: 0 PID: 8099 Comm: syz.3.532 Not tainted syzkaller #0 PREEMPT(full) [ 129.083374][ T8099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.086930][ T8099] Call Trace: [ 129.088016][ T8099] [ 129.088961][ T8099] dump_stack_lvl+0x3d/0x1f0 [ 129.090440][ T8099] vpanic+0x6e8/0x7a0 [ 129.091730][ T8099] ? __pfx_vpanic+0x10/0x10 [ 129.093168][ T8099] ? driver_unregister+0x90/0xb0 [ 129.094735][ T8099] panic+0xca/0xd0 [ 129.096051][ T8099] ? __pfx_panic+0x10/0x10 [ 129.098013][ T8099] check_panic_on_warn+0xab/0xb0 [ 129.099868][ T8099] __warn+0xf6/0x3c0 [ 129.101113][ T8099] ? preempt_schedule_notrace+0x62/0xe0 [ 129.102869][ T8099] ? driver_unregister+0x90/0xb0 [ 129.104457][ T8099] report_bug+0x3c3/0x580 [ 129.105862][ T8099] ? driver_unregister+0x90/0xb0 [ 129.107454][ T8099] handle_bug+0x184/0x210 [ 129.108836][ T8099] exc_invalid_op+0x17/0x50 [ 129.110411][ T8099] asm_exc_invalid_op+0x1a/0x20 [ 129.112137][ T8099] RIP: 0010:driver_unregister+0x90/0xb0 [ 129.113921][ T8099] Code: 48 89 ef e8 82 13 4c fc 48 89 df e8 3a 93 ff ff 5b 5d e9 73 99 a6 fb e8 6e 99 a6 fb 90 48 c7 c7 00 8b 42 8c e8 c1 8f 65 fb 90 <0f> 0b 90 90 5b 5d e9 55 99 a6 fb e8 00 fc 0b fc eb 94 e8 f9 fb 0b [ 129.119947][ T8099] RSP: 0018:ffffc900075cf770 EFLAGS: 00010282 [ 129.121857][ T8099] RAX: 0000000000000000 RBX: ffffffff901947a0 RCX: ffffc90027e09000 [ 129.124391][ T8099] RDX: 0000000000080000 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 129.127246][ T8099] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 129.130309][ T8099] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff901946e0 [ 129.133213][ T8099] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880245e4000 [ 129.136385][ T8099] ? __warn_printk+0x1a5/0x350 [ 129.137913][ T8099] comedi_device_detach_locked+0x12c/0xa50 [ 129.139816][ T8099] comedi_device_detach+0x67/0xb0 [ 129.141429][ T8099] comedi_device_attach+0x43d/0x900 [ 129.143121][ T8099] do_devconfig_ioctl+0x1b1/0x710 [ 129.144749][ T8099] ? __mutex_lock+0x1c5/0x1060 [ 129.146494][ T8099] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 129.148803][ T8099] ? kasan_save_stack+0x42/0x60 [ 129.150878][ T8099] ? kasan_save_stack+0x33/0x60 [ 129.152951][ T8099] ? kasan_save_track+0x14/0x30 [ 129.154917][ T8099] ? kasan_save_free_info+0x3b/0x60 [ 129.156686][ T8099] ? __kasan_slab_free+0x60/0x70 [ 129.158264][ T8099] ? kfree+0x2b4/0x4d0 [ 129.159728][ T8099] ? tomoyo_path_number_perm+0x470/0x580 [ 129.162078][ T8099] comedi_unlocked_ioctl+0x165d/0x2f00 [ 129.164422][ T8099] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 129.166456][ T8099] ? kasan_quarantine_put+0x10a/0x240 [ 129.168688][ T8099] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.170886][ T8099] ? find_held_lock+0x2b/0x80 [ 129.172861][ T8099] ? tomoyo_path_number_perm+0x295/0x580 [ 129.175180][ T8099] ? tomoyo_path_number_perm+0x18d/0x580 [ 129.177187][ T8099] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 129.179095][ T8099] comedi_compat_ioctl+0x1d0/0x990 [ 129.180748][ T8099] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 129.182502][ T8099] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 129.184390][ T8099] ? do_vfs_ioctl+0x128/0x14f0 [ 129.185950][ T8099] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 129.187594][ T8099] ? find_held_lock+0x2b/0x80 [ 129.189084][ T8099] ? hook_file_ioctl_common+0x145/0x410 [ 129.190841][ T8099] ? __fget_files+0x20e/0x3c0 [ 129.192348][ T8099] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 129.194131][ T8099] __ia32_compat_sys_ioctl+0x23f/0x370 [ 129.195891][ T8099] __do_fast_syscall_32+0x7c/0x3a0 [ 129.197521][ T8099] do_fast_syscall_32+0x32/0x80 [ 129.199065][ T8099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 129.201068][ T8099] RIP: 0023:0xf706e579 [ 129.202357][ T8099] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 129.209623][ T8099] RSP: 002b:00000000f543d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 129.213113][ T8099] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000040946400 [ 129.216409][ T8099] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.219708][ T8099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.222953][ T8099] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 129.226256][ T8099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.229547][ T8099] [ 129.231653][ T8099] Kernel Offset: disabled [ 129.233469][ T8099] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:35:11 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff856170b5 RDI=ffffffff9b0fc700 RBP=ffffffff9b0fc6c0 RSP=ffffc900075cf0c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffffffff9b0fc6c0 R15=ffffffff9b0fc980 RIP=ffffffff856170df RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080006680 CR3=000000005b2d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000004df561 RBX=0000000000000001 RCX=ffffffff8b90dbf9 RDX=0000000000000000 RSI=ffffffff8de4d2e1 RDI=ffffffff8c162e00 RBP=ffffed1003bda488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801ded2440 R14=ffffffff90ab8890 R15=0000000000000000 RIP=ffffffff8b90c75f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c0000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080034000 CR3=000000007524a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff82128e55 RBX=ffffc900032676d8 RCX=ffffc9000326762c RDX=1ffff9200064cee4 RSI=ffffffff8de27e4d RDI=ffffffff82128e55 RBP=ffffc90003267768 RSP=ffffc900032676d8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000002 R11=0000000000012a90 R12=ffffffff81a676b0 R13=ffffc90003267798 R14=0000000000000000 R15=ffff888027812440 RIP=ffffffff8161b3d6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080200000 CR3=0000000068308000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=0000000000000003 RCX=ffffffff81886431 RDX=fffffbfff2157113 RSI=0000000000000008 RDI=ffffffff90ab8890 RBP=0000000000000008 RSP=ffffc900033c7398 R8 =0000000000000000 R9 =fffffbfff2157112 R10=ffffffff90ab8897 R11=0000000000000001 R12=1ffff92000678e79 R13=0000000000000003 R14=0000000000000002 R15=ffffc900033c73e8 RIP=ffffffff81a04c65 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977c0000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000801e7018 CR3=0000000068308000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000