last executing test programs: 6.130267843s ago: executing program 2 (id=303): r0 = socket$pppoe(0x18, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) ioctl$KVM_SET_FPU(r7, 0x41a0ae8d, &(0x7f0000000140)={'\x00', 0x4, 0xb7f4, 0xb, 0x0, 0x5, 0xeeee0000, 0xf000, '\x00', 0xdc18}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ptrace(0x10, 0x1) r8 = accept4(r1, &(0x7f0000000480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x80, 0x800) ioctl$PPPOEIOCDFWD(r0, 0x40047459, 0x1000000000000) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000000a000000000000000000000100000a080002400000000014000000160a0104000000000000000001000000140000000000000000000000000000000aa26463bd544b6f17ad316bd963cc2cf5aac4c0103693de3c5e47a950313e515b02b79eff40909ffe585fceda9d99e095"], 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x8000) 4.648386452s ago: executing program 2 (id=312): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xd, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x4d, 0x11e41e7a, 0x20000000, 0x2000000, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f00000001c0)='GPL\x00', 0x6, 0x93, &(0x7f00000004c0)=""/147, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000007000000000001"], 0x50) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x7) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r7 = epoll_create1(0x0) r8 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000040)={0x2}) read$hiddev(0xffffffffffffffff, &(0x7f0000002300)=""/102, 0x66) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) 3.920441469s ago: executing program 1 (id=317): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="080003161900", @ANYRES32, @ANYBLOB="08001b0000"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aab5fb91a4fc73b36849c8a9be678e5df8b0291c0daa0a59ee301d2a30c7e3"], 0xc8}}, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="b0000000daffffff", @ANYRES64=0x3, @ANYBLOB="040000000000000000000000000000000000000000000080040000000000000000000000ff000000010000000000f900060000000000000005000000000000009c0000000000000081000000000000007e0000000000000000000000070000006e04000000800000508c0000", @ANYRES32, @ANYRES32, @ANYBLOB="04000000810000000000000000000000000000000200000000000000010000000700"/43], 0xb0) dup(0xffffffffffffffff) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 3.25936158s ago: executing program 2 (id=319): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b48, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x38, 0x0, 0x9, 0x305, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r5 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0205710, &(0x7f00000004c0)={0x1000000, 0xff, 0x10, 0x0, 0x3}) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000000010900020073797a3200cb6b7fd2850dbe6ea5b78c571188dd"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 2.850404061s ago: executing program 1 (id=320): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) syz_init_net_socket$netrom(0x6, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setscheduler(r0, 0x5, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2c811}, 0x48050) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0006}]}) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x3) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)="437550b523af1a7f2da599e5139f10a0f56401a09a7d028e470e28217045a0db9dba02d08dfe3937f513c950593b1b21f1a9", 0x32, 0x20004801, &(0x7f0000000400)={0x2, 0x4e24, @empty}, 0x10) r4 = socket(0xb, 0x800, 0xfffff001) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) 2.250329804s ago: executing program 3 (id=321): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180), &(0x7f0000000280)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x129460, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0xa7c}, 0x38) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x8000) 2.249999624s ago: executing program 0 (id=322): creat(&(0x7f0000000240)='./file0\x00', 0x0) (async) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) (async) creat(&(0x7f0000000300)='./file0\x00', 0x0) (async, rerun: 64) openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) write$P9_RGETATTR(r0, &(0x7f0000000180)={0xa0, 0x19, 0x2, {0x2200, {0x20, 0x0, 0x7}, 0x100, r1, 0xee00, 0x6, 0x7, 0x0, 0xdd38, 0x5, 0x6, 0x3b80000000000000, 0x800, 0x14, 0x576, 0xfffffffffffffffa, 0x1, 0x2, 0xf8, 0xd013}}, 0xa0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async, rerun: 32) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) (rerun: 32) mknod$loop(&(0x7f00000002c0)='./file1\x00', 0x2000, 0x1) r2 = semget$private(0x0, 0x4, 0x5) (async) r3 = add_key$keyring(&(0x7f0000000480), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)="3373c4afd5922a65f55bc7d3e64bcbd10b716f30e87138f5cc07b5adfb8fdadb5f72d664018c7506e149853614f562ef1678cf2f148a8bd3d3410e2c0aae03cc4b0cf84ea3107b7d62dd4b8bd08999e98275ca5355462ee569ebd80574ee2aab94bb7b05042f8d85ef5f6ab1942bad62e67a3801864b3c7621576087723e9bd6bea3b9176e325a22ce38466929", 0x8d}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)="5197d3", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="dfcc665d34c00a834e66de4177cf", 0xe}], 0x1}}], 0x3, 0x4048040) shutdown(r4, 0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000001700)) (async) add_key$user(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, &(0x7f00000007c0)="e419b66e", 0x4, r3) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000003c0)={0x8, &(0x7f0000000300)=[{0x4, 0xa1, 0xa, 0x10000}, {0x704, 0x6, 0x7}, {0xb2b, 0x8, 0x5, 0x6}, {0x2c6c, 0x80, 0x8, 0x9}, {0x4, 0xa, 0x1, 0x81}, {0x6355, 0x2, 0x6, 0x7ff}, {0x0, 0x7, 0x1c, 0xf1d}, {0x200, 0x4, 0xff, 0xc0d2}]}, 0x8) (async, rerun: 64) semctl$GETVAL(r2, 0x64d870ed6f7faad, 0xc, 0x0) 2.222657054s ago: executing program 3 (id=323): syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, &(0x7f0000000040)=0x90) 2.222410258s ago: executing program 0 (id=324): syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc04c5609, &(0x7f0000000340)={0x4, 0xa, 0x4, 0x40, 0x4, {}, {0x2, 0xc, 0x0, 0x2a, 0x0, 0x1, "a7d7cd58"}, 0x7, 0x4, {}, 0x4, 0x0, r1}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, &(0x7f0000000040)=0x90) 2.19972286s ago: executing program 2 (id=325): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe47, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000015c0)=ANY=[@ANYRESOCT=r4, @ANYBLOB="2b03204000000007e9ff02800bcec70067656e653c0002800800050011eb409b510000001400070000000000"], 0x74}}, 0x0) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) read(r4, &(0x7f0000001640)=""/83, 0x53) ioprio_set$uid(0x3, 0x0, 0x0) read(r6, 0x0, 0x0) 2.199476459s ago: executing program 0 (id=326): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r3, 0x4b48, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x38, 0x0, 0x9, 0x305, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x38}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r5 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r5, 0xc0205710, &(0x7f00000004c0)={0x1000000, 0xff, 0x10, 0x0, 0x3}) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000000010900020073797a3200cb6b7fd2850dbe6ea5b78c571188dd"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 2.144244395s ago: executing program 3 (id=327): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_OPEN(r2, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x0, 0x6}}, 0x20) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) 2.136661209s ago: executing program 3 (id=328): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4008556c, 0x6) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 1.876438504s ago: executing program 1 (id=329): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) setrlimit(0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aab5fb91a4fc73b36849c8a9be678e5df8b0291c0daa0a59ee301d2a30c7e3"], 0xc8}}, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="b0000000daffffff", @ANYRES64=0x3, @ANYBLOB="040000000000000000000000000000000000000000000080040000000000000000000000ff000000010000000000f900060000000000000005000000000000009c0000000000000081000000000000007e0000000000000000000000070000006e04000000800000508c0000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="04000000810000000000000000000000000000000200000000000000010000000700"/43], 0xb0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r8, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 1.841836595s ago: executing program 3 (id=330): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) setrlimit(0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aab5fb91a4fc73b36849c8a9be678e5df8b0291c0daa0a59ee301d2a30c7e3"], 0xc8}}, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="b0000000daffffff", @ANYRES64=0x3, @ANYBLOB="040000000000000000000000000000000000000000000080040000000000000000000000ff000000010000000000f900060000000000000005000000000000009c0000000000000081000000000000007e0000000000000000000000070000006e04000000800000508c0000", @ANYRES32, @ANYRES32, @ANYBLOB="04000000810000000000000000000000000000000200000000000000010000000700"/43], 0xb0) r5 = dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f00000000c0)={0x0, 0x80600}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r6, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 1.83829927s ago: executing program 0 (id=331): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180), &(0x7f0000000280)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x129460, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0xa7c}, 0x38) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x8000) 1.740162611s ago: executing program 0 (id=332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32, @ANYBLOB="080003161900000008000200", @ANYRES32, @ANYBLOB="08001b0000"], 0x44}}, 0x0) r1 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setrlimit(0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aab5fb91a4fc73b36849c8a9be678e5df8b0291c0daa0a59ee301d2a30c7e3"], 0xc8}}, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="b0000000daffffff", @ANYRES64=0x3, @ANYBLOB="040000000000000000000000000000000000000000000080040000000000000000000000ff000000010000000000f900060000000000000005000000000000009c0000000000000081000000000000007e0000000000000000000000070000006e04000000800000508c0000", @ANYRES32, @ANYRES32, @ANYBLOB="04000000810000000000000000000000000000000200000000000000010000000700"/43], 0xb0) r6 = dup(0xffffffffffffffff) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f00000000c0)={0x0, 0x80600}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r7, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 891.081537ms ago: executing program 