last executing test programs: 41.854015169s ago: executing program 2 (id=286): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0xcd}, {0x0, 0x4, 0x1, 0x0, 0x100000, 0x5}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x20004, 0x1, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e00)=ANY=[@ANYBLOB="100000001d0001000400000000000000"], 0x10}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_access\x00') lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00') close_range(r3, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 41.850064979s ago: executing program 2 (id=289): openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x21, 0x2, 0xa) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r5, 0x0, 0x42, 0x80, 0x0, 0x0) getsockopt(r5, 0x200000000114, 0x2715, 0x0, 0x0) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)=""/105, 0x69}, {&(0x7f00000001c0)=""/171, 0xab}, {&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f0000000280)=""/169, 0xa9}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000440)}], 0x6, &(0x7f00000004c0)=""/43, 0x2b}, 0x60) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x103100, 0x0) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000540)={0x24000, 0x0, 0xc}, 0x18) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r6, 0x4068aea3, &(0x7f0000000580)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000700"], 0x48) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x80, 0x0}, 0x40) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 40.899645478s ago: executing program 2 (id=291): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1}, 0x6ca}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40010000, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="c75ee004cd3c2c0b5a3c3aefa840ea64b162396cddb572d4a25de3132257a63a42f08709ab5cec3943b7afa9f0b20d806ed001b890380f3835e617c011", 0x3d}], 0x1}}], 0x1, 0x41) socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 39.395545688s ago: executing program 2 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0xf0ffffff) 39.310313363s ago: executing program 2 (id=296): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0xcd}, {0x0, 0x4, 0x1, 0x0, 0x100000, 0x5}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x20004, 0x1, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e00)=ANY=[@ANYBLOB="100000001d0001000400000000000000"], 0x10}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_access\x00') lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00') close_range(r3, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 39.040507267s ago: executing program 2 (id=298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)=@newqdisc={0xf4, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc4, 0x2, {{0x6, 0x5, 0x400, 0x22195485, 0xff, 0x8}, [@TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x352, 0xfffffff9}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x39, 0x995, 0x9, 0x80000001, 0x484b, 0xa158a92}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x85a, 0x2, 0x7, 0x8, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x9c0, 0x2, 0x6, 0x200020}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfc, 0x9, 0x6, 0x0, 0x9}}]}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xc0000000, 0x10001}}]}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 38.978065574s ago: executing program 32 (id=298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)=@newqdisc={0xf4, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc4, 0x2, {{0x6, 0x5, 0x400, 0x22195485, 0xff, 0x8}, [@TCA_NETEM_CORR={0x10, 0x1, {0x0, 0x352, 0xfffffff9}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x39, 0x995, 0x9, 0x80000001, 0x484b, 0xa158a92}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_LOSS={0x4c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x85a, 0x2, 0x7, 0x8, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x9c0, 0x2, 0x6, 0x200020}}, @NETEM_LOSS_GI={0x18, 0x1, {0xfc, 0x9, 0x6, 0x0, 0x9}}]}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xc0000000, 0x10001}}]}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 26.568581887s ago: executing program 3 (id=361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source', &(0x7f00000003c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&\xbf\x97\b\xb3\xd6\xba6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\rD\xdf\xd6\xb94o\xac\x9b\x89k\r}\xf0\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\fW=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x14\xc7\b\x00\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xccjH\x02\xe8{{\xb1\x91\xc0\x904\xb5s\x0e\xc7tS<1\x9e\xea\x18\xf5S\x02\x12hw=\xbd;\xd8\xf3FR\xe7)\xc3\xe08\x1fv\xed\v\xba\x03I!\x044j\xb3J\x05A\xc9@\xc3\xae\xaa\xb2/<\xbc\r\x90\xb0\x13\x98\x96\xc8 \'\fz\xfd\xa2^\xc9>\xb9-\xa0\xc3\x00\x90\x7fp,\xe9e\x01\x91\xc7\xb4n\xac\xa4\x89\x89jX\x8cp\xf0\x16}\x9e\xe87\xee\xbe\x9b;\n\xef\xaf\xc7\xbcp\xd4k\x9f\xc8\x8b~~\x191e\xdf|\xb1Di\x03^\xb8\bPL\xbd\x19\xf0\xae\xaa\x88\xe4\xf4v\xeb#o\xe4\x93\x85\xa0\xdb\xa8\xab\xf2\xee\xa1\xd2\x85\xbf\xfe\xb3\x85\xd2\xf5o\xa5\xa7:\x7f\xf0\xaf\x92.\xc7\xf2f\x14\x99\"T1b\x03\xb2\x87\x94', 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0xe, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x42, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) 26.397336939s ago: executing program 3 (id=362): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) userfaultfd(0x801) socket$alg(0x26, 0x5, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000140)="240000005a001f001007f4d655c63589ce9e04020800038005000000ffc8bbb86ec81ffd", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r4, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r4, @ANYRES32=r3, @ANYRESHEX=r4, @ANYRES8, @ANYRESHEX=r6, @ANYRES8, @ANYRESOCT=r2, @ANYRES16=r2, @ANYRESOCT], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 26.373693585s ago: executing program 3 (id=364): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x86}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x16) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='fuseblk\x00', 0x0) socket(0x25, 0x4, 0x0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0400000000000000d602000000000000ff7f000000000000fd0a0000000000000a00000000000c0080000040000000000000008004000000a601f500400000000800000000000000"]) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) (rerun: 64) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe) (async) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x200000000000000) (async) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x7920, 0x400, 0x1, 0xbfdffffc}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) write(r8, &(0x7f00000001c0)="ffc25308e124e8", 0x7) (async, rerun: 32) io_uring_enter(r8, 0x47f6, 0x1328, 0x0, 0x0, 0x0) (async, rerun: 32) listen(0xffffffffffffffff, 0xfffffff7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) openat$pfkey(0xffffff9c, 0x0, 0x14000, 0x0) unshare(0x6e060000) 26.149871476s ago: executing program 3 (id=366): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x2f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) tgkill(r1, r3, 0x32) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r1, &(0x7f0000000000), 0x4001) r4 = syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/uts\x00') r5 = memfd_create(&(0x7f0000000d80)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x0) r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000880)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f0000000900)=0x10) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000100)) sendfile(r8, r7, &(0x7f00000000c0)=0x58, 0x5) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000440)={0xfffffc01, 0x1, 0x2, 0x2da1, 0x1, "cc9ab04f367a3b8203050fb9ff02838be3624d"}) add_key$user(&(0x7f0000000140), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000340)="d1a141b34faafeaffd7e4cbefac6749e4b7a49c59c4442c6a7a5119cf4bae5b790e1f359bbe08f44e821f9d7e1abb2682ca8562ccd63eb30c72a889f7a63e882c349871d1e6f67fb52a6152ca813cb6678db814868c8886cd7c8914b6d83a12055ffe9104952", 0x66, r6) write(r5, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) listen(r2, 0x75) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000280)={0x0, r4, 'id0\x00'}) readlinkat(r2, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) 25.257836148s ago: executing program 3 (id=370): r0 = socket(0x25, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x1, 0x24, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x82}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) io_setup(0x81, &(0x7f0000001440)) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev}, 0x2}}, 0x2e) prctl$PR_SET_MM_MAP(0x4a, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$PPPIOCGL2TPSTATS(r10, 0x80487436, &(0x7f0000000180)="cb6f9d") 23.758717495s ago: executing program 3 (id=374): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x20, 0x140d, 0x1, 0x70bd28, 0x4, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT=r1, @ANYBLOB="010027bd70000000000012000000080007005ee600000c00018008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\t'], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000280)) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0xfffffffffffffd69) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0xb}) 10.25058463s ago: executing program 1 (id=439): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x20202, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0xa1c0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xdc) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x20000004) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@redirect_dir_follow}, {@nfs_export_on}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000180)='./file1\x00') chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x80, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x50) r3 = socket$inet6(0xa, 0x800, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 9.175984127s ago: executing program 1 (id=444): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = fsopen(&(0x7f0000000000)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="efe53790cdaa74b5cd6e8c80af806d9021edbd809380031c8d81612b2cadc64bc7f7dcd213d92dc7bd812d414c92b35c1ac9b2a4f8486da998805924a723d861f6c1ce04a932a04839ca20cdac472db171c7bfc0d8204e00d331b88e53807f4c524620f06b2f8ff395b31f51", 0x6c}, {&(0x7f00000003c0)="99e5ea23e7b31e49f33e642e6e99523e22f4eedd1ef328beae8ccc2cb321d22c686695e84916", 0x26}, {&(0x7f0000000400)="021f467b28c7b316c603e3447bbb58b81ef17cad0104ff15f0d72144a13affefe276d67f76f7c203e5dc96d2294f909f4297557cd61b472fefaed6205a15", 0x3e}, {&(0x7f0000000440)="7da4e5a65d422fa041960c38a9a20247aab22afcce9d7fab282f35d22bec46e22ab68026110330d856cfd03343ed496e7ff0c16b7ab97aeacf12defdc7cd2b7f585c07108efda0c6c5cfc198e2398a5ae9b1e66d3fb6cc61f95c64cc734227eedffccc461323de4d76e38b26b940f33a9e8706789847e15a325d162bb46f8b207e2f33384aec", 0x86}, {&(0x7f0000000500)="72202f121c1e04975957824a62c6243b58503d95d158d7c7b61fc925758f69e5058cd785410fcc118dc7bad1d50395cc49716424ed326a65aa2dc0f55126cb2042b5a4bc354b6d2ce79dfcb0878f718955b2a8cf1d503c5b28a31f8dc65d05676a5103b769205065ad5e09dae1b1271d9b075f6e2b5003f08a1226e01a01ed5f0d1ff50ad202d630e9785fbcef69e45d13ed13f34d939293b2d401f849f87732f4e6", 0xa2}, {&(0x7f00000005c0)="31663b4436a6f78ab14a50bbad04b9833b4ed5e13cb399bde1d846df703b8444b1648799a2efd6f9de93211ee27b239d", 0x30}], 0x6, 0x0, 0x0, 0x84}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000640)="b16f2e71adbbe39e7d2f096051e6f9982e29264718f8930437c691c22ac0a0693cfaacffdeb4a6db0df1022205a0", 0x2e}], 0x1, &(0x7f0000002d40)=ANY=[@ANYBLOB="000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100000001000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100000001000000", @ANYRES32=r4, @ANYBLOB="000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0], 0x0, 0x40}}, {{&(0x7f0000002e40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003280)=[{&(0x7f0000002ec0)="e6c6ebfbd61ceaefd76c69b6969093285e8536769411e541ffb2076d21064179601faefc7a9018fd8a37e114eeb592bdf112a3f3c3506c6bc63dc92c81f0cbb78588a670d845c097843cf3f683e2a8290c4da6b2eb12da51bcf5d63352fd7926443fdba5572ebe2eb7069a68db35e985a4bbe08973c890f7019b3bef738a618c32895386b1b9e9cc00e84e67c67f06dac1bf062ba45848b00aca296b7f16cfd2ba232022293818213c98679e7a4803a681ed7af863731fa9", 0xb8}, {&(0x7f0000002f80)="15637192e0c1730108214a1a8a1ece4c9bb0237dc9cea8b5d5e7882796c42bee1562fa74dd59414e7b2c16238e5612f36aedf6e81fc3fdd10fe6561d4a54e6b82f17bfe6fe03e06992e6ef4121daf5abd906db57ec777f5e88c5730227799e343f34cadf8c4553e9ade5bd9d5ee464be543c82e92a7b6d11d46e7afe1a0dc3bbcd19f8f7a6cc32aeecf1ebfa4622f55f3270e49732e4717e03bee8fa3ef8fea8256cf1619eb4a74de499fa61399ff0bd84b9b24d16c2d33c2dd60c85d1b37f9275fd134b6eebdb4e53aeb978d288563d149189a4112d74cc7578c325122ae151a2ffb4970daa2174da6acb1480e81c3d337fed746439e654", 0xf8}, {&(0x7f0000000900)="db8b80e07543c6789806e8a9cebadd9dbb10eab44dc1633d1615734d6cd887f5fb07b7bcc341a6fd4d071a1c63c64d4944fb0fec606d8255ca820b3abbfe96c01bd07893bdb01950417a432f64b62b0b0a8ccf814ff3f1f211d0f5ab5f87f3da4af9ba266a98138a19d1c2105a925c33882f20d03033ea9359f70acc6f1ca2669eeb0af3d2e7369845fbc8e0b3f2f99e928c8098352114e72e6b9c23a7ac46405af7672079e4fde99d7df8cf6c5420a8d8d2ab61b53fb6ff19bf24eb1ee1f57e3b60eba65dde8bfb2cad3670d0b6bdef0a0f089494", 0xd5}, {&(0x7f0000003180)="85a7dda45a50d35fed441dd176bf508f30f914b8a4148bab6bc02193911b485178b0fe3cc1c83342836e95bcac26a4c14bc4c9489ec6d31d9171c1fcef052389c0acd80fc72047081f96fa4fc63958df83522885a62c5ce537aee15868e03237f81df6c268bd27c82a4ab50a49c897b36583d2d344f6b480d20d6468c806c21bbb9154e87a78e6411a83c94c5a0ee5922d5e70b23958479b33c6f4f5fdfd5ebfde1fb708f99af09a4917e9e77339c84ce1fae6324b05b68e9b876235ec12f980bf55d615fc565831c823cf5171dfa0ea0a968c5e12", 0xd5}], 0x4, &(0x7f00000032c0)=[@cred={{0x18, 0x1, 0x2, {r2}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48, 0x800}}, {{&(0x7f0000003340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003680)=[{&(0x7f00000033c0)="36bf9ae37536df8d4d849714e6541910b764a4683fb2b95a9fca9c1c0f654cc93c259458d86afa8c76f5813c5680ad9b605d266686cc56af510ebb136ee236d12443adb6d5fa616b939c83f14a1557e0ab45f467cd4fd5494b26f589c7fec9f4dbee14b04ba63a1f0bac59632e8c2108f23025da52d15790607659f8fb98ab58e0031b5e11e69c32a9893c7025d4cb5f24a90059f7ce1e625aca7b03c15a9999c26e494add177f62c7c20594938284d11789f3afb8d465c7aff7de3aa396d786ee365411c765a70cbb754839f42ae0923468", 0xd2}, {&(0x7f00000034c0)="bc05f5d51fc768ff0ce78e9f1c9476f3436e5a497484f0ea2c66f8fd607e9b617fc1c11022eb8aace316c172d24089aabaf24b9183b9beab0f34f62ce49bc3f6c49db9514cf49187557dcf9e3e429674e72fe8d79d1aa836f709ef5bf18956ea1bd25c48ef6f132c05ac96652ba684a7749c7ffd257b09cb6686381f84f09cf9d052980e23bb7f8ae317ab202638ea990475e6c127e3fdd9390499ecc4527c6fb6d1b20f56f37ce9776ad5a3542ec71b52989f4b14275aba39768c5463aa906ffe0d41e27f", 0xc5}, {&(0x7f00000035c0)="c3c33031c45603969c90917959a0a4ecf375335165def24990edbc4c83c773ec9068f3409ebbe5d34865b07ca7cb050f7945b33fa402717fbd22008b26776c206d", 0x41}, {&(0x7f0000003640)="35501d", 0x3}], 0x4, &(0x7f00000037c0)=[@rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x18, 0x1, 0x2, {r3}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}], 0x68, 0xc001}}, {{&(0x7f0000003840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003900)=[{&(0x7f00000038c0)="9b6cbda1", 0x4}], 0x1, &(0x7f0000003980)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x5, 0x20000004) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0x4, 0x1, 0x0, "6cfef8b4b9fdcfc8bf98040c2599e8a8e9f887975c3cc41e122a623eb7c37334", 0x34343459}) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r10, 0x400442c8, &(0x7f0000000100)={r8, 0x0, 0x4}) 8.618421997s ago: executing program 33 (id=374): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x20, 0x140d, 0x1, 0x70bd28, 0x4, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESOCT=r1, @ANYBLOB="010027bd70000000000012000000080007005ee600000c00018008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\t'], 