1 (id=333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0xdda4e2fb06c47918}, 0xc880) 699.162996ms ago: executing program 1 (id=334): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = io_uring_setup(0x8a9, &(0x7f0000000300)={0x0, 0xe4ac, 0x80, 0x1, 0x390}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_UNREGISTER_NAPI(r1, 0x1c, &(0x7f0000000380), 0x1) r2 = signalfd(r1, &(0x7f0000000000)={[0x7, 0x101]}, 0x8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1403, 0x400, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x9, 0xff01, 0x0, 0x0, 0x3}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) io_uring_setup(0x8a9, &(0x7f0000000300)={0x0, 0xe4ac, 0x80, 0x1, 0x390}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) io_uring_register$IORING_UNREGISTER_NAPI(r1, 0x1c, &(0x7f0000000380), 0x1) (async) signalfd(r1, &(0x7f0000000000)={[0x7, 0x101]}, 0x8) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1403, 0x400, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0x4, 0x9, 0xff01, 0x0, 0x0, 0x3}) (async) 697.083766ms ago: executing program 2 (id=335): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x20040000) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 615.936638ms ago: executing program 1 (id=336): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000000080)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x8000, @ipv4}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00)\x00\x00\x002\x00'], 0x20}}], 0x1, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_getoverrun(0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="11"], 0x14) r7 = epoll_create1(0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000000c0)={0xa0002000}) preadv(r8, &(0x7f00000007c0)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1, 0x100, 0x400005) epoll_pwait(r7, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 599.550234ms ago: executing program 2 (id=337): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="080003161900", @ANYRES32, @ANYBLOB="08001b0000"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aab5fb91a4fc73b36849c8a9be678e5df8b0291c0daa0a59ee301d2a30c7e3"], 0xc8}}, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="b0000000daffffff", @ANYRES64=0x3, @ANYBLOB="040000000000000000000000000000000000000000000080040000000000000000000000ff000000010000000000f900060000000000000005000000000000009c0000000000000081000000000000007e0000000000000000000000070000006e04000000800000508c0000", @ANYRES32, @ANYRES32, @ANYBLOB="04000000810000000000000000000000000000000200000000000000010000000700"/43], 0xb0) dup(0xffffffffffffffff) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 529.899415ms ago: executing program 3 (id=338): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xd, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x4d, 0x11e41e7a, 0x20000000, 0x2000000, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f00000001c0)='GPL\x00', 0x6, 0x93, &(0x7f00000004c0)=""/147, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000007000000000001"], 0x50) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x7) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r4, &(0x7f0000002300)=""/102, 0x66) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) 0s ago: executing program 0 (id=339): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0xfffffffd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000280)=0x90000) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0900236942cb0ebd5d6d477a8ee7fb9d4daa0fce1bf9a0e491d950349c16548479667db5661327422f033bd4debceb12"]) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_io_uring_setup(0x236, 0x0, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:62951' (ED25519) to the list of known hosts. [ 47.827431][ T5930] cgroup: Unknown subsys name 'net' [ 47.946554][ T5930] cgroup: Unknown subsys name 'cpuset' [ 47.950901][ T5930] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.862519][ T5930] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.758095][ T5945] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.761055][ T5945] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.763635][ T5945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.766283][ T5945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.768735][ T5945] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.773043][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.776861][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.781211][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.781469][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.782768][ T5945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.784348][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.784511][ T5945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.785011][ T5945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.787291][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.788955][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.789388][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.791634][ T5951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.793275][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.810035][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.813049][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.000044][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 53.031261][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 53.174724][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.177509][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.179968][ T5942] bridge_slave_0: entered allmulticast mode [ 53.182576][ T5942] bridge_slave_0: entered promiscuous mode [ 53.186000][ T5956] chnl_net:caif_netlink_parms(): no params data found [ 53.216308][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.218586][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.220855][ T5942] bridge_slave_1: entered allmulticast mode [ 53.223548][ T5942] bridge_slave_1: entered promiscuous mode [ 53.256296][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.258589][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.261281][ T5943] bridge_slave_0: entered allmulticast mode [ 53.263940][ T5943] bridge_slave_0: entered promiscuous mode [ 53.300591][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.311911][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.316269][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.318519][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.320760][ T5943] bridge_slave_1: entered allmulticast mode [ 53.323339][ T5943] bridge_slave_1: entered promiscuous mode [ 53.417489][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.429092][ T5942] team0: Port device team_slave_0 added [ 53.432421][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.476444][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 53.481524][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.484358][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.486752][ T5956] bridge_slave_0: entered allmulticast mode [ 53.489305][ T5956] bridge_slave_0: entered promiscuous mode [ 53.492890][ T5942] team0: Port device team_slave_1 added [ 53.547551][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.549939][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.552187][ T5956] bridge_slave_1: entered allmulticast mode [ 53.554979][ T5956] bridge_slave_1: entered promiscuous mode [ 53.588273][ T5943] team0: Port device team_slave_0 added [ 53.597933][ T5943] team0: Port device team_slave_1 added [ 53.615324][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.618188][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.628686][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.705955][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.708140][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.717410][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.726203][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.729153][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.739784][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.745946][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.748870][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.759123][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.766315][ T5956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.774763][ T5956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.864091][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.866365][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.868693][ T5944] bridge_slave_0: entered allmulticast mode [ 53.871377][ T5944] bridge_slave_0: entered promiscuous mode [ 53.876734][ T5956] team0: Port device team_slave_0 added [ 53.880231][ T5956] team0: Port device team_slave_1 added [ 53.906787][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.909140][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.911396][ T5944] bridge_slave_1: entered allmulticast mode [ 53.914424][ T5944] bridge_slave_1: entered promiscuous mode [ 54.068657][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.071500][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.082230][ T5956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.092826][ T5942] hsr_slave_0: entered promiscuous mode [ 54.096200][ T5942] hsr_slave_1: entered promiscuous mode [ 54.101306][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.108774][ T5943] hsr_slave_0: entered promiscuous mode [ 54.111917][ T5943] hsr_slave_1: entered promiscuous mode [ 54.115001][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.118269][ T5943] Cannot create hsr debugfs directory [ 54.121224][ T5956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.124208][ T5956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.132566][ T5956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.141689][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.173940][ T5944] team0: Port device team_slave_0 added [ 54.197875][ T5944] team0: Port device team_slave_1 added [ 54.316420][ T5956] hsr_slave_0: entered promiscuous mode [ 54.319437][ T5956] hsr_slave_1: entered promiscuous mode [ 54.322285][ T5956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.325509][ T5956] Cannot create hsr debugfs directory [ 54.332005][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.334279][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.342094][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.347526][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.349680][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.357537][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.553643][ T5944] hsr_slave_0: entered promiscuous mode [ 54.556842][ T5944] hsr_slave_1: entered promiscuous mode [ 54.559794][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.562940][ T5944] Cannot create hsr debugfs directory [ 54.691616][ T5942] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.699632][ T5942] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.708487][ T5942] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.714750][ T5942] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.785661][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.791406][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.798390][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.805279][ T5949] Bluetooth: hci3: command tx timeout [ 54.813911][ T5949] Bluetooth: hci0: command tx timeout [ 54.814419][ T5945] Bluetooth: hci1: command tx timeout [ 54.816511][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.852325][ T5956] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.857665][ T5956] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.867230][ T5956] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.871777][ T5956] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.884001][ T5945] Bluetooth: hci2: command tx timeout [ 54.920924][ T5944] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.927179][ T5944] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.937687][ T5944] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.942133][ T5944] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.960533][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.999509][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.002868][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.029331][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.031647][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.035444][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.037658][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.049320][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.059419][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.061739][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.082868][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.085687][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.102831][ T5956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.130523][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.137183][ T5956] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.154273][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.156558][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.163898][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.172814][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.175065][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.197676][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.199875][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.206813][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.209064][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.260768][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.290240][ T5942] veth0_vlan: entered promiscuous mode [ 55.299238][ T5942] veth1_vlan: entered promiscuous mode [ 55.328631][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.343117][ T5942] veth0_macvtap: entered promiscuous mode [ 55.348061][ T5942] veth1_macvtap: entered promiscuous mode [ 55.362286][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.374944][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.389510][ T5943] veth0_vlan: entered promiscuous mode [ 55.395031][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.402373][ T5942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.406270][ T5942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.409530][ T5942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.412783][ T5942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.425241][ T5943] veth1_vlan: entered promiscuous mode [ 55.443158][ T5956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.498499][ T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.501850][ T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.508982][ T5944] veth0_vlan: entered promiscuous mode [ 55.530271][ T5943] veth0_macvtap: entered promiscuous mode [ 55.539386][ T5944] veth1_vlan: entered promiscuous mode [ 55.543291][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.547554][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.548574][ T5943] veth1_macvtap: entered promiscuous mode [ 55.561885][ T5956] veth0_vlan: entered promiscuous mode [ 55.577774][ T5956] veth1_vlan: entered promiscuous mode [ 55.584394][ T5942] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.584785][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.600034][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.627229][ T5943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.630711][ T5943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.638440][ T5943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.642204][ T5943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.652296][ T5944] veth0_macvtap: entered promiscuous mode [ 55.672460][ T5956] veth0_macvtap: entered promiscuous mode [ 55.678781][ T5944] veth1_macvtap: entered promiscuous mode [ 55.689829][ T5956] veth1_macvtap: entered promiscuous mode [ 55.707393][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.718546][ T5956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.722492][ T5956] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.725747][ T5956] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.728459][ T5956] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.731251][ T5956] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.738665][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.753337][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.760716][ T5944] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.764746][ T5944] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.768362][ T5944] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.772041][ T5944] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.803209][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.808226][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.858616][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.860303][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.862418][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.865173][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.898508][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.901189][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.937154][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.939653][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.979929][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.983239][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.053722][ T6009] netlink: 'syz.1.2': attribute type 2 has an invalid length. [ 56.056406][ T6009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.077543][ T6011] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 56.080965][ T6011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.883762][ T5945] Bluetooth: hci0: command tx timeout [ 56.885105][ T5949] Bluetooth: hci3: command tx timeout [ 56.886039][ T5307] Bluetooth: hci1: command tx timeout [ 56.964090][ T5307] Bluetooth: hci2: command tx timeout [ 57.139168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.141792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.143806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.146198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.148055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.157277][ T6027] block nbd3: not configured, cannot reconfigure [ 57.157650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.163852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.223569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 57.264916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.270192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.657010][ T6038] ieee802154 phy0 wpan0: encryption failed: -22 [ 58.047177][ T6044] netlink: 'syz.0.11': attribute type 2 has an invalid length. [ 58.049825][ T6044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.075189][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 58.313920][ T6042] team0 (unregistering): Port device team_slave_0 removed [ 58.353934][ T6042] team0 (unregistering): Port device team_slave_1 removed [ 58.965767][ T5307] Bluetooth: hci1: command tx timeout [ 58.967529][ T5307] Bluetooth: hci0: command tx timeout [ 58.969294][ T5307] Bluetooth: hci3: command tx timeout [ 58.995854][ T6064] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.14'. [ 59.016539][ T6059] wireguard0: entered promiscuous mode [ 59.018690][ T6059] wireguard0: entered allmulticast mode [ 59.044846][ T5307] Bluetooth: hci2: command tx timeout [ 59.207070][ T6069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14'. [ 60.113031][ T6085] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.18'. [ 60.251711][ T6089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18'. [ 60.259501][ T6090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17'. [ 60.706563][ T6096] befs: (nullb0): No write support. Marking filesystem read-only [ 60.710887][ T6096] befs: (nullb0): invalid magic header [ 61.062014][ T5307] Bluetooth: hci3: command tx timeout [ 61.066248][ T5307] Bluetooth: hci0: command tx timeout [ 61.068154][ T5307] Bluetooth: hci1: command tx timeout [ 61.123556][ T5949] Bluetooth: hci2: command tx timeout [ 61.536889][ T6102] netlink: 'syz.0.21': attribute type 2 has an invalid length. [ 61.541263][ T6102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.701641][ T6106] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.20'. [ 61.720760][ T6108] netlink: 'syz.1.22': attribute type 2 has an invalid length. [ 61.724255][ T6108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.879225][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'. [ 62.330305][ T6118] netlink: 'syz.3.23': attribute type 2 has an invalid length. [ 62.333109][ T6118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.666111][ T6121] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.24'. [ 62.849901][ T6125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.24'. [ 63.239986][ T6132] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.26'. [ 63.691110][ T6139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.26'. [ 64.326222][ T6148] netlink: 'syz.2.29': attribute type 2 has an invalid