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000280)) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0xfffffffffffffd69) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0xb}) 7.630324451s ago: executing program 1 (id=450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80800) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x4000000}, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) chdir(0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='\f\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r8}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) 6.909513802s ago: executing program 0 (id=452): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c40)=[{{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000600)="4f83a43f2ab6148eea60f6708dfe4d1deb4766628961a1b2c0a157f1bb230e9eb91fadab354cbc35da77dd197380517448f5dd3fa045a747e57a8cd1e4663642962cc70a516340921575293bb9eacdfaea2145555b38cd0d0af7459d7fe69ca11794ad1389432793c264c4d9593e4aa67635a09540a9f15a7b3a332392e9450d075553641f9011cf3813f6d20e2a6b16f2d13acf761786df065147682ee033e588d9d87b180d1c4b0122c61b", 0xac}, {&(0x7f00000006c0)="0fb381acc8dcc5f9d85c84cd050091e57fdde3b0d5c078255246355a7f1e6fb3d2bffd276ecc8424182e59ed3b1d4ed29fc956efd21f2f799184b81341f3462acce9ea1699f60cda342b949daa", 0x4d}, {&(0x7f0000000740)="742c904e275fd970b1c10ec19b5cf957d0db836d29ee2d43af06c1f82e3128b77bbd95af41e9eee93540cb471546b8793f05a7cdf33dc659548b110c0a72263afab84525360ab5a48581a5db64cebf5c7f80337f19fc7a655d8ef1dc0634a81b61ce26f8e76c39b1577d2be6d024342ba1b52128b18a3a5c0d11dacbedaadf624f73a5fd41b606ed6244ba8584bccd1cda698f3089f8b916539b92789c39e644af07a7fdf23780f18f9f321fb8cb702406a5f7286a86ccf51340ab81d88a30077533cfed3ef5bb6d0fd02fd8af436edd3868bb9b2c", 0xd5}, {&(0x7f0000000840)="3211d780c04b860a2b558c40e253a78abc18832fd7aff55ed7b12fab0f00af18a247daa56d6b272c8d722d84392d46249d1b80fbbd08a5dc2e778d33e959d5639880887bc946dc7505d4bf0c35fa0a98751c6b1febf09822dfed4dbacf96402c7b1ea11fb2d33a6c1f4a2cdd0bdeb5d52d443d46974e5ef7a32d4c03bcd2eb204752abc92d31c76bac022473aad0110850bd85626a0582c607a9358881480eeb71f8d51da1f433d3e4c163cd5dfe466f3684eff43e6efc53ab4451", 0xbb}, {&(0x7f0000000900)="5e4dd3ddd08c6aebf30fb307309a82ed394b2cc9c4cd318607e12fd04cfd592b048dfc87e4d09e9e67113c9b520bb2adae5fb7780485da16d5d67daad4642de7e716e94a04526b98897be48dbb20babd99a9f34608aa8febb69dfdfd8f5bb7f9d986910d5fec5db8e3dae6b089abc31d1dfa1ac40ef5c5ddb937e00e1ff561fe271e8121e985", 0x86}, {&(0x7f0000000b00)="25ba122763f4617e27a9cddb3b4e884403e3d159e4256354f7d4926a3dddb54687f4fe1cc74c544f536d6e65cbec9cbe5005155706113773527f4b110b31c123d324347c746396429de256134625268997472f704e61d814c10f11b6b39392bcfd839c5977727031432b3c40eb635a6d72d98c8f560a24579bfa4891f96664a8f70bf06a87ef532be3ce78b9355a2948738fe6864a97fc5396da1da5cb02daa269b055c8336992dc5b0b286db5f5d3c909c75ec30396ec0abc709143f22fba79244923a7151b33d5495aa4cf880f38b563e474be441874d3ed4586bea4e4762f66a4a4fb829237eb6926c32d17", 0xed}, {&(0x7f0000000cc0)="e97fded9f3319012303ac645e780f5e42f6baffb5eea1c6c37efb0fa98c86a2c268d75ae53ebcf1cb139814e9c87d4936f5870123c38cced100f57c241edd2131e3824aa2cc7fb6df19b4813d23714c84bc3329a9134575b106dff47ce13d69e524ab16865ce38f9da1e6ad1dc8d019b8e6b073ca5486c7089dd7a31a2a42cb49cebd157280eb29cad61cd5cf2bf9ec68dbd05699a35bff985df388f2847c55c4c2558f42759da7473367942e6662195f475b45a311aa805a354607f10d185a0a913e5de4a7c777d4e54e0450faa28a6aecb2a2b2102dc5c40415f86", 0xdc}], 0x7, &(0x7f0000000c00)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0, r2]}}], 0x34, 0x4000000}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x6, 0xfffff417) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000068040903000000000000c09fa661f71f13decec077dc971700000a00000000dbb0390d626f93704cf8"], 0x24}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000500)={0x4, 0x0, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x5, 0x3e80000}) prctl$PR_SCHED_CORE(0x3e, 0x2, r8, 0x0, &(0x7f0000000540)) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r9}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000080)=ANY=[], 0x0}, 0xfffffffffffffece) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='mm_migrate_pages\x00', r10, 0x0, 0x40}, 0x18) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000100)) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x5, &(0x7f0000000540)=@raw=[@exit, @call={0x85, 0x0, 0x0, 0xab}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff}, @ldst={0x0, 0x0, 0x5, 0xb, 0x2, 0x6, 0x9e071ff72fde0e45}], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 4.579261237s ago: executing program 0 (id=454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0xc4, 0x3, 0xa, 0xc11969494e09e677, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x66}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x45, 0xc, "e78f3934b214193fe4daae02241b1b4214f03e3c20b12d2bfb2372311e7e16552afdc8473d15acfe2a40ef7b550b4ae0d0e8c36944526e945b8365955913680f12"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x158}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 4.478516835s ago: executing program 1 (id=455): mlockall(0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(r0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @vbi={0xfffffff2, 0x4, 0x5b3a, 0x3831354f, [0x2, 0x8], [0x2, 0x6], 0xbf2509255031d7fa}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0xb) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x18) r1 = socket$kcm(0xa, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={r1}) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000080)=0x4f, 0x4) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f000004ca80)=""/102384, 0x18ff0) ioperm(0x2, 0x7, 0x13) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001680)=""/102394, 0x18ffa}], 0x1, 0x0, 0x3) r4 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, 0x0, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)=ANY=[], 0x1f) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 4.326143244s ago: executing program 0 (id=456): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x2, 0x4945]}, 0x8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rt_sigprocmask(0x1, &(0x7f00000000c0)={[0x7, 0x10001]}, &(0x7f0000000100), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e"], 0x6c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='cpuset\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x28, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 3.210134153s ago: executing program 0 (id=460): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$setown(r1, 0x8, 0xffffffffffffffff) epoll_pwait(r1, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x1ff, &(0x7f00000000c0)={[0x9, 0x7]}, 0x8) socket(0x80000000000000a, 0x313e20d7a35df3b9, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 2.638266511s ago: executing program 1 (id=462): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x39, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x2000, 0x8000}}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = msgget(0x0, 0x30c) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') pwritev(r3, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0xc8040) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semget$private(0x0, 0x4, 0x120) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000002d0001002d9d7009fcdbdf2504002897"], 0x14}, 0x1, 0x700}, 0x8004) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r2, 0x0) fcntl$notify(r1, 0x402, 0x5) fcntl$notify(r1, 0x402, 0x848234f1c7d17d24) rt_sigsuspend(&(0x7f0000000080)={[0x10, 0x4]}, 0x8) 2.365111838s ago: executing program 5 (id=464): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x0, 0x0, 0x3, 0x4}, {0x6, 0xd, 0x7, 0x4}, {0x400, 0x9, 0x42}, {0x3, 0x9b, 0x2, 0x7f}, {0x3, 0x80, 0xc0, 0x3}, {0x4, 0x5, 0x2}]}, 0x8) r1 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000280)={0x0, 0x3, 0x3a0f, 0x0, 0x0, 0x0, 0xa}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x107, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0x50) ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000100)={0x8, 0xfffffffb}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfc, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) getuid() 2.326478814s ago: executing program 0 (id=466): syz_open_procfs(0x0, &(0x7f00000003c0)='net/tcp\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x88) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000200)=0xfff) poll(&(0x7f0000000440)=[{r1, 0x400}], 0x1, 0x101) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x10, 0x35}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000500000004000000000d000e0400000000000100000000"], 0x0, 0x2d}, 0x28) close(r0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109012000000006300e0ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffc84}, 0x48) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2240}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) setreuid(0xffffffffffffffff, 0xee00) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 2.046097968s ago: executing program 5 (id=468): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x2, 0x4945]}, 0x8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rt_sigprocmask(0x1, &(0x7f00000000c0)={[0x7, 0x10001]}, &(0x7f0000000100), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e"], 0x6c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='cpuset\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x10, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) io_uring_enter(r5, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 1.759698953s ago: executing program 4 (id=470): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x88) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getresgid(&(0x7f0000004d40), &(0x7f0000004d80), &(0x7f0000004dc0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000500000004000000000d000e0400000000000100000000"], 0x0, 0x2d}, 0x28) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109012000000006300e0ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffc84}, 0x48) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2240}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) setreuid(0xffffffffffffffff, 0xee00) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xd, {"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", 0x1000}}, 0x1006) 1.159803421s ago: executing program 0 (id=471): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x103) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x482, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045011, 0x0) openat$rtc(0xffffff9c, 0x0, 0x8103, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x0, @pix_mp={0x2, 0x5, 0x3831354f, 0x0, 0x5, [{0xfffffff0, 0x200}, {0xcbd, 0x10010000}, {0x10, 0x8}, {0x40000001, 0x4}, {0x9, 0xd1}, {0x2, 0x4}, {0x3, 0x9}, {0x1, 0x8}], 0x6, 0x8, 0x4, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$uinput(0xffffff9c, &(0x7f0000000380), 0x802, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) openat$nmem0(0xffffff9c, &(0x7f0000000040), 0x101040, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x4) madvise(&(0x7f000059a000/0x2000)=nil, 0x2000, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x4, 0x64f, 0x44, @mcast1, @empty, 0x8, 0x10, 0x81, 0xffffffff}}) r4 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x40100, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000080), 0x0, 0x40) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000280)="72161413c1274fc3166bd49932a70ed7f0c66400"/33, 0x23) 841.111444ms ago: executing program 4 (id=472): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) io_uring_setup(0x2cef, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 570.28605ms ago: executing program 4 (id=473): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x803, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x9) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="efe53790cdaa74b5cd6e8c80af806d9021edbd809380031c8d81612b2cadc64bc7f7dcd213d92dc7bd812d414c92b35c1ac9b2a4f8486da998805924a723d861f6c1ce04a932a04839ca20cdac472db171c7bfc0d8204e00d331b88e53807f4c524620f06b2f8ff395b31f51", 0x6c}, {&(0x7f00000003c0)="99e5ea23e7b31e49f33e642e6e99523e22f4eedd1ef328beae8ccc2cb321d22c686695e84916", 0x26}, {&(0x7f0000000400)="021f467b28c7b316c603e3447bbb58b81ef17cad0104ff15f0d72144a13affefe276d67f76f7c203e5dc96d2294f909f4297557cd61b472fefaed6205a15", 0x3e}, {&(0x7f0000000440)="7da4e5a65d422fa041960c38a9a20247aab22afcce9d7fab282f35d22bec46e22ab68026110330d856cfd03343ed496e7ff0c16b7ab97aeacf12defdc7cd2b7f585c07108efda0c6c5cfc198e2398a5ae9b1e66d3fb6cc61f95c64cc734227eedffccc461323de4d76e38b26b940f33a9e8706789847e15a325d162bb46f8b207e2f33384aec", 0x86}, {&(0x7f0000000500)="72202f121c1e04975957824a62c6243b58503d95d158d7c7b61fc925758f69e5058cd785410fcc118dc7bad1d50395cc49716424ed326a65aa2dc0f55126cb2042b5a4bc354b6d2ce79dfcb0878f718955b2a8cf1d503c5b28a31f8dc65d05676a5103b769205065ad5e09dae1b1271d9b075f6e2b5003f08a1226e01a01ed5f0d1ff50ad202d630e9785fbcef69e45d13ed13f34d939293b2d401f849f87732f4e6", 0xa2}, {&(0x7f00000005c0)="31663b4436a6f78ab14a50bbad04b9833b4ed5e13cb399bde1d846df703b8444b1648799a2efd6f9de93211ee27b239d", 0x30}], 0x6, 0x0, 0x0, 0x84}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000640)="b16f2e71adbbe39e7d2f096051e6f9982e29264718f8930437c691c22ac0a0693cfaacffdeb4a6db0df1022205a0", 0x2e}], 0x1, &(0x7f0000002d40)=ANY=[@ANYBLOB="000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100000001000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100000001000000", @ANYRES32=r4, @ANYBLOB="000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0], 0x0, 0x40}}, {{&(0x7f0000002e40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003280)=[{&(0x7f0000002ec0)="e6c6ebfbd61ceaefd76c69b6969093285e8536769411e541ffb2076d21064179601faefc7a9018fd8a37e114eeb592bdf112a3f3c3506c6bc63dc92c81f0cbb78588a670d845c097843cf3f683e2a8290c4da6b2eb12da51bcf5d63352fd7926443fdba5572ebe2eb7069a68db35e985a4bbe08973c890f7019b3bef738a618c32895386b1b9e9cc00e84e67c67f06dac1bf062ba45848b00aca296b7f16cfd2ba232022293818213c98679e7a4803a681ed7af863731fa9", 0xb8}, {&(0x7f0000002f80)="15637192e0c1730108214a1a8a1ece4c9bb0237dc9cea8b5d5e7882796c42bee1562fa74dd59414e7b2c16238e5612f36aedf6e81fc3fdd10fe6561d4a54e6b82f17bfe6fe03e06992e6ef4121daf5abd906db57ec777f5e88c5730227799e343f34cadf8c4553e9ade5bd9d5ee464be543c82e92a7b6d11d46e7afe1a0dc3bbcd19f8f7a6cc32aeecf1ebfa4622f55f3270e49732e4717e03bee8fa3ef8fea8256cf1619eb4a74de499fa61399ff0bd84b9b24d16c2d33c2dd60c85d1b37f9275fd134b6eebdb4e53aeb978d288563d149189a4112d74cc7578c325122ae151a2ffb4970daa2174da6acb1480e81c3d337fed746439e654", 0xf8}, {&(0x7f0000000900)="db8b80e07543c6789806e8a9cebadd9dbb10eab44dc1633d1615734d6cd887f5fb07b7bcc341a6fd4d071a1c63c64d4944fb0fec606d8255ca820b3abbfe96c01bd07893bdb01950417a432f64b62b0b0a8ccf814ff3f1f211d0f5ab5f87f3da4af9ba266a98138a19d1c2105a925c33882f20d03033ea9359f70acc6f1ca2669eeb0af3d2e7369845fbc8e0b3f2f99e928c8098352114e72e6b9c23a7ac46405af7672079e4fde99d7df8cf6c5420a8d8d2ab61b53fb6ff19bf24eb1ee1f57e3b60eba65dde8bfb2cad3670d0b6bdef0a0f089494802b8fd03c808fce11a41a253e0f52", 0xe4}, {&(0x7f0000003180)="85a7dda45a50d35fed441dd176bf508f30f914b8a4148bab6bc02193911b485178b0fe3cc1c83342836e95bcac26a4c14bc4c9489ec6d31d9171c1fcef052389c0acd80fc72047081f96fa4fc63958df83522885a62c5ce537aee15868e03237f81df6c268bd27c82a4ab50a49c897b36583d2d344f6b480d20d6468c806c21bbb9154e87a78e6411a83c94c5a0ee5922d5e70b23958479b33c6f4f5fdfd5ebfde1fb708f99af09a4917e9e77339c84ce1fae6324b05b68e9b876235ec12f980bf55d615fc565831c823cf5171dfa0ea0a968c5e12", 0xd5}], 0x4, &(0x7f00000032c0)=[@cred={{0x18, 0x1, 0x2, {r2}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48, 0x800}}, {{&(0x7f0000003340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003680)=[{&(0x7f00000033c0)="36bf9ae37536df8d4d849714e6541910b764a4683fb2b95a9fca9c1c0f654cc93c259458d86afa8c76f5813c5680ad9b605d266686cc56af510ebb136ee236d12443adb6d5fa616b939c83f14a1557e0ab45f467cd4fd5494b26f589c7fec9f4dbee14b04ba63a1f0bac59632e8c2108f23025da52d15790607659f8fb98ab58e0031b5e11e69c32a9893c7025d4cb5f24a90059f7ce1e625aca7b03c15a9999c26e494add177f62c7c20594938284d11789f3afb8d465c7aff7de3aa396d786ee365411c765a70cbb754839f42ae0923468", 