length. [ 64.328961][ T6148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 64.478221][ T6152] netlink: 'syz.0.30': attribute type 2 has an invalid length. [ 64.483301][ T6152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 65.256544][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.31'. [ 65.417812][ T6168] tc_dump_action: action bad kind [ 65.422815][ T6171] sctp: [Deprecated]: syz.0.34 (pid 6171) Use of int in max_burst socket option. [ 65.422815][ T6171] Use struct sctp_assoc_value instead [ 65.451377][ T6172] befs: (nullb0): No write support. Marking filesystem read-only [ 65.454859][ T6172] befs: (nullb0): invalid magic header [ 65.465032][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 66.172015][ T6187] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.37'. [ 66.201212][ T6188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.36'. [ 66.345216][ T6190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.37'. [ 67.332059][ T6202] trusted_key: encrypted_key: insufficient parameters specified [ 67.646306][ T6207] netlink: 24 bytes leftover after parsing attributes in process `syz.0.40'. [ 67.729305][ T6209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.42'. [ 68.177136][ T6216] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.44'. [ 68.297106][ T6218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.44'. [ 68.846520][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 69.284338][ T5949] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 69.287586][ T5949] Bluetooth: hci2: Injecting HCI hardware error event [ 69.290996][ T5307] Bluetooth: hci2: hardware error 0x00 [ 69.425597][ T6236] netlink: 'syz.3.49': attribute type 2 has an invalid length. [ 69.428241][ T6236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.430193][ T40] audit: type=1326 audit(1748971200.319:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.0.48" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 69.439144][ T40] audit: type=1326 audit(1748971200.319:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.0.48" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 69.445514][ T40] audit: type=1326 audit(1748971200.319:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.0.48" exe="/syz-executor" sig=0 arch=40000003 syscall=376 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 69.451619][ T40] audit: type=1326 audit(1748971200.319:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.0.48" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 69.537737][ T40] audit: type=1326 audit(1748971200.319:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.0.48" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 69.546705][ T40] audit: type=1326 audit(1748971200.429:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.0.48" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 69.552891][ T40] audit: type=1326 audit(1748971200.429:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.0.48" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 69.559893][ T40] audit: type=1326 audit(1748971200.429:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.0.48" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 69.567387][ T40] audit: type=1326 audit(1748971200.429:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.0.48" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 69.583582][ T40] audit: type=1326 audit(1748971200.439:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6225 comm="syz.0.48" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x7ffc0000 [ 69.672396][ T6240] futex_wake_op: syz.2.50 tries to shift op by 32; fix this program [ 70.530378][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.52'. [ 70.709329][ T6255] netlink: 'syz.3.53': attribute type 2 has an invalid length. [ 70.712526][ T6255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.760160][ T6256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.51'. [ 70.816500][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.847843][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.365022][ T5307] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 71.745109][ T6274] netlink: 'syz.1.58': attribute type 2 has an invalid length. [ 71.748780][ T6274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 72.298412][ T6286] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.59'. [ 72.436516][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.59'. [ 72.680906][ T6293] sctp: [Deprecated]: syz.0.62 (pid 6293) Use of int in max_burst socket option. [ 72.680906][ T6293] Use struct sctp_assoc_value instead [ 72.689545][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 72.931976][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 73.354375][ T6306] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.64'. [ 73.514189][ T6308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.64'. [ 74.579757][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 74.658077][ T6297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.63'. [ 74.680141][ T6316] netlink: 'syz.1.66': attribute type 2 has an invalid length. [ 74.683137][ T6316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.925423][ T6323] netdevsim netdevsim2: Direct firmware load for ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ failed with error -2 [ 74.929374][ T6323] netdevsim netdevsim2: Falling back to sysfs fallback for: ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ [ 74.975513][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 75.556544][ T6333] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.69'. [ 75.704894][ T6337] FAULT_INJECTION: forcing a failure. [ 75.704894][ T6337] name failslab, interval 1, probability 0, space 0, times 1 [ 75.709065][ T6337] CPU: 1 UID: 0 PID: 6337 Comm: syz.1.70 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 75.709079][ T6337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.709086][ T6337] Call Trace: [ 75.709090][ T6337] [ 75.709095][ T6337] dump_stack_lvl+0x16c/0x1f0 [ 75.709109][ T6337] should_fail_ex+0x512/0x640 [ 75.709123][ T6337] ? fs_reclaim_acquire+0xae/0x150 [ 75.709138][ T6337] ? tomoyo_encode2+0x100/0x3e0 [ 75.709150][ T6337] should_failslab+0xc2/0x120 [ 75.709162][ T6337] __kmalloc_noprof+0xd2/0x510 [ 75.709179][ T6337] ? d_absolute_path+0x136/0x1a0 [ 75.709194][ T6337] tomoyo_encode2+0x100/0x3e0 [ 75.709207][ T6337] tomoyo_encode+0x29/0x50 [ 75.709219][ T6337] tomoyo_realpath_from_path+0x18f/0x6e0 [ 75.709235][ T6337] tomoyo_path_number_perm+0x245/0x580 [ 75.709252][ T6337] ? tomoyo_path_number_perm+0x237/0x580 [ 75.709270][ T6337] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 75.709301][ T6337] ? d_alloc_parallel+0x979/0x12e0 [ 75.709315][ T6337] ? current_check_access_path+0x33c/0x460 [ 75.709334][ T6337] ? __pfx_current_check_access_path+0x10/0x10 [ 75.709357][ T6337] tomoyo_path_mknod+0x10c/0x190 [ 75.709371][ T6337] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 75.709386][ T6337] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.709406][ T6337] security_path_mknod+0x161/0x310 [ 75.709425][ T6337] lookup_open.isra.0+0xc17/0x1580 [ 75.709444][ T6337] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 75.709466][ T6337] ? __pfx_down_write+0x10/0x10 [ 75.709477][ T6337] ? mnt_get_write_access+0x20c/0x300 [ 75.709492][ T6337] path_openat+0x893/0x2cb0 [ 75.709514][ T6337] ? __pfx_path_openat+0x10/0x10 [ 75.709534][ T6337] do_filp_open+0x20b/0x470 [ 75.709551][ T6337] ? __pfx_do_filp_open+0x10/0x10 [ 75.709578][ T6337] ? _raw_spin_unlock+0x28/0x50 [ 75.709595][ T6337] ? alloc_fd+0x471/0x7d0 [ 75.709614][ T6337] do_sys_openat2+0x11b/0x1d0 [ 75.709628][ T6337] ? __pfx_do_sys_openat2+0x10/0x10 [ 75.709643][ T6337] ? __fget_files+0x20e/0x3c0 [ 75.709657][ T6337] ? handle_mm_fault+0x240/0xd10 [ 75.709675][ T6337] __ia32_compat_sys_openat+0x16d/0x210 [ 75.709690][ T6337] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 75.709704][ T6337] ? ksys_write+0x1ac/0x250 [ 75.709722][ T6337] ? rcu_is_watching+0x12/0xc0 [ 75.709736][ T6337] __do_fast_syscall_32+0x7c/0x3a0 [ 75.709749][ T6337] do_fast_syscall_32+0x32/0x80 [ 75.709760][ T6337] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.709773][ T6337] RIP: 0023:0xf711e579 [ 75.709782][ T6337] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 75.709793][ T6337] RSP: 002b:00000000f50ed55c EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 75.709803][ T6337] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800001c0 [ 75.709810][ T6337] RDX: 0000000000004842 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.709816][ T6337] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.709822][ T6337] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 75.709828][ T6337] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.709841][ T6337] [ 75.709853][ T6337] ERROR: Out of memory at tomoyo_realpath_from_path. [ 75.722933][ T6331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.69'. [ 75.861832][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 75.958954][ T6343] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.72'. [ 76.514348][ T6353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.72'. [ 78.550215][ T6392] evm: overlay not supported [ 78.994135][ T6400] __nla_validate_parse: 5 callbacks suppressed [ 78.994150][ T6400] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.85'. [ 79.004300][ T6400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.85'. [ 79.823557][ T6407] netlink: 96 bytes leftover after parsing attributes in process `syz.2.86'. [ 79.880788][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 80.007437][ T6410] Zero length message leads to an empty skb [ 80.659943][ T6425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.89'. [ 80.947765][ T6433] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.163562][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 81.193105][ T53] cfg80211: failed to load regulatory.db [ 81.313739][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 81.317504][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.320549][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 81.323275][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 81.327022][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 81.330367][ T10] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 81.332978][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.357649][ T10] hub 7-1:1.0: bad descriptor, ignoring hub [ 81.359874][ T10] hub 7-1:1.0: probe with driver hub failed with error -5 [ 81.385746][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 81.388316][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 81.401007][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 81.403379][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 81.608566][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.611453][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.818834][ T6431] netlink: 830 bytes leftover after parsing attributes in process `syz.2.91'. [ 81.823016][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'. [ 81.826652][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'. [ 81.944647][ T61] usb 7-1: USB disconnect, device number 2 [ 82.009904][ T6450] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.94'. [ 82.303732][ T6453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.94'. [ 82.655593][ T6460] fuse: Bad value for 'group_id' [ 82.657363][ T6460] fuse: Bad value for 'group_id' [ 82.682630][ T6460] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 82.685367][ T6460] overlayfs: failed to set xattr on upper [ 82.687357][ T6460] overlayfs: ...falling back to redirect_dir=nofollow. [ 82.689636][ T6460] overlayfs: ...falling back to index=off. [ 82.691687][ T6460] overlayfs: ...falling back to uuid=null. [ 84.567882][ T6486] __nla_validate_parse: 4 callbacks suppressed [ 84.567917][ T6486] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.102'. [ 84.816694][ T6492] netlink: 'syz.1.104': attribute type 2 has an invalid length. [ 84.819437][ T6492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.822349][ T6493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.102'. [ 85.184592][ T6501] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.105'. [ 85.360476][ T6503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.105'. [ 85.699043][ T6506] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.106'. [ 85.824945][ T6508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.106'. [ 86.333553][ T6512] Attempt to restore checkpoint with obsolete wellknown handles [ 86.388345][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 86.391248][ T6515] FAULT_INJECTION: forcing a failure. [ 86.391248][ T6515] name failslab, interval 1, probability 0, space 0, times 0 [ 86.397770][ T6515] CPU: 0 UID: 0 PID: 6515 Comm: syz.3.109 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 86.397786][ T6515] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.397792][ T6515] Call Trace: [ 86.397796][ T6515] [ 86.397801][ T6515] dump_stack_lvl+0x16c/0x1f0 [ 86.397816][ T6515] should_fail_ex+0x512/0x640 [ 86.397830][ T6515] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 86.397850][ T6515] should_failslab+0xc2/0x120 [ 86.397862][ T6515] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 86.397879][ T6515] ? __alloc_skb+0x2b2/0x380 [ 86.397892][ T6515] __alloc_skb+0x2b2/0x380 [ 86.397901][ T6515] ? __pfx___alloc_skb+0x10/0x10 [ 86.397910][ T6515] ? __pfx_rtnl_newlink+0x10/0x10 [ 86.397927][ T6515] netlink_ack+0x15d/0xb80 [ 86.397944][ T6515] netlink_rcv_skb+0x332/0x420 [ 86.397957][ T6515] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 86.397970][ T6515] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 86.397988][ T6515] ? netlink_deliver_tap+0x1ae/0xd30 [ 86.398003][ T6515] netlink_unicast+0x53a/0x7f0 [ 86.398018][ T6515] ? __pfx_netlink_unicast+0x10/0x10 [ 86.398035][ T6515] netlink_sendmsg+0x8d1/0xdd0 [ 86.398050][ T6515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.398064][ T6515] ? __import_iovec+0x1dd/0x650 [ 86.398082][ T6515] ____sys_sendmsg+0xa98/0xc70 [ 86.398098][ T6515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.398116][ T6515] ? get_compat_msghdr+0x11a/0x170 [ 86.398133][ T6515] ___sys_sendmsg+0x134/0x1d0 [ 86.398148][ T6515] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.398170][ T6515] ? find_held_lock+0x2b/0x80 [ 86.398190][ T6515] __sys_sendmsg+0x16d/0x220 [ 86.398201][ T6515] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.398224][ T6515] ? rcu_is_watching+0x12/0xc0 [ 86.398243][ T6515] __do_fast_syscall_32+0x7c/0x3a0 [ 86.398270][ T6515] do_fast_syscall_32+0x32/0x80 [ 86.398282][ T6515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.398296][ T6515] RIP: 0023:0xf705e579 [ 86.398306][ T6515] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 86.398316][ T6515] RSP: 002b:00000000f504e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 86.398328][ T6515] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 86.398337][ T6515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 86.398345][ T6515] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.398353][ T6515] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 86.398362][ T6515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 86.398382][ T6515] [ 86.746984][ T6525] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.111'. [ 86.864315][ T6527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.111'. [ 87.830372][ T6551] netlink: 'syz.0.117': attribute type 2 has an invalid length. [ 87.834210][ T6551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.918287][ T6556] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.119'. [ 88.710981][ T6563] netlink: 'syz.2.120': attribute type 2 has an invalid length. [ 88.717035][ T6563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.021847][ T6585] __nla_validate_parse: 3 callbacks suppressed [ 90.021895][ T6585] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.124'. [ 90.116448][ T6586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.124'. [ 90.753675][ T6594] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.126'. [ 90.882545][ T6596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.126'. [ 91.689023][ T6617] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.129'. [ 91.830968][ T6620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.129'. [ 91.961751][ T6624] netlink: 'syz.1.131': attribute type 2 has an invalid length. [ 91.965101][ T6624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.507649][ T6655] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.138'. [ 93.702462][ T6658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.138'. [ 94.324503][ T6671] netlink: 'syz.3.141': attribute type 2 has an invalid length. [ 94.327441][ T6671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.399057][ T6674] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.142'. [ 94.568653][ T6677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.142'. [ 94.717440][ T6681] netlink: 'syz.0.143': attribute type 2 has an invalid length. [ 94.720797][ T6681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.019276][ T6697] __nla_validate_parse: 2 callbacks suppressed [ 96.019288][ T6697] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.148'. [ 96.147510][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.148'. [ 96.456363][ T70] Bluetooth: hci4: Frame reassembly failed (-84) [ 96.459264][ T6707] Bluetooth: hci4: Frame reassembly failed (-84) [ 96.489141][ T6707] capability: warning: `syz.1.149' uses deprecated v2 capabilities in a way that may be insecure [ 96.562620][ T6709] netlink: 'syz.0.150': attribute type 10 has an invalid length. [ 96.579540][ T6709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.589673][ T6709] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 96.605910][ T6709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.609017][ T6709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.618521][ T6709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.621230][ T6709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.660885][ T6709] bond0: (slave batadv0): Releasing backup interface [ 96.863392][ T6713] netlink: 'syz.0.152': attribute type 2 has an invalid length. [ 96.869152][ T6713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.141044][ T6721] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.153'. [ 97.458797][ T6725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.153'. [ 97.821164][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 98.013086][ T6733] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.155'. [ 98.165518][ T6739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.155'. [ 98.340953][ T6742] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.156'. [ 98.483615][ T5307] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 98.483627][ T5949] Bluetooth: hci4: command 0x1003 tx timeout [ 98.823429][ T6747] syz.3.158 uses obsolete (PF_INET,SOCK_PACKET) [ 98.904302][ T6750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.156'. [ 99.381684][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.160'. [ 99.391606][ T6756] cgroup: fork rejected by pids controller in /syz2 [ 99.976588][ T5949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.979722][ T5949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.982486][ T5949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.987328][ T5949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.990071][ T5949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.085560][ T6876] chnl_net:caif_netlink_parms(): no params data found [ 100.267557][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.269885][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.272164][ T6876] bridge_slave_0: entered allmulticast mode [ 100.274962][ T6876] bridge_slave_0: entered promiscuous mode [ 100.278715][ T6876] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.280955][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.283241][ T6876] bridge_slave_1: entered allmulticast mode [ 100.286129][ T6876] bridge_slave_1: entered promiscuous mode [ 100.316067][ T6876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.320721][ T6876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.358949][ T6876] team0: Port device team_slave_0 added [ 100.364791][ T6876] team0: Port device team_slave_1 added [ 100.400230][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.402514][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.412081][ T6876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.420408][ T6876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.422589][ T6876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.430568][ T6876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.505161][ T6876] hsr_slave_0: entered promiscuous mode [ 100.507401][ T6876] hsr_slave_1: entered promiscuous mode [ 100.509469][ T6876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.511799][ T6876] Cannot create hsr debugfs directory [ 100.630649][ T6876] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.711915][ T6876] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.794627][ T6876] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.935004][ T6876] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.141438][ T6909] __nla_validate_parse: 2 callbacks suppressed [ 101.141472][ T6909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.169'. [ 101.279208][ T6876] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.284294][ T6876] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.288633][ T6876] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.293209][ T6876] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.331672][ T6876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.352329][ T6876] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.363357][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.365733][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.391043][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.393324][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.063573][ T5949] Bluetooth: hci2: command tx timeout [ 102.147069][ T6876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.170019][ T6876] veth0_vlan: entered promiscuous mode [ 102.175525][ T6876] veth1_vlan: entered promiscuous mode [ 102.189515][ T6876] veth0_macvtap: entered promiscuous mode [ 102.193202][ T6876] veth1_macvtap: entered promiscuous mode [ 102.204536][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.218122][ T6876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.223433][ T6876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.229026][ T6876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.231889][ T6876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.234642][ T6876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.267814][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.270317][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.284552][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.286992][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.661272][ T6936] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.162'. [ 103.051922][ T6948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.162'. [ 103.139670][ T6952] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.178'. [ 103.281477][ T6956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.178'. [ 104.083707][ T5307] Bluetooth: hci2: command tx timeout [ 104.708704][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'. [ 104.958564][ T6985] netlink: 476 bytes leftover after parsing attributes in process `syz.0.187'. [ 105.331780][ T6994] netlink: 'syz.0.189': attribute type 2 has an invalid length. [ 105.336310][ T6994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.163580][ T5307] Bluetooth: hci2: command tx timeout [ 106.377114][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 107.406468][ T7041] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.199'. [ 107.567846][ T7054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.199'. [ 108.316468][ T5949] Bluetooth: hci2: command tx timeout [ 108.349738][ T7065] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.206'. [ 108.391221][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 108.491379][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.206'. [ 109.431413][ T7093] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.213'. [ 109.605796][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.213'. [ 109.873810][ T7099] wireguard0: entered promiscuous mode [ 109.875583][ T7099] wireguard0: entered allmulticast mode [ 109.926666][ T7105] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.215'. [ 110.300081][ T7108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.215'. [ 110.323523][ T5949] Bluetooth: hci2: command 0x0405 tx timeout [ 111.075983][ T7121] openvswitch: netlink: Multiple metadata blocks provided [ 111.635622][ T7140] __nla_validate_parse: 2 callbacks suppressed [ 111.635632][ T7140] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.225'. [ 111.722553][ T7141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.225'. [ 111.848182][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'. [ 111.855963][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'. [ 112.091006][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 112.128873][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 113.384980][ T7185] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.237'. [ 113.728269][ T7196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.237'. [ 114.465741][ T7206] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.240'. [ 114.609975][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.240'. [ 114.648775][ T7212] can0: slcan on ptm0. [ 114.766365][ T7211] can0 (unregistered): slcan off ptm0. [ 115.239630][ T7235] ptrace attach of "/syz-executor exec"[5943] was attempted by "/syz-executor exec"[7235] [ 117.016001][ T7267] __nla_validate_parse: 6 callbacks suppressed [ 117.016037][ T7267] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.254'. [ 117.031071][ T7267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.254'. [ 117.120828][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.256'. [ 118.235301][ T7291] netlink: 'syz.3.260': attribute type 2 has an invalid length. [ 118.238001][ T7291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.399075][ T7318] FAULT_INJECTION: forcing a failure. [ 119.399075][ T7318] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 119.403150][ T7318] CPU: 1 UID: 0 PID: 7318 Comm: syz.1.264 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 119.403176][ T7318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.403184][ T7318] Call Trace: [ 119.403188][ T7318] [ 119.403192][ T7318] dump_stack_lvl+0x16c/0x1f0 [ 119.403277][ T7318] should_fail_ex+0x512/0x640 [ 119.403312][ T7318] strncpy_from_user+0x3b/0x2e0 [ 119.403326][ T7318] getname_flags.part.0+0x8f/0x550 [ 119.403342][ T7318] getname_flags+0x93/0xf0 [ 119.403358][ T7318] user_path_at+0x24/0x60 [ 119.403374][ T7318] __ia32_sys_mount+0x1fb/0x310 [ 119.403385][ T7318] ? __pfx___ia32_sys_mount+0x10/0x10 [ 119.403397][ T7318] ? rcu_is_watching+0x12/0xc0 [ 119.403410][ T7318] __do_fast_syscall_32+0x7c/0x3a0 [ 119.403423][ T7318] do_fast_syscall_32+0x32/0x80 [ 119.403434][ T7318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.403460][ T7318] RIP: 0023:0xf711e579 [ 119.403469][ T7318] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 119.403479][ T7318] RSP: 002b:00000000f50cc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 119.403489][ T7318] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080004a00 [ 119.403496][ T7318] RDX: 0000000080000040 RSI: 000000000100080f RDI: 0000000000000000 [ 119.403502][ T7318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.403508][ T7318] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 119.403514][ T7318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.403527][ T7318] [ 119.543375][ T7315] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.265'. [ 119.666706][ T7324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.265'. [ 120.237345][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.268'. [ 120.246166][ T7333] sctp: [Deprecated]: syz.1.269 (pid 7333) Use of int in max_burst socket option. [ 120.246166][ T7333] Use struct sctp_assoc_value instead [ 120.255746][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 121.874774][ T7357] random: crng reseeded on system resumption [ 122.080795][ T7360] process 'syz.0.274' launched '/dev/fd/7' with NULL argv: empty string added [ 122.088930][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 122.088940][ T40] audit: type=1326 audit(1748971252.979:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.0.274" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe7579 code=0x0 [ 122.172552][ T7364] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.275'. [ 122.470864][ T7366] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.276'. [ 122.623476][ T7376] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.279'. [ 122.858042][ T7381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.279'. [ 123.599413][ T7395] FAULT_INJECTION: forcing a failure. [ 123.599413][ T7395] name failslab, interval 1, probability 0, space 0, times 0 [ 123.604700][ T7395] CPU: 3 UID: 0 PID: 7395 Comm: syz.2.282 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 123.604716][ T7395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.604723][ T7395] Call Trace: [ 123.604726][ T7395] [ 123.604731][ T7395] dump_stack_lvl+0x16c/0x1f0 [ 123.604746][ T7395] should_fail_ex+0x512/0x640 [ 123.604759][ T7395] ? fs_reclaim_acquire+0xae/0x150 [ 123.604774][ T7395] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 123.604787][ T7395] should_failslab+0xc2/0x120 [ 123.604799][ T7395] __kmalloc_noprof+0xd2/0x510 [ 123.604819][ T7395] tomoyo_realpath_from_path+0xc2/0x6e0 [ 123.604833][ T7395] ? tomoyo_profile+0x47/0x60 [ 123.604848][ T7395] tomoyo_path_number_perm+0x245/0x580 [ 123.604864][ T7395] ? tomoyo_path_number_perm+0x237/0x580 [ 123.604883][ T7395] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 123.604913][ T7395] ? find_held_lock+0x2b/0x80 [ 123.604925][ T7395] ? hook_file_ioctl_common+0x145/0x410 [ 123.604944][ T7395] ? __fget_files+0x20e/0x3c0 [ 123.604959][ T7395] ? fput+0x20/0xf0 [ 123.604972][ T7395] security_file_ioctl_compat+0x9b/0x240 [ 123.604984][ T7395] __ia32_compat_sys_ioctl+0xc3/0x370 [ 123.605001][ T7395] __do_fast_syscall_32+0x7c/0x3a0 [ 123.605014][ T7395] do_fast_syscall_32+0x32/0x80 [ 123.605025][ T7395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.605039][ T7395] RIP: 0023:0xf711e579 [ 123.605047][ T7395] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 123.605058][ T7395] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 123.605068][ T7395] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c1105517 [ 123.605074][ T7395] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 123.605081][ T7395] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.605086][ T7395] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 123.605092][ T7395] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.605105][ T7395] [ 123.605110][ T7395] ERROR: Out of memory at tomoyo_realpath_from_path. [ 124.037949][ T40] audit: type=1326 audit(1748971254.929:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.3.285" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 124.044488][ T40] audit: type=1326 audit(1748971254.929:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.3.285" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 124.050995][ T40] audit: type=1326 