0xd2}, {&(0x7f00000034c0)="bc05f5d51fc768ff0ce78e9f1c9476f3436e5a497484f0ea2c66f8fd607e9b617fc1c11022eb8aace316c172d24089aabaf24b9183b9beab0f34f62ce49bc3f6c49db9514cf49187557dcf9e3e429674e72fe8d79d1aa836f709ef5bf18956ea1bd25c48ef6f132c05ac96652ba684a7749c7ffd257b09cb6686381f84f09cf9d052980e23bb7f8ae317ab202638ea990475e6c127e3fdd9390499ecc4527c6fb6d1b20f56f37ce9776ad5a3542ec71b52989f4b14275aba39768c5463aa906ffe0d41e27f", 0xc5}, {&(0x7f00000035c0)="c3c33031c45603969c90917959a0a4ecf375335165def24990edbc4c83c773ec9068f3409ebbe5d34865b07ca7cb050f7945b33fa402717fbd22008b26776c206d", 0x41}, {&(0x7f0000003640)="35501d", 0x3}], 0x4, &(0x7f00000037c0)=[@rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x18, 0x1, 0x2, {r3}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}], 0x68, 0xc001}}, {{&(0x7f0000003840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003900)=[{&(0x7f00000038c0)="9b6cbda1", 0x4}], 0x1, &(0x7f0000003980)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x5, 0x20000004) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000080)={0x4, 0x1, 0x0, "6cfef8b4b9fdcfc8bf98040c2599e8a8e9f887975c3cc41e122a623eb7c37334", 0x34343459}) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r10, 0x400442c8, &(0x7f0000000100)={r8, 0x0, 0x4}) 430.232316ms ago: executing program 5 (id=474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0xc4, 0x3, 0xa, 0xc11969494e09e677, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x66}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x45, 0xc, "e78f3934b214193fe4daae02241b1b4214f03e3c20b12d2bfb2372311e7e16552afdc8473d15acfe2a40ef7b550b4ae0d0e8c36944526e945b8365955913680f12"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x158}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 357.536615ms ago: executing program 5 (id=475): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x6000000, 0xfffffffe, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000080) 239.927639ms ago: executing program 4 (id=476): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x5, 0x4, 0x80403, 0x8, 0x7fc}) syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000011000806030e89c606040009aaaaaaaaaa3d91a6569b"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc8010000180"], 0x30}, 0x1, 0x0, 0x0, 0xc001}, 0x2b0187ad7de13586) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f00000001c0)=0x8, 0x4) 170.357773ms ago: executing program 4 (id=477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="7b320e3125ef8754ae55b7effbad47e129057d25668d30a13c990d938d8c0196de50051bdb7d66d09d53711f194b76f22b0b2b26cefebf5cb44de7c556cf01dacc", 0x41, 0x3675abe1097e227c, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="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", 0x140, 0xc854, 0x0, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1, 0x0, 0x0, 0x40010000}, 0x142) 170.078393ms ago: executing program 5 (id=478): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19394320d2f74526, &(0x7f00000004c0)=0x6, 0x4) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000165ffff0180000008003950323030302e4c"], 0x15) (async) socket$key(0xf, 0x3, 0x2) (async) r3 = dup(r1) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='mm_migrate_pages\x00', r7, 0x0, 0xdf5}, 0x14) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000240)={0x10000, 0x0, [0x4, 0x0, 0xe6a, 0x2, 0x4, 0x9, 0x10e, 0x9b0e]}) setxattr(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)=@known='trusted.overlay.origin\x00', &(0x7f0000000740)='}\x00', 0x2, 0x1) (async) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0x0, 0x2, 0x3, 0xeffffdff, 0x0, [{0x3, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x7}, {0xfc, 0x4, 0x0, '\x00', 0x5}, {0x5, 0x1, 0xff, '\x00', 0x4}, {0x3, 0x0, 0x5, '\x00', 0x9}, {}, {0x0, 0xb, 0xbe}, {0x0, 0x6, 0x0, '\x00', 0xeb}, {0x0, 0x7, 0x3, '\x00', 0x7f}, {0x8, 0x6, 0xfe, '\x00', 0x42}, {0x0, 0x5}, {0x0, 0x50}, {0x4, 0x0, 0x4, '\x00', 0x3}, {0x1, 0x4e}, {0xfe, 0x2, 0x4, '\x00', 0x9}, {0x0, 0x5f}, {0x1, 0x3, 0x1, '\x00', 0x4}, {0xc, 0x0, 0x0, '\x00', 0xfd}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x0, 0x0, '\x00', 0x40}, {0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x70}, {0x1, 0x0, 0x0, '\x00', 0xe}, {0x50, 0x83, 0x10}]}}) (async) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3ddd3964edfc7e4310ec95cb3c530096b6137d8dd7985f23111028e1bd33b1bf2e7cdbc09ac92a27d3e40332b2072868ff7e061b2e4a129306e94d6733de64bdb7a458885ceaaaa2707df17341278560477372877518a512dce2b31eee11a1c82899df1b8ec48475c915acb45976b3c854b27f1940de6c79602ce35a3668b05f22e0623419577f466423827ee55251e2e079b212fa9db15c80a717662c40e73d14d8", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) (async) utime(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)={0x2, 0x1000}) 169.790235ms ago: executing program 4 (id=479): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000100)=@ipv6_newaddrlabel={0x30, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x20048000) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r4, 0x26, &(0x7f00000002c0)={0x0, 0x0, 0xff34}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2103, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x2b34, 0x108, 0x7, 0x428, r4, 0x8180, '\x00', 0x0, r4, 0x0, 0x3, 0x3, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r4, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540), &(0x7f0000000600)=[0x0], 0x0, 0x62, &(0x7f0000000980)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x4, &(0x7f0000000e00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', r8, @fallback=0x10, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0xb, 0x0, &(0x7f0000000a00)="00000000076f00001abd8c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r12}, 0x10) r13 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, r13, 0x1, 0x1, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0485510, &(0x7f0000000440)={0x3, 0x8, 0x9a0, 0xe, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$TCFLSH(r6, 0x400455c8, 0x1) syz_usb_connect(0x5, 0x24, 0x0, 0x0) close_range(r6, r6, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001f40)={r3, r2, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0xd74, &(0x7f0000001f80)={@local, @link_local, @void, {@mpls_mc={0x8848, {[], @llc={@snap={0xab, 0xaa, "9a", "d9d75e", 0x86dd, "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"}}}}}}, 0x0) 0s ago: executing program 5 (id=480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0, 0x0, 0xdf5}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1c0000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = gettid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) socket(0x8, 0x80002, 0x4) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x6}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0x2c, {}, {0xee01}, 0x5, 0x1}) syz_clone(0x2000211, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) keyctl$instantiate(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getrlimit(0x0, &(0x7f0000000080)) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:8901' (ED25519) to the list of known hosts. [ 46.829909][ T5957] cgroup: Unknown subsys name 'net' [ 46.960399][ T5957] cgroup: Unknown subsys name 'cpuset' [ 46.965694][ T5957] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 47.933730][ T5957] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.994519][ T5976] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.999690][ T5982] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.002674][ T5982] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.005754][ T5982] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.008097][ T5977] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.009420][ T5977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.012273][ T5982] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.014376][ T5977] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.016999][ T5982] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.019325][ T5977] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.021763][ T5982] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.023102][ T5983] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.024352][ T5983] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.024584][ T5977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.029033][ T5986] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.037546][ T63] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.042311][ T63] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.043439][ T5979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.044990][ T63] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.047189][ T5979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.350248][ T5980] chnl_net:caif_netlink_parms(): no params data found [ 52.396251][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 52.403685][ T5984] chnl_net:caif_netlink_parms(): no params data found [ 52.425904][ T5971] chnl_net:caif_netlink_parms(): no params data found [ 52.551721][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.555611][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.558636][ T5980] bridge_slave_0: entered allmulticast mode [ 52.562494][ T5980] bridge_slave_0: entered promiscuous mode [ 52.602635][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.605361][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.608341][ T5980] bridge_slave_1: entered allmulticast mode [ 52.611371][ T5980] bridge_slave_1: entered promiscuous mode [ 52.717941][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.720254][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.722620][ T5984] bridge_slave_0: entered allmulticast mode [ 52.725254][ T5984] bridge_slave_0: entered promiscuous mode [ 52.729270][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.731934][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.734568][ T5971] bridge_slave_0: entered allmulticast mode [ 52.737705][ T5971] bridge_slave_0: entered promiscuous mode [ 52.762559][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.766080][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.769818][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.772350][ T5984] bridge_slave_1: entered allmulticast mode [ 52.775108][ T5984] bridge_slave_1: entered promiscuous mode [ 52.777667][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.780099][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.783157][ T5971] bridge_slave_1: entered allmulticast mode [ 52.786306][ T5971] bridge_slave_1: entered promiscuous mode [ 52.803447][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.805767][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.808123][ T5972] bridge_slave_0: entered allmulticast mode [ 52.810767][ T5972] bridge_slave_0: entered promiscuous mode [ 52.816436][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.889152][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.891639][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.893949][ T5972] bridge_slave_1: entered allmulticast mode [ 52.896739][ T5972] bridge_slave_1: entered promiscuous mode [ 52.930342][ T5980] team0: Port device team_slave_0 added [ 52.935200][ T5984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.940040][ T5984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.946397][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.966833][ T5980] team0: Port device team_slave_1 added [ 52.990755][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.996806][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.054068][ T5984] team0: Port device team_slave_0 added [ 53.077300][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.080890][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.083746][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.095393][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.100732][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.103395][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.112865][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.118292][ T5984] team0: Port device team_slave_1 added [ 53.172635][ T5971] team0: Port device team_slave_0 added [ 53.193641][ T5972] team0: Port device team_slave_0 added [ 53.214090][ T5971] team0: Port device team_slave_1 added [ 53.218086][ T5972] team0: Port device team_slave_1 added [ 53.236243][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.238684][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.248635][ T5984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.333078][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.335891][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.345055][ T5984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.349259][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.351582][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.362324][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.370445][ T5980] hsr_slave_0: entered promiscuous mode [ 53.373297][ T5980] hsr_slave_1: entered promiscuous mode [ 53.386722][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.389249][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.402858][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.411195][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.414386][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.425053][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.430909][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.433451][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.442242][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.592913][ T5984] hsr_slave_0: entered promiscuous mode [ 53.595363][ T5984] hsr_slave_1: entered promiscuous mode [ 53.598796][ T5984] debugfs: 'hsr0' already exists in 'hsr' [ 53.601229][ T5984] Cannot create hsr debugfs directory [ 53.652440][ T5972] hsr_slave_0: entered promiscuous mode [ 53.654746][ T5972] hsr_slave_1: entered promiscuous mode [ 53.656868][ T5972] debugfs: 'hsr0' already exists in 'hsr' [ 53.658921][ T5972] Cannot create hsr debugfs directory [ 53.665009][ T5971] hsr_slave_0: entered promiscuous mode [ 53.667654][ T5971] hsr_slave_1: entered promiscuous mode [ 53.669854][ T5971] debugfs: 'hsr0' already exists in 'hsr' [ 53.671610][ T5971] Cannot create hsr debugfs directory [ 54.025181][ T5980] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.037853][ T5979] Bluetooth: hci1: command tx timeout [ 54.037857][ T63] Bluetooth: hci2: command tx timeout [ 54.046720][ T5980] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.051378][ T5980] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.062842][ T5980] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.090093][ T5972] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.097077][ T5972] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.117102][ T5972] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.118022][ T5979] Bluetooth: hci0: command tx timeout [ 54.118492][ T63] Bluetooth: hci3: command tx timeout [ 54.126684][ T5972] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.162993][ T5971] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.187292][ T5971] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.192694][ T5971] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.220484][ T5971] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.243533][ T5984] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.248631][ T5984] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.253725][ T5984] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.259871][ T5984] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.313925][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.343703][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.363589][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.366630][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.374814][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.379478][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.381912][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.419739][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.426461][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.449245][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.451917][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.464285][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.471004][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.473887][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.479307][ T5984] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.493321][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.496378][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.505956][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.508511][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.514469][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.533281][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.535958][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.551716][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.554257][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.614249][ T5971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.635854][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.665819][ T5980] veth0_vlan: entered promiscuous mode [ 54.672433][ T5980] veth1_vlan: entered promiscuous mode [ 54.691269][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.702645][ T5980] veth0_macvtap: entered promiscuous mode [ 54.715067][ T5980] veth1_macvtap: entered promiscuous mode [ 54.732398][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.742795][ T5984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.750928][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.766758][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.776925][ T81] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.780898][ T81] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.793416][ T81] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.799389][ T81] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.803713][ T5972] veth0_vlan: entered promiscuous mode [ 54.825547][ T5972] veth1_vlan: entered promiscuous mode [ 54.853412][ T5971] veth0_vlan: entered promiscuous mode [ 54.892248][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.896365][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.907692][ T5984] veth0_vlan: entered promiscuous mode [ 54.916269][ T5971] veth1_vlan: entered promiscuous mode [ 54.920308][ T5972] veth0_macvtap: entered promiscuous mode [ 54.940658][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.940720][ T5972] veth1_macvtap: entered promiscuous mode [ 54.943221][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.957879][ T5984] veth1_vlan: entered promiscuous mode [ 54.968849][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.977721][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.984890][ T5980] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.986829][ T5971] veth0_macvtap: entered promiscuous mode [ 55.000989][ T5971] veth1_macvtap: entered promiscuous mode [ 55.003744][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.008718][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.018764][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.023387][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.027771][ T5984] veth0_macvtap: entered promiscuous mode [ 55.043650][ T5984] veth1_macvtap: entered promiscuous mode [ 55.061912][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.069176][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.092505][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.100809][ T1177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.107537][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.114206][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.118441][ T1177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.120070][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.122255][ T1177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.138174][ T1177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.152074][ T1177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.155200][ T1177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.164179][ T1177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.169397][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.175785][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.176502][ T1177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.202713][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.209183][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.243245][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.245717][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.246034][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.252614][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.270742][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.273520][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.509569][ T6076] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 55.793032][ T6089] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9'. [ 56.122826][ T5979] Bluetooth: hci2: command tx timeout [ 56.125191][ T63] Bluetooth: hci1: command tx timeout [ 56.197804][ T63] Bluetooth: hci0: command tx timeout [ 56.200833][ T5979] Bluetooth: hci3: command tx timeout [ 56.346487][ T6110] can0: slcan on ptm0. [ 56.660621][ T6109] can0 (unregistered): slcan off ptm0. [ 56.798282][ T6131] syz_tun: entered allmulticast mode [ 56.815912][ T6131] mmap: syz.0.20 (6131) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.907654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c8!!! [ 56.909539][ T40] audit: type=1326 audit(1756451662.482:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.3.17" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7fc00000 [ 56.967529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 57.009685][ T6142] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.067306][ T40] audit: type=1804 audit(1756451662.612:3): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.23" name="/newroot/3/bus" dev="tmpfs" ino=34 res=1 errno=0 [ 57.090205][ T6145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.25'. [ 57.137411][ T6061] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.148972][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'. [ 57.308047][ T6061] usb 7-1: Using ep0 maxpacket: 8 [ 57.313299][ T6061] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 57.317254][ T6061] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 57.320259][ T6061] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.327964][ T6061] usb 7-1: config 0 descriptor?? [ 57.529293][ T40] audit: type=1326 audit(1756451663.122:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.3.17" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fc6579 code=0x7fc00000 [ 57.536191][ T40] audit: type=1326 audit(1756451663.122:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.3.17" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7fc00000 [ 57.543339][ T40] audit: type=1326 audit(1756451663.122:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.3.17" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7fc00000 [ 57.549255][ T6061] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 57.550542][ T40] audit: type=1326 audit(1756451663.122:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.3.17" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7fc00000 [ 57.562430][ T40] audit: type=1326 audit(1756451663.122:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.3.17" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7fc00000 [ 57.571104][ T40] audit: type=1326 audit(1756451663.122:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.3.17" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7fc00000 [ 57.578986][ T40] audit: type=1326 audit(1756451663.122:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.3.17" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7fc00000 [ 57.587292][ T40] audit: type=1326 audit(1756451663.122:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz.3.17" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7fc00000 [ 57.755117][ T10] usb 7-1: USB disconnect, device number 2 [ 57.889668][ T6061] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 58.007535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.039835][ T6061] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.045394][ T6061] usb 5-1: config 1 interface 0 has no altsetting 0 [ 58.053755][ T6061] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 58.063185][ T6061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.066556][ T6061] usb 5-1: Product: ê¹é¼‹ê½¡î¶°êª¹ä‹¹ç™©à¯¸ì³«è³’è蓀ᖇíšë‚Šç­°ì‹³â¶¼ìŽ—åºæ¿°â›€â§›á€¥æ¦å“˜â³€ë—絚哱鿙활蹔䚞맯帧㽘ˋ愤ꮂ삻蜧䓖è¦í’¢ì”‹è²™ê¥½ë’‰è›šå–œê¦ïˆä¬è¸¥î²¬îŸ¡å»‚檻⼇ਧ☺惴ïŠå©¥íœµëŸï€«îžŠï‹ Â³ä“˜æ”¢âˆƒæŠ¸é—€åŽ˜ê¤Œå¸¤è©»ížá„‡äƒ£ä¯‹ä›ƒïŸ…믲莟ẇë…ꮚ汈錽烘ㅉå´ì ¡î±£á¾½æ€¬è‡¯á¬±áž§î’¾ä¯¥ì à¾µá†‡ç»å¿©å‚¿ç„™ [ 58.082216][ T6061] usb 5-1: Manufacturer: ㊠[ 58.084587][ T6061] usb 5-1: SerialNumber: ┆舛쥂毮샜七둨é⥫í°ì‚¬ãµ†æœ¢êž¦ê¹’黚펾䶘â…⟣á£î†æ˜„ë…†í™á´‘崜닄ìœæ¼”橙䱻筵ꣳί릌íæ¿¢ïµá—劫뱸칻莻盀ᒫ蕙䑑䩗æ¾äºŽï®¥Ó»ä‘¥ážœï»žã᤬줅饖༼땿ﲑ许扠苡㨔ĎＮï…艃툱鸣웱஢岵æŽî›°ï”Žç°†ç—¦ïª§í—©å»à¬·Ú…é¥ê¥‰Ëœç¬ë»­â–šä¯‹â£–糿çŠæ®·èŠŸéƒQɑ喌窵ㅔ䠦⽣䯸ã¶á° ä¢ Ê녠ꟽ晎 [ 58.167429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 58.174578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 58.197473][ T63] Bluetooth: hci1: command tx timeout [ 58.197682][ T5979] Bluetooth: hci2: command tx timeout [ 58.287555][ T63] Bluetooth: hci0: command tx timeout [ 58.287587][ T5979] Bluetooth: hci3: command tx timeout [ 58.380009][ T6061] usb 5-1: USB disconnect, device number 2 [ 58.547422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.680288][ T6196] netlink: 36 bytes leftover after parsing attributes in process `syz.2.32'. [ 58.687443][ T6196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'. [ 58.733296][ T6202] loop2: detected capacity change from 0 to 7 [ 58.739652][ T5988] Dev loop2: unable to read RDB block 7 [ 58.741544][ T5988] loop2: unable to read partition table [ 58.743429][ T5988] loop2: partition table beyond EOD, truncated [ 58.750901][ T6202] Dev loop2: unable to read RDB block 7 [ 58.753405][ T6202] loop2: unable to read partition table [ 58.755664][ T6202] loop2: partition table beyond EOD, truncated [ 58.759043][ T6202] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 58.771009][ T6202] overlayfs: missing 'workdir' [ 58.914373][ T6061] IPVS: starting estimator thread 0... [ 59.007308][ T6214] IPVS: using max 43 ests per chain, 103200 per kthread [ 59.096159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.371225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.377072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.381528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.417665][ T6231] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20005 [ 59.676020][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 59.783325][ T6244] cgroup: Need name or subsystem set [ 59.807881][ T6058] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 59.959387][ T6058] usb 8-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.963681][ T6058] usb 8-1: config 1 interface 0 has no altsetting 0 [ 59.968219][ T6058] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 59.972111][ T6058] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.975501][ T6058] usb 8-1: Product: ê¹é¼‹ê½¡î¶°êª¹ä‹¹ç™©à¯¸ì³«è³’è蓀ᖇíšë‚Šç­°ì‹³â¶¼ìŽ—åºæ¿°â›€â§›á€¥æ¦å“˜â³€ë—絚哱鿙활蹔䚞맯帧㽘ˋ愤ꮂ삻蜧䓖è¦í’¢ì”‹è²™ê¥½ë’‰è›šå–œê¦ïˆä¬è¸¥î²¬îŸ¡å»‚檻⼇ਧ☺惴ïŠå©¥íœµëŸï€«îžŠï‹ Â³ä“˜æ”¢âˆƒæŠ¸é—€åŽ˜ê¤Œå¸¤è©»ížá„‡äƒ£ä¯‹ä›ƒïŸ…믲莟ẇë…ꮚ汈錽烘ㅉå´ì ¡î±£á¾½æ€¬è‡¯á¬±áž§î’¾ä¯¥ì à¾µá†‡ç»å¿©å‚¿ç„™ [ 59.988677][ T6058] usb 8-1: Manufacturer: ㊠[ 59.990750][ T6058] usb 8-1: SerialNumber: ┆舛쥂毮샜七둨é⥫í°ì‚¬ãµ†æœ¢êž¦ê¹’黚펾䶘â…⟣á£î†æ˜„ë…†í™á´‘崜닄ìœæ¼”橙䱻筵ꣳί릌íæ¿¢ïµá—劫뱸칻莻盀ᒫ蕙䑑䩗æ¾äºŽï®¥Ó»ä‘¥ážœï»žã᤬줅饖༼땿ﲑ许扠苡㨔ĎＮï…艃툱鸣웱஢岵æŽî›°ï”Žç°†ç—¦ïª§í—©å»à¬·Ú…é¥ê¥‰Ëœç¬ë»­â–šä¯‹â£–糿çŠæ®·èŠŸéƒQɑ喌窵ㅔ䠦⽣䯸ã¶á° ä¢ Ê녠ꟽ晎 [ 60.227745][ T6058] usb 8-1: USB disconnect, device number 2 [ 60.279355][ T5979] Bluetooth: hci1: command tx timeout [ 60.279376][ T63] Bluetooth: hci2: command tx timeout [ 60.357545][ T5979] Bluetooth: hci0: command tx timeout [ 60.357585][ T63] Bluetooth: hci3: command tx timeout [ 61.567233][ T6041] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 61.717221][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.737278][ T6041] usb 6-1: Using ep0 maxpacket: 16 [ 61.740457][ T6041] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 61.746096][ T6041] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 61.754130][ T6041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.756860][ T6041] usb 6-1: Product: syz [ 61.760341][ T6041] usb 6-1: Manufacturer: syz [ 61.762011][ T6041] usb 6-1: SerialNumber: syz [ 61.765833][ T6041] usb 6-1: config 0 descriptor?? [ 61.770290][ T6041] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 61.773248][ T6041] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 61.879279][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 61.882396][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 61.885890][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 61.890145][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.894522][ T10] usb 5-1: config 0 descriptor?? [ 62.101228][ T10] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 62.238403][ T40] kauditd_printk_skb: 328 callbacks suppressed [ 62.238417][ T40] audit: type=1326 audit(1756451667.832:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 62.249261][ T40] audit: type=1326 audit(1756451667.832:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.67" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 62.256769][ T40] audit: type=1326 audit(1756451667.832:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 62.264720][ T40] audit: type=1326 audit(1756451667.832:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.67" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 62.273833][ T40] audit: type=1326 audit(1756451667.832:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.67" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fc6579 code=0x7ffc0000 [ 62.281038][ T40] audit: type=1326 audit(1756451667.832:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.67" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc6598 code=0x7ffc0000 [ 62.288736][ T40] audit: type=1326 audit(1756451667.832:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.67" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc6598 code=0x7ffc0000 [ 62.296224][ T40] audit: type=1326 audit(1756451667.832:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.67" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc6598 code=0x7ffc0000 [ 62.302903][ T6290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.303403][ T40] audit: type=1326 audit(1756451667.832:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.67" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc6598 code=0x7ffc0000 [ 62.310406][ T6290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.314235][ T40] audit: type=1326 audit(1756451667.832:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.3.67" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc6598 code=0x7ffc0000 [ 62.341891][ T6290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.346434][ T6290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.377033][ T6041] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 62.560000][ T34] usb 5-1: USB disconnect, device number 3 [ 63.736921][ T6041] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 63.750051][ T6041] em28xx 6-1:0.0: board has no eeprom [ 63.827246][ T6041] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 63.829848][ T6041] em28xx 6-1:0.0: dvb set to bulk mode. [ 63.832686][ T841] em28xx 6-1:0.0: Binding DVB extension [ 63.862016][ T841] em28xx 6-1:0.0: Registering input extension [ 63.970065][ T6061] usb 6-1: USB disconnect, device number 2 [ 63.973439][ T6061] em28xx 6-1:0.0: Disconnecting em28xx [ 63.975268][ T6061] em28xx 6-1:0.0: Closing input extension [ 64.003347][ T6061] em28xx 6-1:0.0: Freeing device [ 64.010015][ T53] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 64.157343][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 64.160950][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 64.164553][ T53] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 64.198492][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.203026][ T53] usb 8-1: config 0 descriptor?? [ 64.317951][ T6346] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 64.321511][ T6346] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 64.332608][ T6346] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 64.339152][ T6346] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 64.341673][ T6346] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 64.350805][ T6346] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 64.355088][ T6346] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 64.357711][ T6346] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 64.364780][ T6346] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 64.369782][ T6346] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 64.372500][ T6346] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 64.380418][ T6346] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 64.416965][ T53] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 64.624526][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.630003][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.817482][ T6359] syz.0.81(6359): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 64.997719][ T6371] Can't find a SQUASHFS superblock on nullb0 [ 65.003253][ T6371] /dev/nullb0: Can't open blockdev [ 65.150578][ T53] usb 8-1: USB disconnect, device number 3 [ 65.210208][ T6013] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 65.377195][ T6013] usb 5-1: Using ep0 maxpacket: 8 [ 65.379511][ T6392] nbd: must specify a size in bytes for the device [ 65.383201][ T6013] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 65.386631][ T6013] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.390721][ T6013] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.394347][ T6013] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.399897][ T6013] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.405240][ T6013] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 65.409034][ T6013] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.620548][ T6013] usb 5-1: GET_CAPABILITIES returned 0 [ 65.623455][ T6013] usbtmc 5-1:16.0: can't read capabilities [ 65.949550][ T6418] fuse: Unknown parameter 'gr' [ 66.357387][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.357398][ T5979] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.367239][ T5979] Bluetooth: hci0: command 0x0c1a tx timeout [ 66.427795][ T6438] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 66.447273][ T5979] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.733248][ T6444] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 67.515343][ T40] kauditd_printk_skb: 539 callbacks suppressed [ 67.515358][ T40] audit: type=1326 audit(1756451673.102:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 67.526047][ T40] audit: type=1326 audit(1756451673.102:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 67.534068][ T40] audit: type=1326 audit(1756451673.112:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.113" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 67.541760][ T40] audit: type=1326 audit(1756451673.112:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 67.549685][ T40] audit: type=1326 audit(1756451673.112:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 67.557956][ T40] audit: type=1326 audit(1756451673.112:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.113" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 67.566140][ T40] audit: type=1326 audit(1756451673.112:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 67.574989][ T40] audit: type=1326 audit(1756451673.112:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 67.583761][ T40] audit: type=1326 audit(1756451673.112:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.113" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 67.591521][ T40] audit: type=1326 audit(1756451673.112:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.2.113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 67.716870][ T6474] tipc: Started in network mode [ 67.719009][ T6474] tipc: Node identity d2f9a0d55ceb, cluster identity 4711 [ 67.725744][ T6474] tipc: Enabled bearer , priority 0 [ 67.734198][ T6474] tipc: Resetting bearer [ 67.749071][ T6473] tipc: Disabling bearer [ 67.843499][ T6477] netlink: 'syz.1.111': attribute type 4 has an invalid length. [ 67.855967][ T6477] netlink: 17 bytes leftover after parsing attributes in process `syz.1.111'. [ 67.998275][ T10] usb 5-1: USB disconnect, device number 4 [ 68.388325][ T6493] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 68.391365][ T6493] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 68.397043][ T6493] vhci_hcd vhci_hcd.0: Device attached [ 68.439486][ T5979] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.441648][ T5979] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.517300][ T63] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.775807][ T6494] vhci_hcd: connection closed [ 68.777617][ T81] vhci_hcd: stop threads [ 68.781155][ T81] vhci_hcd: release socket [ 68.783653][ T81] vhci_hcd: disconnect device [ 68.944027][ T81] tipc: Subscription rejected, illegal request [ 69.103905][ T6504] ======================================================= [ 69.103905][ T6504] WARNING: The mand mount option has been deprecated and [ 69.103905][ T6504] and is ignored by this kernel. Remove the mand [ 69.103905][ T6504] option from the mount to silence this warning. [ 69.103905][ T6504] ======================================================= [ 69.283948][ T6506] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 69.498193][ T6512] tipc: Enabling of bearer rejected, failed to enable media [ 69.999649][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 70.038620][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 70.042724][ T10] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 70.146147][ T6548] Zero length message leads to an empty skb [ 70.281430][ T6555] tipc: Enabling of bearer rejected, failed to enable media [ 70.518235][ T63] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.518349][ T5979] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.595782][ T6573] binder: 6572:6573 ioctl 400c620e 800005c0 returned -22 [ 70.597289][ T5979] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.960690][ T6585] tipc: Enabling of bearer rejected, failed to enable media [ 71.003985][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.007056][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.424666][ T6617] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (eth1-tx-0) [ 71.451939][ T841] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.454695][ T841] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.457500][ T841] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.460485][ T841] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.463095][ T841] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.465481][ T841] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.477411][ T841] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.479764][ T841] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.482149][ T841] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.497351][ T841] hid-generic 0000:0000:0000.0003: hidraw2: HID v0.00 Device [] on [ 71.651689][ T6625] tipc: Enabling of bearer rejected, failed to enable media [ 71.929059][ T6641] syzkaller1: entered promiscuous mode [ 71.930895][ T6641] syzkaller1: entered allmulticast mode [ 71.956846][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 72.066346][ T6645] process 'syz.1.164' launched '/dev/fd/3' with NULL argv: empty string added [ 72.460073][ T6659] netlink: 32 bytes leftover after parsing attributes in process `syz.3.170'. [ 72.463174][ T6659] netlink: 'syz.3.170': attribute type 3 has an invalid length. [ 72.469761][ T6659] syz.3.170 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 72.476126][ T6659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.170'. [ 72.483952][ T6659] bridge0: port 3(syz_tun) entered blocking state [ 72.487599][ T6659] bridge0: port 3(syz_tun) entered disabled state [ 72.490488][ T6659] syz_tun: entered allmulticast mode [ 72.494456][ T6659] syz_tun: entered promiscuous mode [ 72.498760][ T6659] bridge0: port 3(syz_tun) entered blocking state [ 72.502333][ T6659] bridge0: port 3(syz_tun) entered forwarding state [ 72.525692][ T6660] smc: net device bond0 applied user defined pnetid SYZ2 [ 72.596026][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 72.596039][ T40] audit: type=1326 audit(1756451678.182:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6661 comm="syz.3.171" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc6579 code=0x0 [ 73.327314][ T841] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 73.478449][ T841] usb 6-1: Using ep0 maxpacket: 8 [ 73.482386][ T841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 73.486138][ T841] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 73.489919][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.495298][ T841] usb 6-1: config 0 descriptor?? [ 74.071033][ T841] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 74.236320][ T9] usb 6-1: USB disconnect, device number 3 [ 74.423326][ T6699] nftables ruleset with unbound chain [ 74.551676][ T6703] netlink: 76 bytes leftover after parsing attributes in process `syz.2.183'. [ 74.597382][ T5979] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 74.785470][ T6705] Bluetooth: MGMT ver 1.23 [ 74.793739][ T6705] netlink: 20 bytes leftover after parsing attributes in process `syz.1.184'. [ 75.495640][ T6719] netlink: 'syz.3.188': attribute type 4 has an invalid length. [ 75.510997][ T6719] netlink: 'syz.3.188': attribute type 4 has an invalid length. [ 75.647278][ T6041] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 75.895255][ T6726] capability: warning: `syz.1.190' uses 32-bit capabilities (legacy support in use) [ 76.149073][ T6730] netlink: 'syz.1.192': attribute type 4 has an invalid length. [ 76.177646][ T6732] netlink: 'syz.0.193': attribute type 4 has an invalid length. [ 76.248922][ T6041] usb 7-1: Using ep0 maxpacket: 8 [ 76.498506][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 76.648589][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 76.649268][ T6041] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.652750][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.654291][ T6041] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 76.658578][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 76.661332][ T6041] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.664469][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.673225][ T6041] usb 7-1: config 0 descriptor?? [ 76.673309][ T9] usb 5-1: config 0 descriptor?? [ 76.894018][ T6041] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 76.898804][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 76.905320][ T6041] usb 7-1: USB disconnect, device number 3 [ 77.097326][ T6737] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.112793][ T53] usb 5-1: USB disconnect, device number 5 [ 77.137270][ T6040] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 77.297257][ T6040] usb 8-1: Using ep0 maxpacket: 8 [ 77.300599][ T6040] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 77.304103][ T6040] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 77.307405][ T6040] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.310633][ T6040] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.315801][ T6040] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 77.318873][ T6040] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.436723][ T6751] capability: warning: `syz.2.199' uses deprecated v2 capabilities in a way that may be insecure [ 77.532269][ T6040] usb 8-1: GET_CAPABILITIES returned 0 [ 77.534479][ T6040] usbtmc 8-1:16.0: can't read capabilities [ 77.831079][ T6749] fuseblk: Bad value for 'group_id' [ 77.833089][ T6749] fuseblk: Bad value for 'group_id' [ 77.840929][ T34] usb 8-1: USB disconnect, device number 4 [ 78.597372][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 79.083054][ T6779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.131280][ T6779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.440708][ T6795] FAULT_INJECTION: forcing a failure. [ 79.440708][ T6795] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.445254][ T6795] CPU: 2 UID: 0 PID: 6795 Comm: syz.2.213 Not tainted syzkaller #0 PREEMPT(full) [ 79.445269][ T6795] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.445276][ T6795] Call Trace: [ 79.445280][ T6795] [ 79.445284][ T6795] dump_stack_lvl+0x16c/0x1f0 [ 79.445325][ T6795] should_fail_ex+0x512/0x640 [ 79.445356][ T6795] _copy_from_user+0x2e/0xd0 [ 79.445374][ T6795] do_sys_poll+0x1d5/0xdf0 [ 79.445394][ T6795] ? __pfx_do_sys_poll+0x10/0x10 [ 79.445404][ T6795] ? __lock_acquire+0x62e/0x1ce0 [ 79.445434][ T6795] ? irqentry_exit+0x3b/0x90 [ 79.445471][ T6795] ? bpf_trace_run2+0x26b/0x590 [ 79.445488][ T6795] ? bpf_trace_run2+0x2ab/0x590 [ 79.445502][ T6795] ? __pfx_bpf_trace_run2+0x10/0x10 [ 79.445519][ T6795] __ia32_sys_poll+0x101/0x450 [ 79.445531][ T6795] ? __pfx___ia32_sys_poll+0x10/0x10 [ 79.445541][ T6795] ? syscall_trace_enter+0x1cb/0x240 [ 79.445559][ T6795] ? rcu_is_watching+0x12/0xc0 [ 79.445571][ T6795] __do_fast_syscall_32+0x7c/0x3a0 [ 79.445588][ T6795] do_fast_syscall_32+0x32/0x80 [ 79.445605][ T6795] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.445618][ T6795] RIP: 0023:0xf70be579 [ 79.445627][ T6795] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 79.445637][ T6795] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 00000000000000a8 [ 79.445648][ T6795] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000001 [ 79.445654][ T6795] RDX: 00000000fffeffff RSI: 0000000000000000 RDI: 0000000000000000 [ 79.445660][ T6795] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.445666][ T6795] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 79.445672][ T6795] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.445684][ T6795] [ 79.629176][ T6798] comedi comedi3: comedi_config --init_data is deprecated [ 79.927305][ T6041] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 80.089647][ T6041] usb 6-1: Using ep0 maxpacket: 8 [ 80.099128][ T6041] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 80.102349][ T6041] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.105898][ T6041] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 80.118625][ T6041] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.132396][ T6041] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.136818][ T6041] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 80.152826][ T6041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.373223][ T6041] usb 6-1: usb_control_msg returned -32 [ 80.375076][ T6041] usbtmc 6-1:16.0: can't read capabilities [ 80.732674][ T6806] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 80.766540][ T6808] tipc: Enabling of bearer rejected, failed to enable media [ 80.839261][ T6013] usb 6-1: USB disconnect, device number 4 [ 81.244516][ T54] cfg80211: failed to load regulatory.db [ 81.277793][ T6821] netlink: 60 bytes leftover after parsing attributes in process `syz.2.219'. [ 81.281630][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'. [ 81.658167][ T63] Bluetooth: hci4: sending frame failed (-49) [ 81.662015][ T5979] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 82.171828][ T6848] tipc: Enabling of bearer rejected, failed to enable media [ 82.897968][ T6040] e1000 0000:00:06.0 eth0: Reset adapter [ 83.351145][ T6901] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 83.351145][ T6901] program syz.0.235 not setting count and/or reply_len properly [ 83.370786][ T40] audit: type=1326 audit(1756451688.962:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.0.235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 83.383274][ T6901] binder: 6900:6901 ioctl 400c620e 80000040 returned -22 [ 83.384806][ T40] audit: type=1326 audit(1756451688.962:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.0.235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 83.394443][ T40] audit: type=1326 audit(1756451688.972:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.0.235" exe="/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 83.402548][ T40] audit: type=1326 audit(1756451688.972:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.0.235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 83.411894][ T40] audit: type=1326 audit(1756451688.972:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.0.235" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 83.421177][ T40] audit: type=1326 audit(1756451688.972:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.0.235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 83.434490][ T40] audit: type=1326 audit(1756451688.972:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.0.235" exe="/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 83.444499][ T40] audit: type=1326 audit(1756451688.972:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.0.235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 83.454624][ T40] audit: type=1326 audit(1756451688.972:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.0.235" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 83.463958][ T40] audit: type=1326 audit(1756451688.972:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.0.235" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 83.586396][ T6907] tipc: Enabling of bearer rejected, failed to enable media [ 85.081444][ T1344] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 91.748422][ T6945] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 92.790320][ T6965] netlink: 'syz.0.245': attribute type 30 has an invalid length. [ 93.511482][ T6980] tipc: Enabled bearer , priority 0 [ 93.517557][ T6980] tipc: Resetting bearer [ 93.526490][ T6979] tipc: Disabling bearer [ 93.967712][ T6013] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 94.997358][ T5979] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 94.997389][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 95.826701][ T7019] tipc: Enabled bearer , priority 0 [ 95.834305][ T7019] tipc: Resetting bearer [ 95.846654][ T7018] tipc: Disabling bearer [ 96.246462][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 96.390051][ T7040] random: crng reseeded on system resumption [ 96.415541][ T7042] netlink: 'syz.3.267': attribute type 4 has an invalid length. [ 96.442431][ T7044] tipc: Enabled bearer , priority 0 [ 96.450789][ T7044] tipc: Resetting bearer [ 96.465534][ T7043] tipc: Disabling bearer [ 97.731000][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 97.974930][ T7079] FAULT_INJECTION: forcing a failure. [ 97.974930][ T7079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.980526][ T7079] CPU: 0 UID: 0 PID: 7079 Comm: syz.2.279 Not tainted syzkaller #0 PREEMPT(full) [ 97.980546][ T7079] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.980555][ T7079] Call Trace: [ 97.980560][ T7079] [ 97.980567][ T7079] dump_stack_lvl+0x16c/0x1f0 [ 97.980590][ T7079] should_fail_ex+0x512/0x640 [ 97.980612][ T7079] _copy_to_user+0x32/0xd0 [ 97.980627][ T7079] simple_read_from_buffer+0xcb/0x170 [ 97.980646][ T7079] proc_fail_nth_read+0x197/0x240 [ 97.980660][ T7079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.980672][ T7079] ? rw_verify_area+0xcf/0x6c0 [ 97.980683][ T7079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.980694][ T7079] vfs_read+0x1e4/0xcf0 [ 97.980709][ T7079] ? __pfx_vfs_read+0x10/0x10 [ 97.980720][ T7079] ? find_held_lock+0x2b/0x80 [ 97.980735][ T7079] ? __fget_files+0x20e/0x3c0 [ 97.980751][ T7079] ksys_read+0x12a/0x250 [ 97.980763][ T7079] ? __pfx_ksys_read+0x10/0x10 [ 97.980781][ T7079] ? rcu_is_watching+0x12/0xc0 [ 97.980827][ T7079] __do_fast_syscall_32+0x7c/0x3a0 [ 97.980844][ T7079] do_fast_syscall_32+0x32/0x80 [ 97.980858][ T7079] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 97.980873][ T7079] RIP: 0023:0xf70be579 [ 97.980882][ T7079] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 97.980892][ T7079] RSP: 002b:00000000f54ae590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 97.980903][ T7079] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f54ae620 [ 97.980909][ T7079] RDX: 000000000000000f RSI: 00000000f7424ff4 RDI: 0000000000000000 [ 97.980915][ T7079] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 97.980920][ T7079] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 97.980926][ T7079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 97.980940][ T7079] [ 98.000241][ T54] e1000 0000:00:06.0 eth0: Reset adapter [ 98.178157][ T54] e1000 0000:00:06.0 eth0: Reset adapter [ 98.197523][ T7091] syzkaller0: entered promiscuous mode [ 98.200469][ T7091] syzkaller0: entered allmulticast mode [ 98.677438][ T5979] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 98.677551][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 100.358300][ T6013] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 107.731098][ T7143] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 107.813088][ T7147] Bluetooth: hci0: load_link_keys: too big key_count value 28530 [ 107.977291][ T34] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 108.127299][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 108.131084][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 108.135835][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 108.140536][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.144448][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.150535][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.154278][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.197420][ T6013] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 108.349221][ T6013] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.353688][ T6013] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 108.360064][ T6013] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.363133][ T6013] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.369950][ T6013] usb 8-1: config 0 descriptor?? [ 108.370977][ T34] usb 6-1: GET_CAPABILITIES returned 0 [ 108.374268][ T34] usbtmc 6-1:16.0: can't read capabilities [ 108.636011][ T34] usb 6-1: USB disconnect, device number 5 [ 108.780264][ T7143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.838520][ T7149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.845488][ T7149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.848959][ T7149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.852984][ T7149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.855518][ T7149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.907364][ T1344] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 109.064548][ T1344] usb 7-1: Using ep0 maxpacket: 8 [ 109.069381][ T1344] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 109.073835][ T1344] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 109.078340][ T1344] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.081761][ T1344] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.086337][ T1344] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.089683][ T1344] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.324897][ T1344] usb 7-1: GET_CAPABILITIES returned 0 [ 109.326875][ T1344] usbtmc 7-1:16.0: can't read capabilities [ 109.657013][ T6040] usb 7-1: USB disconnect, device number 4 [ 110.502860][ T1177] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.615898][ T1177] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.693773][ T1177] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.743694][ T6013] usb 8-1: string descriptor 0 read error: -71 [ 110.749472][ T5336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.749646][ T6013] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 110.757415][ T5336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.761740][ T5336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.767358][ T5336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.768800][ T6013] usb 8-1: USB disconnect, device number 5 [ 110.779662][ T5336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.808618][ T1177] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.050061][ T63] block nbd0: Receive control failed (result -32) [ 111.093493][ T1177] bridge_slave_1: left allmulticast mode [ 111.096011][ T1177] bridge_slave_1: left promiscuous mode [ 111.103085][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.122784][ T1177] bridge_slave_0: left allmulticast mode [ 111.125672][ T1177] bridge_slave_0: left promiscuous mode [ 111.129236][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.672002][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.677600][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.682625][ T1177] bond0 (unregistering): Released all slaves [ 111.698035][ T7204] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode active-backup(1) [ 111.713739][ T7174] chnl_net:caif_netlink_parms(): no params data found [ 111.784501][ T1177] tipc: Left network mode [ 111.862686][ T7174] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.865117][ T7174] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.868665][ T7174] bridge_slave_0: entered allmulticast mode [ 111.871682][ T7174] bridge_slave_0: entered promiscuous mode [ 111.879656][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.882102][ T7174] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.884532][ T7174] bridge_slave_1: entered allmulticast mode [ 111.888785][ T7174] bridge_slave_1: entered promiscuous mode [ 111.962425][ T7174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.975491][ T7174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.063900][ T7174] team0: Port device team_slave_0 added [ 112.067996][ T7174] team0: Port device team_slave_1 added [ 112.114436][ T1177] hsr_slave_0: left promiscuous mode [ 112.119119][ T1177] hsr_slave_1: left promiscuous mode [ 112.121827][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.124826][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.141804][ T7222] netlink: 'syz.3.313': attribute type 10 has an invalid length. [ 112.162301][ T1177] veth1_macvtap: left promiscuous mode [ 112.164655][ T1177] veth0_macvtap: left promiscuous mode [ 112.166565][ T1177] veth1_vlan: left promiscuous mode [ 112.168528][ T1177] veth0_vlan: left promiscuous mode [ 112.358262][ T5979] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.837350][ T63] Bluetooth: hci4: command tx timeout [ 112.850973][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 112.949362][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 113.535944][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.538936][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.547940][ T7174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.562966][ T7222] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 113.584631][ T7174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.588897][ T7174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.599326][ T7174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.648344][ T7236] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.650659][ T7236] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.653126][ T7236] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.658877][ T7236] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 113.675742][ T7236] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 113.694572][ T7243] sctp: [Deprecated]: syz.3.319 (pid 7243) Use of int in max_burst socket option deprecated. [ 113.694572][ T7243] Use struct sctp_assoc_value instead [ 113.695904][ T7174] hsr_slave_0: entered promiscuous mode [ 113.705397][ T7236] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 113.706839][ T7174] hsr_slave_1: entered promiscuous mode [ 113.710734][ T7174] debugfs: 'hsr0' already exists in 'hsr' [ 113.713098][ T7174] Cannot create hsr debugfs directory [ 113.926818][ T7174] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.937708][ T7174] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.943829][ T7174] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.950270][ T7174] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.099324][ T7174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.114859][ T7174] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.131193][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.133629][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.137752][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.140548][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.331326][ T7174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.509477][ T7174] veth0_vlan: entered promiscuous mode [ 114.515542][ T7174] veth1_vlan: entered promiscuous mode [ 114.542668][ T7174] veth0_macvtap: entered promiscuous mode [ 114.548734][ T7174] veth1_macvtap: entered promiscuous mode [ 114.561962][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.572120][ T7174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.578861][ T81] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.582831][ T81] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.586157][ T81] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.592223][ T81] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.616081][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 114.666386][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.672597][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.697952][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.701392][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.140364][ T7300] warning: `syz.4.323' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.210146][ T7302] ufs: You didn't specify the type of your ufs filesystem [ 115.210146][ T7302] [ 115.210146][ T7302] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 115.210146][ T7302] [ 115.210146][ T7302] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 115.224367][ T7302] ufs: ufs_fill_super(): bad magic number [ 115.232607][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.324'. [ 115.407396][ T6041] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 115.557379][ T6041] usb 9-1: Using ep0 maxpacket: 8 [ 115.568716][ T6041] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.573180][ T6041] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 115.576057][ T6041] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.583025][ T6041] usb 9-1: config 0 descriptor?? [ 115.607330][ T6013] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 115.717543][ T5979] Bluetooth: hci4: command 0x041b tx timeout [ 115.717646][ T5336] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.717721][ T63] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.727438][ T5336] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.757577][ T6013] usb 5-1: Using ep0 maxpacket: 8 [ 115.761570][ T6013] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 