audit(1748971254.929:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.3.285" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 124.058807][ T40] audit: type=1326 audit(1748971254.929:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.3.285" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 124.065844][ T40] audit: type=1326 audit(1748971254.929:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.3.285" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 124.072217][ T40] audit: type=1326 audit(1748971254.929:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.3.285" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 124.078910][ T40] audit: type=1326 audit(1748971254.929:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.3.285" exe="/syz-executor" sig=0 arch=40000003 syscall=218 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 124.085803][ T40] audit: type=1326 audit(1748971254.929:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.3.285" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 124.092745][ T40] audit: type=1326 audit(1748971254.929:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.3.285" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 124.113243][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.286'. [ 124.153050][ T7409] Process accounting resumed [ 124.220296][ T7417] netlink: 'syz.3.290': attribute type 2 has an invalid length. [ 124.222919][ T7417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.463582][ T6182] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 124.614616][ T6182] usb 7-1: Using ep0 maxpacket: 8 [ 124.618565][ T6182] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.621733][ T6182] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.625083][ T6182] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.628184][ T6182] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.632434][ T6182] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.637050][ T6182] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.828380][ T7427] openvswitch: netlink: EtherType 0 is less than min 600 [ 124.829043][ T7428] openvswitch: netlink: EtherType 0 is less than min 600 [ 124.847267][ T6182] usb 7-1: GET_CAPABILITIES returned 0 [ 124.849083][ T6182] usbtmc 7-1:16.0: can't read capabilities [ 124.925714][ T7433] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.292'. [ 125.067297][ T7430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.292'. [ 125.067917][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'. [ 125.076888][ T7419] geneve2: entered allmulticast mode [ 125.094984][ T6182] usb 7-1: USB disconnect, device number 3 [ 125.296934][ T7419] sctp: [Deprecated]: syz.2.288 (pid 7419) Use of int in max_burst socket option deprecated. [ 125.296934][ T7419] Use struct sctp_assoc_value instead [ 125.845194][ T7449] FAULT_INJECTION: forcing a failure. [ 125.845194][ T7449] name failslab, interval 1, probability 0, space 0, times 0 [ 125.850357][ T7449] CPU: 3 UID: 0 PID: 7449 Comm: syz.1.295 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 125.850378][ T7449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 125.850388][ T7449] Call Trace: [ 125.850395][ T7449] [ 125.850402][ T7449] dump_stack_lvl+0x16c/0x1f0 [ 125.850422][ T7449] should_fail_ex+0x512/0x640 [ 125.850443][ T7449] ? fs_reclaim_acquire+0xae/0x150 [ 125.850465][ T7449] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 125.850484][ T7449] should_failslab+0xc2/0x120 [ 125.850502][ T7449] __kmalloc_noprof+0xd2/0x510 [ 125.850533][ T7449] tomoyo_realpath_from_path+0xc2/0x6e0 [ 125.850554][ T7449] ? tomoyo_profile+0x47/0x60 [ 125.850578][ T7449] tomoyo_path_number_perm+0x245/0x580 [ 125.850602][ T7449] ? tomoyo_path_number_perm+0x237/0x580 [ 125.850630][ T7449] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 125.850681][ T7449] ? find_held_lock+0x2b/0x80 [ 125.850703][ T7449] ? hook_file_ioctl_common+0x145/0x410 [ 125.850733][ T7449] ? __fget_files+0x20e/0x3c0 [ 125.850756][ T7449] ? fput+0x20/0xf0 [ 125.850777][ T7449] security_file_ioctl_compat+0x9b/0x240 [ 125.850796][ T7449] __ia32_compat_sys_ioctl+0xc3/0x370 [ 125.850821][ T7449] __do_fast_syscall_32+0x7c/0x3a0 [ 125.850842][ T7449] do_fast_syscall_32+0x32/0x80 [ 125.850859][ T7449] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 125.850880][ T7449] RIP: 0023:0xf711e579 [ 125.850892][ T7449] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 125.850907][ T7449] RSP: 002b:00000000f510e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 125.850924][ T7449] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000001274 [ 125.850934][ T7449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 125.850944][ T7449] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 125.850954][ T7449] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 125.850963][ T7449] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 125.850986][ T7449] [ 125.850992][ T7449] ERROR: Out of memory at tomoyo_realpath_from_path. [ 126.311390][ T7463] sctp: [Deprecated]: syz.2.299 (pid 7463) Use of int in max_burst socket option. [ 126.311390][ T7463] Use struct sctp_assoc_value instead [ 126.319215][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'. [ 126.368124][ T7469] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.300'. [ 126.515120][ T7476] netlink: 'syz.1.304': attribute type 2 has an invalid length. [ 126.517824][ T7476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.554641][ T7474] ptrace attach of "/syz-executor exec"[6876] was attempted by "/syz-executor exec"[7474] [ 126.936165][ T7485] netlink: 'syz.3.307': attribute type 2 has an invalid length. [ 126.938841][ T7485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 127.886186][ T7502] sctp: [Deprecated]: syz.3.311 (pid 7502) Use of int in max_burst socket option. [ 127.886186][ T7502] Use struct sctp_assoc_value instead [ 127.896654][ T7502] __nla_validate_parse: 1 callbacks suppressed [ 127.896664][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 127.927384][ T7506] FAULT_INJECTION: forcing a failure. [ 127.927384][ T7506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.931376][ T7506] CPU: 3 UID: 0 PID: 7506 Comm: syz.3.313 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 127.931391][ T7506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.931397][ T7506] Call Trace: [ 127.931401][ T7506] [ 127.931406][ T7506] dump_stack_lvl+0x16c/0x1f0 [ 127.931421][ T7506] should_fail_ex+0x512/0x640 [ 127.931437][ T7506] _copy_from_user+0x2e/0xd0 [ 127.931452][ T7506] __sys_bpf+0x21d/0x4d80 [ 127.931465][ T7506] ? __pfx___sys_bpf+0x10/0x10 [ 127.931476][ T7506] ? ksys_write+0x190/0x250 [ 127.931495][ T7506] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 127.931515][ T7506] ? fput+0x70/0xf0 [ 127.931530][ T7506] ? ksys_write+0x1ac/0x250 [ 127.931551][ T7506] ? __pfx_ksys_write+0x10/0x10 [ 127.931577][ T7506] __ia32_sys_bpf+0x76/0xe0 [ 127.931594][ T7506] __do_fast_syscall_32+0x7c/0x3a0 [ 127.931607][ T7506] do_fast_syscall_32+0x32/0x80 [ 127.931618][ T7506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.931632][ T7506] RIP: 0023:0xf705e579 [ 127.931641][ T7506] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 127.931652][ T7506] RSP: 002b:00000000f504e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 127.931662][ T7506] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600 [ 127.931669][ T7506] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.931675][ T7506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.931681][ T7506] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 127.931686][ T7506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.931699][ T7506] [ 128.336550][ T7517] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.316'. [ 128.475761][ T7520] netlink: 24 bytes leftover after parsing attributes in process `syz.3.316'. [ 128.598568][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 129.176823][ T7532] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.318'. [ 129.290674][ T7537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.318'. [ 129.329287][ T7538] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.319'. [ 129.606358][ T7536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.319'. [ 130.266109][ T7545] sctp: [Deprecated]: syz.3.321 (pid 7545) Use of int in max_burst socket option. [ 130.266109][ T7545] Use struct sctp_assoc_value instead [ 130.279123][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 130.424813][ T7561] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.326'. [ 130.632818][ T7564] input: syz1 as /devices/virtual/input/input6 [ 130.729502][ T7573] sctp: [Deprecated]: syz.0.331 (pid 7573) Use of int in max_burst socket option. [ 130.729502][ T7573] Use struct sctp_assoc_value instead [ 130.778616][ T7575] netlink: 'syz.0.332': attribute type 2 has an invalid length. [ 130.782070][ T7575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.924852][ T7598] syz.2.335 (7598) used greatest stack depth: 20296 bytes left [ 132.173590][ T6930] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 132.247155][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.249819][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.336349][ T6930] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.340421][ T6930] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 132.344875][ T6930] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.352459][ T6930] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 132.356648][ T6930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.359964][ T6930] usb 6-1: Product: syz [ 132.361753][ T6930] usb 6-1: Manufacturer: syz [ 132.364144][ T6930] usb 6-1: SerialNumber: syz [ 132.389547][ T6930] hub 6-1:1.0: bad descriptor, ignoring hub [ 132.392099][ T6930] hub 6-1:1.0: probe with driver hub failed with error -5 [ 132.575666][ T6930] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 132.652630][ T7614] fuseblk: Bad value for 'fd' [ 132.675679][ T1146] ------------[ cut here ]------------ [ 132.678045][ T1146] WARNING: CPU: 2 PID: 1146 at net/mac80211/offchannel.c:404 ieee80211_start_next_roc+0x24c/0x2c0 [ 132.682390][ T1146] Modules linked in: [ 132.685045][ T1146] CPU: 2 UID: 0 PID: 1146 Comm: kworker/u32:8 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 132.690570][ T1146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.695936][ T1146] Workqueue: events_unbound cfg80211_wiphy_work [ 132.698588][ T1146] RIP: 0010:ieee80211_start_next_roc+0x24c/0x2c0 SYZFAIL: failed to recv rpc [ 132.701283][ T1146] Code: 7b 40 e8 d7 4c dc ff 48 83 c4 10 5b 5d e9 3c e2 cf f6 e8 37 e2 cf f6 48 89 df e8 9f 61 ff ff e9 40 ff ff ff e8 25 