115.766428][ T6013] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 115.771833][ T6013] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.775947][ T6013] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.781710][ T6013] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.785405][ T6013] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.022472][ T6013] usb 5-1: GET_CAPABILITIES returned 0 [ 116.029053][ T6013] usbtmc 5-1:16.0: can't read capabilities [ 116.137073][ T6041] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 116.158346][ T7329] netlink: 48 bytes leftover after parsing attributes in process `syz.3.331'. [ 116.161367][ T7329] netlink: 48 bytes leftover after parsing attributes in process `syz.3.331'. [ 116.227458][ T29] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 116.444555][ T29] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.454684][ T29] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.548139][ T29] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.579730][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.896574][ T54] usb 5-1: USB disconnect, device number 6 [ 117.121717][ T7336] lo: entered promiscuous mode [ 117.123594][ T7336] lo: entered allmulticast mode [ 117.797418][ T5336] Bluetooth: hci4: command 0x041b tx timeout [ 118.333518][ T53] usb 9-1: USB disconnect, device number 2 [ 118.668141][ T29] usb 6-1: usb_control_msg returned -71 [ 118.670509][ T29] usbtmc 6-1:16.0: can't read capabilities [ 118.687859][ T29] usb 6-1: USB disconnect, device number 6 [ 119.127394][ T7295] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 119.290034][ T7295] usb 6-1: Using ep0 maxpacket: 8 [ 119.294622][ T7295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.299512][ T7295] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.303663][ T7295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.314053][ T7295] usb 6-1: config 0 descriptor?? [ 119.522164][ T7295] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 119.739415][ T7354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.743095][ T7354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.778259][ T7354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.782427][ T7354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.990509][ T841] usb 6-1: USB disconnect, device number 7 [ 120.017379][ T7295] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 120.167355][ T7295] usb 9-1: Using ep0 maxpacket: 8 [ 120.170362][ T7295] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 120.174535][ T7295] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 120.180601][ T7295] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.184771][ T7295] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.189778][ T7295] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 120.194606][ T7295] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.403731][ T7295] usb 9-1: GET_CAPABILITIES returned 0 [ 120.405608][ T7295] usbtmc 9-1:16.0: can't read capabilities [ 120.679244][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 120.679257][ T40] audit: type=1804 audit(1756451726.262:980): pid=7389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.348" name="/newroot/97/file0" dev="tmpfs" ino=527 res=1 errno=0 [ 120.712768][ T7295] usb 9-1: USB disconnect, device number 3 [ 121.420235][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 121.426325][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 121.432548][ T7398] netlink: 109 bytes leftover after parsing attributes in process `syz.4.349'. [ 122.084554][ T7409] ptrace attach of ""[7416] was attempted by "/syz-executor exec"[7409] [ 122.098116][ T40] audit: type=1326 audit(1756451727.682:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.3.357" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc6579 code=0x0 [ 122.407489][ T7295] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 122.557332][ T7295] usb 9-1: Using ep0 maxpacket: 8 [ 122.562042][ T7295] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 122.567650][ T7295] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 122.572149][ T7295] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.576277][ T7295] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.582889][ T7295] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.664566][ T7295] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.876125][ T7295] usb 9-1: GET_CAPABILITIES returned 0 [ 122.878219][ T7295] usbtmc 9-1:16.0: can't read capabilities [ 123.026087][ T7431] CIFS: VFS: Malformed UNC in devname [ 123.154863][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 123.154893][ T6041] usb 9-1: USB disconnect, device number 4 [ 123.227578][ T53] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 123.378961][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.382855][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.385936][ T53] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.391206][ T53] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.394316][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.401534][ T53] usb 6-1: config 0 descriptor?? [ 123.414481][ T7444] Driver unsupported XDP return value 0 on prog (id 107) dev N/A, expect packet loss! [ 123.923458][ T53] hid_parser_main: 7 callbacks suppressed [ 123.923473][ T53] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 123.928755][ T53] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 123.931375][ T53] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x4 [ 123.933736][ T53] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 123.936204][ T53] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 123.938774][ T53] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 123.947327][ T53] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 123.949974][ T53] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 123.952575][ T53] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 123.956179][ T53] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 123.969206][ T53] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 124.194456][ T7295] usb 6-1: USB disconnect, device number 8 [ 124.304613][ T7456] netlink: 'syz.0.369': attribute type 1 has an invalid length. [ 124.342183][ T7458] loop2: detected capacity change from 0 to 7 [ 124.361776][ T7154] Dev loop2: unable to read RDB block 7 [ 124.363589][ T7154] loop2: unable to read partition table [ 124.365499][ T7154] loop2: partition table beyond EOD, truncated [ 124.371929][ T7458] Dev loop2: unable to read RDB block 7 [ 124.374669][ T7458] loop2: unable to read partition table [ 124.378449][ T7458] loop2: partition table beyond EOD, truncated [ 124.382505][ T7458] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 124.433096][ T7461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.371'. [ 124.977248][ T6020] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 125.136818][ T6020] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 125.144730][ T6020] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 125.169248][ T6020] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.172961][ T6020] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 125.176703][ T6020] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 125.183855][ T6020] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.187230][ T6020] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.191421][ T6020] usb 9-1: Product: syz [ 125.193144][ T6020] usb 9-1: Manufacturer: syz [ 125.203803][ T6020] cdc_wdm 9-1:1.0: skipping garbage [ 125.205552][ T6020] cdc_wdm 9-1:1.0: skipping garbage [ 125.215381][ T6020] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 125.217923][ T6020] cdc_wdm 9-1:1.0: Unknown control protocol [ 125.406736][ T7467] netlink: 32 bytes leftover after parsing attributes in process `syz.4.372'. [ 125.430870][ T7467] netlink: 76 bytes leftover after parsing attributes in process `syz.4.372'. [ 126.037337][ T63] Bluetooth: hci4: command 0x041b tx timeout [ 126.221539][ T7494] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 127.317706][ T5979] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 127.318225][ T63] Bluetooth: hci0: command 0x1003 tx timeout [ 127.756045][ T53] usb 9-1: USB disconnect, device number 5 [ 128.117360][ T5979] Bluetooth: hci4: command 0x041b tx timeout [ 128.200823][ T7526] tmpfs: Cannot disable swap on remount [ 128.221527][ T7526] Invalid ELF header magic: != ELF [ 128.292202][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 128.295589][ T7528] bridge_slave_1: left allmulticast mode [ 128.298443][ T7528] bridge_slave_1: left promiscuous mode [ 128.301858][ T7528] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.309754][ T7528] bridge_slave_0: left allmulticast mode [ 128.311815][ T7528] bridge_slave_0: left promiscuous mode [ 128.313744][ T7528] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.351628][ T40] audit: type=1326 audit(1756451733.942:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.0.382" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42579 code=0x0 [ 129.005945][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'. [ 130.098991][ T7552] netlink: 'syz.4.390': attribute type 1 has an invalid length. [ 130.102099][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 130.116649][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.390'. [ 130.207372][ T5979] Bluetooth: hci4: command 0x041b tx timeout [ 130.669825][ T6058] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 130.737347][ T6061] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 130.817275][ T6058] usb 5-1: Using ep0 maxpacket: 8 [ 130.821535][ T6058] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.825777][ T6058] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 130.829823][ T6058] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.836555][ T6058] usb 5-1: config 0 descriptor?? [ 130.887282][ T6061] usb 6-1: Using ep0 maxpacket: 8 [ 130.892234][ T6061] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 130.895819][ T6061] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 130.899265][ T6061] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.904472][ T6061] usb 6-1: config 0 descriptor?? [ 131.057841][ T6058] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 131.121244][ T6061] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 131.182457][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 131.252376][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.255861][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.297519][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.303775][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.321214][ T7560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.324871][ T7560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.363516][ T7560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.369845][ T7560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.522960][ T6058] usb 5-1: USB disconnect, device number 7 [ 131.628017][ T54] usb 6-1: USB disconnect, device number 9 [ 132.449587][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.451875][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.503936][ T7598] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 132.600863][ T5979] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 132.787301][ T6020] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 132.937295][ T6020] usb 9-1: Using ep0 maxpacket: 8 [ 132.950170][ T6020] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.960599][ T6020] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 132.964530][ T6020] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.970279][ T6020] usb 9-1: config 0 descriptor?? [ 133.187263][ T6020] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 133.388269][ T7601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.391909][ T7601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.414935][ T7601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.418160][ T7601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.601639][ T7620] bridge0: entered promiscuous mode [ 133.603700][ T7620] macvlan2: entered promiscuous mode [ 133.610395][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 133.633692][ T6061] usb 9-1: USB disconnect, device number 6 [ 134.390613][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 134.438866][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 134.567794][ T54] e1000 0000:00:06.0 eth0: Reset adapter [ 134.688400][ T54] e1000 0000:00:06.0 eth0: Reset adapter [ 134.947257][ T6041] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 134.963740][ T7655] team0: No ports can be present during mode change [ 134.967702][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 135.095335][ T7655] team0 (unregistering): Port device team_slave_0 removed [ 135.097252][ T6041] usb 9-1: Using ep0 maxpacket: 8 [ 135.102577][ T7655] team0 (unregistering): Port device team_slave_1 removed [ 135.103936][ T6041] usb 9-1: config 0 interface 0 has no altsetting 0 [ 135.107844][ T6041] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 135.111554][ T6041] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.120312][ T6041] usb 9-1: config 0 descriptor?? [ 135.151015][ T5385] udevd[5385]: worker [7137] terminated by signal 33 (Unknown signal 33) [ 135.153758][ T5385] udevd[5385]: worker [7137] failed while handling '/devices/platform/dummy_hcd.4/usb9/9-1' [ 135.548015][ T6041] usbhid 9-1:0.0: can't add hid device: -71 [ 135.550046][ T6041] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 135.556752][ T6041] usb 9-1: USB disconnect, device number 7 [ 136.083330][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 136.108932][ T7667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.918540][ T54] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 137.157289][ T63] Bluetooth: hci4: command 0x041b tx timeout [ 138.065735][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.433'. [ 139.065681][ T7699] autofs: Unknown parameter 'ZùqDõâÚCé7DìÛ&C$§”뙾‡4ã_É4DY!