e2 cf f6 90 <0f> 0b 90 e9 32 ff ff ff 48 c7 c7 24 0d 88 90 e8 d0 ac 35 f7 e9 db [ 132.709729][ T1146] RSP: 0018:ffffc90007147a68 EFLAGS: 00010293 [ 132.712319][ T1146] RAX: 0000000000000000 RBX: ffff88806bbf0e40 RCX: ffffffff8aeba066 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 132.716793][ T1146] RDX: ffff8880275c2440 RSI: ffffffff8aeba19b RDI: 0000000000000001 [ 132.720020][ T1146] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 132.722581][ T1146] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 132.725399][ T1146] R13: ffff88806bbf28c8 R14: ffff88806bbf0e40 R15: dffffc0000000000 [ 132.728122][ T1146] FS: 0000000000000000(0000) GS:ffff888097973000(0000) knlGS:0000000000000000 [ 132.731032][ T1146] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.733169][ T1146] CR2: 000000000c321877 CR3: 0000000064b62000 CR4: 0000000000352ef0 [ 132.736092][ T1146] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 132.738933][ T1146] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 132.741545][ T1146] Call Trace: [ 132.742670][ T1146] [ 132.743779][ T1146] __ieee80211_scan_completed+0x4fb/0xe40 [ 132.745840][ T1146] ieee80211_scan_work+0x3f1/0x2030 [ 132.747810][ T1146] ? __pfx___mutex_lock+0x10/0x10 [ 132.749537][ T1146] ? do_raw_spin_lock+0x12c/0x2b0 [ 132.751187][ T1146] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 132.753040][ T1146] cfg80211_wiphy_work+0x3dc/0x550 [ 132.754881][ T1146] process_one_work+0x9cf/0x1b70 [ 132.756778][ T1146] ? __pfx_process_one_work+0x10/0x10 [ 132.759045][ T1146] ? assign_work+0x1a0/0x250 [ 132.761015][ T1146] worker_thread+0x6c8/0xf10 [ 132.762895][ T1146] ? __pfx_worker_thread+0x10/0x10 [ 132.764944][ T1146] kthread+0x3c2/0x780 [ 132.766251][ T1146] ? __pfx_kthread+0x10/0x10 [ 132.767708][ T1146] ? rcu_is_watching+0x12/0xc0 [ 132.769230][ T1146] ? __pfx_kthread+0x10/0x10 [ 132.770695][ T1146] ret_from_fork+0x5d7/0x6f0 [ 132.772155][ T1146] ? __pfx_kthread+0x10/0x10 [ 132.773672][ T1146] ret_from_fork_asm+0x1a/0x30 [ 132.775182][ T1146] [ 132.776173][ T1146] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 132.778329][ T1146] CPU: 2 UID: 0 PID: 1146 Comm: kworker/u32:8 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 132.781946][ T1146] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.785235][ T1146] Workqueue: events_unbound cfg80211_wiphy_work [ 132.787159][ T1146] Call Trace: [ 132.788222][ T1146] [ 132.789159][ T1146] dump_stack_lvl+0x3d/0x1f0 [ 132.790611][ T1146] panic+0x71c/0x800 [ 132.791851][ T1146] ? __pfx_panic+0x10/0x10 [ 132.793266][ T1146] ? show_trace_log_lvl+0x29b/0x3e0 [ 132.794896][ T1146] ? check_panic_on_warn+0x1f/0xb0 [ 132.796522][ T1146] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 132.798324][ T1146] check_panic_on_warn+0xab/0xb0 [ 132.799882][ T1146] __warn+0xf6/0x3c0 [ 132.801129][ T1146] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 132.802903][ T1146] report_bug+0x3c3/0x580 [ 132.804268][ T1146] ? ieee80211_start_next_roc+0x24c/0x2c0 [ 132.806043][ T1146] handle_bug+0x184/0x210 [ 132.807400][ T1146] exc_invalid_op+0x17/0x50 [ 132.808852][ T1146] asm_exc_invalid_op+0x1a/0x20 [ 132.810372][ T1146] RIP: 0010:ieee80211_start_next_roc+0x24c/0x2c0 [ 132.812345][ T1146] Code: 7b 40 e8 d7 4c dc ff 48 83 c4 10 5b 5d e9 3c e2 cf f6 e8 37 e2 cf f6 48 89 df e8 9f 61 ff ff e9 40 ff ff ff e8 25 e2 cf f6 90 <0f> 0b 90 e9 32 ff ff ff 48 c7 c7 24 0d 88 90 e8 d0 ac 35 f7 e9 db [ 132.818610][ T1146] RSP: 0018:ffffc90007147a68 EFLAGS: 00010293 [ 132.820602][ T1146] RAX: 0000000000000000 RBX: ffff88806bbf0e40 RCX: ffffffff8aeba066 [ 132.823498][ T1146] RDX: ffff8880275c2440 RSI: ffffffff8aeba19b RDI: 0000000000000001 [ 132.826293][ T1146] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 132.829033][ T1146] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000001 [ 132.831926][ T1146] R13: ffff88806bbf28c8 R14: ffff88806bbf0e40 R15: dffffc0000000000 [ 132.834972][ T1146] ? ieee80211_start_next_roc+0x116/0x2c0 [ 132.837366][ T1146] ? ieee80211_start_next_roc+0x24b/0x2c0 [ 132.839734][ T1146] ? ieee80211_start_next_roc+0x24b/0x2c0 [ 132.842093][ T1146] __ieee80211_scan_completed+0x4fb/0xe40 [ 132.844328][ T1146] ieee80211_scan_work+0x3f1/0x2030 [ 132.846425][ T1146] ? __pfx___mutex_lock+0x10/0x10 [ 132.848327][ T1146] ? do_raw_spin_lock+0x12c/0x2b0 [ 132.850111][ T1146] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 132.851832][ T1146] cfg80211_wiphy_work+0x3dc/0x550 [ 132.853902][ T1146] process_one_work+0x9cf/0x1b70 [ 132.855880][ T1146] ? __pfx_process_one_work+0x10/0x10 [ 132.857801][ T1146] ? assign_work+0x1a0/0x250 [ 132.859633][ T1146] worker_thread+0x6c8/0xf10 [ 132.861509][ T1146] ? __pfx_worker_thread+0x10/0x10 [ 132.863517][ T1146] kthread+0x3c2/0x780 [ 132.864856][ T1146] ? __pfx_kthread+0x10/0x10 [ 132.866435][ T1146] ? rcu_is_watching+0x12/0xc0 [ 132.868125][ T1146] ? __pfx_kthread+0x10/0x10 [ 132.869739][ T1146] ret_from_fork+0x5d7/0x6f0 [ 132.871398][ T1146] ? __pfx_kthread+0x10/0x10 [ 132.873085][ T1146] ret_from_fork_asm+0x1a/0x30 [ 132.874700][ T1146] [ 132.876218][ T1146] Kernel Offset: disabled [ 132.877559][ T1146] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:21:03 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000005 RBX=ffff88802b23bdc0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff888024e9c880 RDI=ffff88802b23bdc0 RBP=ffff888024e9c880 RSP=ffffc90002a678c0 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff9087db57 R11=0000000000000001 R12=ffffffff90880d24 R13=0000000000000001 R14=ffff88802b23c8f8 R15=0000001d2974c30c RIP=ffffffff81903ef5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097773000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f50e4c80 CR3=000000004bdbb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000fff Opmask02=000000000000000f Opmask03=0000000000000001 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b13c447213a3042 12f699431bac5a44 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b13c44700000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f76aacd160b473d0 1571e1108c93c7bf ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9e59382779ecc05b 226cae256594232d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d5b6ea5e660e7003 4866bd51b435aad7 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b13c447213a3042 12f699431bac5a44 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3ee8dda96df0af19 e00211f403949101 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 439079aaeddac71d 6c2ed0d7b75aba55 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 57c121cdad5b512e 12abdf78eee8077b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 19d453feb5b3e911 edc3e90acca8d3ee ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9cc5cfa5ff33e097 6d1be945ddb28b9d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 36e34baeda49dc97 2df7422d2a0cd55b ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 58348c6d09ca75b7 f1f00b4a888868f0 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c0d522b86939f6e 31a0c746baa8cc2c ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9d85e3789a5b8875 31101ebc45964638 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8bc467fe15e8846c 2f9a5bc095bc3fc3 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d5b6ea5e660e7003 4866bd51b435aad7 c2f10ee13910b849 82db7411e340ba1f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c2ed0d7b75aba55 12f699431bac5a44 226cae256594232d 496d72ad91bab64b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3ee8dda96df0af19 d5b6ea5e660e7003 f76aacd160b473d0 c2f10ee13910b849 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 439079aaeddac71d 6b13c447213a3042 9e59382779ecc05b 1eee2165746b2dc6 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 84bfb3df81002598 50bf61c33abf9d31 65d2692ee855dec2 f690be625643bc9d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f8fd8a7584cfb65f 70fd42100b9af375 826f26075fc14eac 5adae338aa9fc9d1 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b277c7890af3eb97 cabf6636ec8c4f1f e3994d3491f6c8fe 0790baf59d0c4089 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5b9004e5505bb16c bffc8f21bfba3a59 ee78d185fb2ee361 ed7b6fccbd55e5da ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31101ebc45964638 f1f00b4a888868f0 6d1be945ddb28b9d 12abdf78eee8077b ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f9a5bc095bc3fc3 31a0c746baa8cc2c 2df7422d2a0cd55b edc3e90acca8d3ee ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 9d85e3789a5b8875 58348c6d09ca75b7 9cc5cfa5ff33e097 57c121cdad5b512e ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8bc467fe15e8846c 0c0d522b86939f6e 36e34baeda49dc97 19d453feb5b3e911 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8df06846c68439b3 3694f9106110dc67 a7302464dfffd3ff e9daa2e30afe806f ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 df54e960f5b68039 d1009794aaab43fc d1eff194edb564ed 1fe618ff2df9c785 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f563bf5257fba443 2cb000c10002ec9f 52b2b0b90bff20f6 3c8a6744d3e77462 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70e6d8ea77c7b06d 8004665a39302986 f7253c6db3551042 0157e139967db4f7 info registers vcpu 1 CPU#1 RAX=00000000003d4eaf RBX=0000000000000001 RCX=ffffffff8b798c69 RDX=0000000000000000 RSI=ffffffff8dc031bd RDI=ffffffff8bf53820 RBP=ffffed1003b5d488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666645 R10=ffff88802b33322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801daea440 R14=ffffffff9087db50 R15=0000000000000000 RIP=ffffffff8b7977cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097873000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000c3cd5d7 CR3=000000004fd9d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85561a05 RDI=ffffffff9ae5ba00 RBP=ffffffff9ae5b9c0 RSP=ffffc900071473d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9ae5b9c0 R15=ffffffff855619a0 RIP=ffffffff85561a2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097973000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c321877 CR3=0000000064b62000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001ae901 RBX=0000000000000003 RCX=ffffffff8b798c69 RDX=0000000000000000 RSI=ffffffff8dc031bd RDI=ffffffff8bf53820 RBP=ffffed10037e1000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a6645 R10=ffff88802b53322b R11=ffffffff9adfc550 R12=0000000000000003 R13=ffff88801bf08000 R14=ffffffff9087db50 R15=0000000000000000 RIP=ffffffff8b7977cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a73000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000559cde99c000 CR3=0000000064b62000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000