˜Ièu•²&¢}Æ‹žm{DL•"fa&Ñ]‘»¢J‡¨A' [ 139.247596][ T63] Bluetooth: hci4: command 0x041b tx timeout [ 139.374860][ T7707] overlayfs: missing 'lowerdir' [ 139.596378][ T7705] block device autoloading is deprecated and will be removed. [ 140.183019][ T7717] openvswitch: netlink: IP tunnel dst address not specified [ 140.725918][ T7737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'. [ 141.181186][ T5979] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.185140][ T5979] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.188524][ T5979] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.194203][ T5979] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.197103][ T5979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.317330][ T63] Bluetooth: hci4: command 0x041b tx timeout [ 141.336152][ T7742] chnl_net:caif_netlink_parms(): no params data found [ 141.423354][ T7742] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.426794][ T7742] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.430241][ T7742] bridge_slave_0: entered allmulticast mode [ 141.433635][ T7742] bridge_slave_0: entered promiscuous mode [ 141.437595][ T7742] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.439892][ T7742] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.442459][ T7742] bridge_slave_1: entered allmulticast mode [ 141.445242][ T7742] bridge_slave_1: entered promiscuous mode [ 141.481333][ T7742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.487310][ T7742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.524602][ T7742] team0: Port device team_slave_0 added [ 141.530470][ T7742] team0: Port device team_slave_1 added [ 141.565874][ T7742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.569749][ T7742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.579703][ T7742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.584482][ T7742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.586923][ T7742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.596297][ T7742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.666662][ T7742] hsr_slave_0: entered promiscuous mode [ 141.669790][ T7742] hsr_slave_1: entered promiscuous mode [ 141.673054][ T7742] debugfs: 'hsr0' already exists in 'hsr' [ 141.675205][ T7742] Cannot create hsr debugfs directory [ 141.769010][ T7753] 9pnet_fd: Insufficient options for proto=fd [ 141.787268][ T7753] netlink: 'syz.0.449': attribute type 2 has an invalid length. [ 142.088039][ T7742] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.093475][ T7742] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.103468][ T7742] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.108831][ T7742] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.174637][ T7742] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.177097][ T7742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.181095][ T7742] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.184332][ T7742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.225912][ T7742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.236165][ T7742] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.511575][ T7742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.889375][ T7742] veth0_vlan: entered promiscuous mode [ 142.896706][ T7742] veth1_vlan: entered promiscuous mode [ 142.913811][ T7742] veth0_macvtap: entered promiscuous mode [ 142.921529][ T7742] veth1_macvtap: entered promiscuous mode [ 142.932030][ T7742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.944697][ T7742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.957298][ T81] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.963847][ T81] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.969024][ T81] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.972494][ T81] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.143085][ T7295] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 143.237347][ T63] Bluetooth: hci0: command tx timeout [ 143.397382][ T63] Bluetooth: hci4: command 0x041b tx timeout [ 144.947285][ T7295] usb 9-1: Using ep0 maxpacket: 8 [ 144.955035][ T7295] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.958846][ T7295] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 144.961827][ T7295] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.967936][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.971678][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.995675][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.001274][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.008682][ T7295] usb 9-1: config 0 descriptor?? [ 145.013380][ T7295] usb 9-1: can't set config #0, error -71 [ 145.046610][ T7295] usb 9-1: USB disconnect, device number 8 [ 145.338449][ T63] Bluetooth: hci0: command tx timeout [ 145.343889][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 145.702738][ T7796] netlink: 96 bytes leftover after parsing attributes in process `syz.5.448'. [ 145.770772][ T40] audit: type=1800 audit(1756451751.352:983): pid=7799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.455" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 146.242921][ T7802] binder: 7801:7802 ioctl 400c620e 800005c0 returned -22 [ 146.316582][ T7805] tipc: Started in network mode [ 146.318077][ T7805] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 146.320107][ T7805] tipc: Enabled bearer , priority 10 [ 146.443887][ T7816] random: crng reseeded on system resumption [ 146.558884][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.461'. [ 146.563614][ T7815] netlink: 'syz.4.461': attribute type 30 has an invalid length. [ 146.579079][ T1177] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.582902][ T1177] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.591030][ T1177] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.594556][ T1177] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.234011][ T40] audit: type=1326 audit(1756451752.822:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 147.242850][ T40] audit: type=1326 audit(1756451752.822:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 147.260930][ T40] audit: type=1326 audit(1756451752.832:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.464" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 147.272098][ T40] audit: type=1326 audit(1756451752.832:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 147.281295][ T40] audit: type=1326 audit(1756451752.832:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.464" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 147.289002][ T40] audit: type=1326 audit(1756451752.842:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 147.295909][ T40] audit: type=1326 audit(1756451752.842:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 147.306875][ T40] audit: type=1326 audit(1756451752.842:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.464" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 147.319483][ T40] audit: type=1326 audit(1756451752.842:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7825 comm="syz.5.464" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7ffc0000 [ 147.328123][ T54] tipc: Node number set to 8432298 [ 147.397329][ T63] Bluetooth: hci0: command tx timeout [ 147.495370][ T7833] binder: 7832:7833 ioctl 400c620e 800005c0 returned -22 [ 147.742097][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.469'. [ 147.921437][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.468'. [ 149.311076][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 149.436946][ T7866] 9pnet_fd: Insufficient options for proto=fd [ 149.489023][ T63] Bluetooth: hci0: command tx timeout [ 149.737573][ T7873] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.739761][ T7873] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.741733][ T7873] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 149.744143][ T7873] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 149.751708][ T7873] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 149.753965][ T7873] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 149.773276][ T7873] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 149.777121][ T7873] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 149.782012][ T7873] CPU: 2 UID: 0 PID: 7873 Comm: syz.5.480 Not tainted syzkaller #0 PREEMPT(full) [ 149.786308][ T7873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.791020][ T7873] RIP: 0010:klist_put+0x4d/0x1b0 [ 149.793195][ T7873] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 8c 3e 0d [ 149.801325][ T7873] RSP: 0018:ffffc900069e72f0 EFLAGS: 00010202 [ 149.804186][ T7873] RAX: dffffc0000000000 RBX: ffff88804eab8c60 RCX: ffffc9000d7f2000 [ 149.807412][ T7873] RDX: 000000000000000b RSI: ffffffff8b861035 RDI: 0000000000000058 [ 149.810624][ T7873] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff211cefc [ 149.814075][ T7873] R10: ffffffff908e77e3 R11: 000000000000001e R12: 0000000000000000 [ 149.817507][ T7873] R13: 0000000000000001 R14: 1ffff92000d3ce66 R15: ffffffff908e77a0 [ 149.821527][ T7873] FS: 0000000000000000(0000) GS:ffff8880976c3000(0063) knlGS:00000000f5476b40 [ 149.825798][ T7873] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 149.828598][ T7873] CR2: 0000000080bbdffc CR3: 00000000767c1000 CR4: 0000000000352ef0 [ 149.832097][ T7873] Call Trace: [ 149.833575][ T7873] [ 149.834906][ T7873] klist_remove+0x13f/0x2e0 [ 149.836940][ T7873] ? kobject_move+0x15d/0x260 [ 149.839012][ T7873] ? __pfx_klist_remove+0x10/0x10 [ 149.841301][ T7873] ? __pfx_kobject_move+0x10/0x10 [ 149.843677][ T7873] ? get_device_parent+0x1ed/0x4e0 [ 149.846204][ T7873] device_move+0x12d/0x10d0 [ 149.848375][ T7873] hci_conn_del_sysfs+0x81/0x180 [ 149.850103][ T7873] hci_conn_del+0x5b3/0xe70 [ 149.851564][ T7873] hci_abort_conn_sync+0x76a/0xb20 [ 149.853171][ T7873] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 149.854823][ T7873] ? find_held_lock+0x2b/0x80 [ 149.856244][ T7873] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 149.858279][ T7873] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 149.860289][ T7873] hci_disconnect_all_sync.constprop.0+0x104/0x3c0 [ 149.862383][ T7873] hci_suspend_sync+0x821/0xb20 [ 149.864020][ T7873] ? __pfx_enable_work+0x10/0x10 [ 149.865772][ T7873] ? __pfx_hci_suspend_sync+0x10/0x10 [ 149.867623][ T7873] hci_suspend_dev+0x308/0x500 [ 149.869230][ T7873] ? __pfx_hci_suspend_dev+0x10/0x10 [ 149.871134][ T7873] ? rcu_barrier+0x341/0x6e0 [ 149.872568][ T7873] ? kobject_get+0xbb/0x150 [ 149.873924][ T7873] hci_suspend_notifier+0x28d/0x2f0 [ 149.875523][ T7873] notifier_call_chain+0xbc/0x410 [ 149.877107][ T7873] ? __pfx_hci_suspend_notifier+0x10/0x10 [ 149.879028][ T7873] blocking_notifier_call_chain_robust+0xc8/0x160 [ 149.881391][ T7873] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 149.884036][ T7873] ? do_raw_spin_unlock+0x172/0x230 [ 149.885768][ T7873] pm_notifier_call_chain_robust+0x27/0x60 [ 149.887839][ T7873] snapshot_open+0x189/0x2b0 [ 149.889410][ T7873] ? __pfx_snapshot_open+0x10/0x10 [ 149.891129][ T7873] misc_open+0x35d/0x420 [ 149.892583][ T7873] ? __pfx_misc_open+0x10/0x10 [ 149.894267][ T7873] chrdev_open+0x234/0x6a0 [ 149.895937][ T7873] ? __pfx_apparmor_file_open+0x10/0x10 [ 149.897800][ T7873] ? __pfx_chrdev_open+0x10/0x10 [ 149.899674][ T7873] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 149.901884][ T7873] do_dentry_open+0x982/0x1530 [ 149.903548][ T7873] ? __pfx_chrdev_open+0x10/0x10 [ 149.905116][ T7873] vfs_open+0x82/0x3f0 [ 149.906431][ T7873] path_openat+0x1de4/0x2cb0 [ 149.908143][ T7873] ? __pfx_path_openat+0x10/0x10 [ 149.909697][ T7873] ? __lock_acquire+0xb97/0x1ce0 [ 149.911671][ T7873] do_filp_open+0x20b/0x470 [ 149.913565][ T7873] ? __pfx_do_filp_open+0x10/0x10 [ 149.915449][ T7873] ? _raw_spin_unlock+0x28/0x50 [ 149.917178][ T7873] ? alloc_fd+0x471/0x7d0 [ 149.918658][ T7873] do_sys_openat2+0x11b/0x1d0 [ 149.920521][ T7873] ? __pfx_do_sys_openat2+0x10/0x10 [ 149.922299][ T7873] ? __pfx_do_futex+0x10/0x10 [ 149.923743][ T7873] ? __pfx___seccomp_filter+0x10/0x10 [ 149.925344][ T7873] __ia32_compat_sys_openat+0x16d/0x210 [ 149.928122][ T7873] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 149.930132][ T7873] ? __secure_computing+0x21c/0x320 [ 149.932198][ T7873] __do_fast_syscall_32+0x7c/0x3a0 [ 149.934227][ T7873] do_fast_syscall_32+0x32/0x80 [ 149.935796][ T7873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.937842][ T7873] RIP: 0023:0xf7f52579 [ 149.939391][ T7873] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 149.945332][ T7873] RSP: 002b:00000000f547655c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 149.948345][ T7873] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800002c0 [ 149.951389][ T7873] RDX: 0000000000007e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.954180][ T7873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.956788][ T7873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.959493][ T7873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.962156][ T7873] [ 149.963149][ T7873] Modules linked in: [ 149.965247][ T7873] ---[ end trace 0000000000000000 ]--- [ 149.968497][ T7873] RIP: 0010:klist_put+0x4d/0x1b0 [ 149.970296][ T7873] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 8c 3e 0d SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 149.978181][ T7873] RSP: 0018:ffffc900069e72f0 EFLAGS: 00010202 [ 149.983087][ T7873] RAX: dffffc0000000000 RBX: ffff88804eab8c60 RCX: ffffc9000d7f2000 [ 149.986361][ T7873] RDX: 000000000000000b RSI: ffffffff8b861035 RDI: 0000000000000058 [ 149.990819][ T7873] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff211cefc [ 150.002435][ T7873] R10: ffffffff908e77e3 R11: 000000000000001e R12: 0000000000000000 [ 150.017814][ T7873] R13: 0000000000000001 R14: 1ffff92000d3ce66 R15: ffffffff908e77a0 [ 150.023860][ T7873] FS: 0000000000000000(0000) GS:ffff8880975c3000(0063) knlGS:00000000f5476b40 [ 150.027779][ T7873] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 150.030151][ T7873] CR2: 0000000080132000 CR3: 00000000767c1000 CR4: 0000000000352ef0 [ 150.032789][ T7873] Kernel panic - not syncing: Fatal exception [ 150.035506][ T7873] Kernel Offset: disabled [ 150.037002][ T7873] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:15:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000007 RBX=ffff888021338000 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8c162c80 RDI=ffffffff8df58e68 RBP=0000000000000001 RSP=ffffc90000007e60 R8 =0000000000000000 R9 =ffffed1004267086 R10=ffff888021338437 R11=0000000000000001 R12=0000000000000001 R13=0000000000000008 R14=ffff88802b3241b4 R15=0000000000000001 RIP=ffffffff81884929 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000030bffffc CR3=000000004c192000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000058933c RBX=0000000000000001 RCX=ffffffff8b90abf9 RDX=ffffed1005666656 RSI=ffffffff8c162c80 RDI=ffffffff8190ccb1 RBP=ffffed1003bd8488 RSP=ffffc9000046fdf8 R8 =0000000000000000 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801dec2440 R14=ffffffff90ab8390 R15=0000000000000000 RIP=ffffffff8b90975f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080019680 CR3=00000000707be000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85617075 RDI=ffffffff9b0f9700 RBP=ffffffff9b0f96c0 RSP=ffffc900069e6cf0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000066 R14=ffffffff9b0f96c0 R15=ffffffff85617010 RIP=ffffffff8561709f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080bbdffc CR3=00000000767c1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000bfdfdfdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3070656e622f7465 6e2f6c6175747269 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005582f8e86a10 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005582f8e75510 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efcb5df1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c431d1c1a141601 5c43000611171d5c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 007325203a656c69 66207974706d6520 676e697070696b53 006572005b3f2a00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6c6174735f7563 725f78616d006c74 6373797300313d65 6c62616e65000035 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2e65726f632e74 656e2e6c74637379 73203034313d6873 657268745f676f64 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000015360c RBX=0000000000000003 RCX=ffffffff8b90abf9 RDX=ffffed10056a6656 RSI=ffffffff8c162c80 RDI=ffffffff8190ccb1 RBP=ffffed1003868000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801c340000 R14=ffffffff90ab8390 R15=0000000000000000 RIP=ffffffff8b90975f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057b48404 CR3=000000004bc91000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fc000000 Opmask01=0000000000000000 Opmask02=0000000003ffffff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005582f8e7c7c0 00005582f8094040 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005582f8e7c7c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005582f8e826a0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005582f8e75770 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007efcb5df1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c431d1c1a141601 5c43000611171d5c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005582f8e71680 0000736575657571 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00302d78742f7365 756575712f307065 6e622f74656e2f6c 6175747269762f73 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003070 656e622f74656e2f 6c6175747269762f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005582f8e87150 00005582f8e87028 0000000000000041 000000007063742d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005587a0c85bbd 0000000000000021 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000