last executing test programs: 14.345994056s ago: executing program 3 (id=92): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0), 0x8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) kexec_load(0x2, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="4c2a9e5fdbbd6e10d17cae3b91d35d734a99bc6074fb67a79fbdcb93ec0c7a03c7d6f538e40ee641013705c91365cb8a8e2da00766d6417883cab2493185e9a69c488747e20a6c377387c3223f906091c88dca43d7a411499dd0a227a1cd89882e9ac2206832b884c8684edc1d19693da78b49aa82d1749b89889d8bbc950d8ba4ef9d694141a5f2aa8a8c3ebe9f0d434ee5ec3354d99ff87422614e48c8d1b9f78f63e6203ad18ea2bb0721b3084e3dcd6ce355313c00", 0xb7, 0x3, 0x2}], 0x80000) writev(r5, &(0x7f0000000540)=[{&(0x7f0000001680)}], 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000280)={0x24}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) 11.940081664s ago: executing program 3 (id=96): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x5, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x23635de98487b93e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r5 = syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000100)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d00000003f00070100000000fedbdf25027c0000cee810edfac5b62df8a062ba1dfe6027424d0bd29f7f8b7109045ba44275d68bf067c6188d3016489b82e77a1b5ae4dfe7f30e081b98974254abf49c254f7dae3a2a0ab5afd016335b4a63426214dc8d3dee5d42", @ANYBLOB="70cb6b659633485715920260f3d13d7cf287f6c8d545727d8e1d71cdaad4f5ebfb4f4adea2afd50aebdad7c7b505a20550a9a21a72631acb5bb1404ecf79121dabbd8ea3bdc68615f3a1304dd583fd8f1d6f676e67d251146e7a821ad3250f97726fa7d58a43d4c0a9df0cad82fc3e003cc174366382b4e99505f8706d751ee29482d7e2bb60c6ecade975ad6dae4c4f23057d61e2bbbd845c8386c334d6e211b2182f8494dd2f3ab923734682fc7441e08de5b7435b49450766aae5ab09f4849b0444db49b61dd477cbe6d253671fcf8c3fa0a0", @ANYRES8=r4], 0xd0}}, 0x0) r7 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000000000099aa000018150000", @ANYRES32, @ANYBLOB="00000000000f000000080000ffffff7f7b5af8ff00000000bfa200000000000007020000f8ffffffb703060000000000b70400000000000085000000150800009500000000000000a4030e72661c132c3b317875392c0d5298703cd5beef7b664140fcbd28a585995857f6807712f40f133cd214363f50984175aa9ece6e7afe78627804c5a8b22a8d3657bdd4a0bb224ae8114359ca22eb6f7c15782b68971c176a150a00a7c28565fec252abe827f6386501055c647838a84e852b1e6d7b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000002800128009000100766c616e000059a46f51c2fc0000180002800c0002001e0000001f00000006000100fc0f000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x58}}, 0x8000) r10 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000400)={'syz0\x00', {0x0, 0x2, 0xfff, 0x3}, 0x27, [0x2, 0x5, 0x1, 0x0, 0x2, 0xfffffffb, 0x9, 0x0, 0x3, 0x800, 0x4, 0x0, 0x64, 0x2, 0x953, 0x8001, 0x3, 0xfffffffe, 0x0, 0x5, 0x9, 0x2, 0xfffffffe, 0x658, 0xb, 0x6, 0x5, 0x0, 0x5, 0x4, 0x4, 0x9, 0xcfc, 0x400, 0x1, 0x2, 0x970, 0x7, 0xff, 0x8, 0x9, 0x1000, 0x966c, 0xfffffffc, 0x10001, 0x2, 0x5, 0x9, 0x4, 0xfffffffc, 0x10000, 0x1, 0x1000, 0x4, 0x64b, 0x6b, 0x9, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1f7a23, 0x3], [0x6, 0xc1f4, 0xd, 0x3, 0x80000001, 0x7, 0x3, 0x7, 0xfff, 0x401, 0x8, 0x84b6, 0x2, 0x1, 0x9, 0x800, 0x7, 0x15f, 0x1, 0x711, 0x8, 0x1, 0x2, 0x3ff, 0x9e2c, 0x5, 0x0, 0x8, 0x64c4, 0x3, 0xa, 0xd, 0x0, 0x7, 0x0, 0x3, 0xaf, 0x6, 0xa, 0x6, 0x2, 0x4, 0xffffffff, 0x6, 0x7, 0x0, 0x80000000, 0x0, 0x244, 0xffff8000, 0xf1f, 0xe, 0x7, 0x2, 0x3ff, 0x4, 0x9, 0x2, 0x3, 0x3ff, 0x8, 0xfffffffa, 0x6, 0x5], [0x8, 0x9, 0x100, 0x9, 0xd, 0xd6, 0x6, 0xfffffff3, 0xffffffff, 0x1, 0x3, 0x2, 0x6, 0x5, 0x4, 0x5, 0x0, 0x0, 0x5, 0x8000, 0x1ff, 0x8001, 0x6, 0x4, 0x5, 0x4, 0x3, 0x401, 0x8, 0x1, 0x800, 0x90, 0x7, 0xfffffffc, 0x3467, 0x8001, 0x6, 0x2, 0x7, 0x9, 0x0, 0x6, 0x6, 0x2, 0x0, 0x2, 0x2, 0x5, 0x7fff, 0x8fc, 0xfffffffe, 0x6, 0x5, 0x8001, 0x7, 0x400, 0x7, 0x7f, 0x10000, 0x3, 0x462cefef, 0x2, 0x800, 0x3], [0x4, 0x1000, 0x4, 0x9, 0x2, 0x6, 0x100, 0x7, 0x6, 0x800, 0x4, 0x4, 0x4, 0x2, 0x10001, 0x5, 0x6, 0x80, 0x4, 0x6, 0x9, 0x8, 0x1, 0x9, 0x5e7, 0x0, 0x8, 0x40, 0x8, 0xb, 0x9, 0x38000, 0x3, 0x80, 0x5, 0x9, 0x205, 0x1, 0x8000, 0x8000, 0x101, 0x7, 0x1, 0x7fffffff, 0x9, 0xfffffffe, 0x5, 0x2, 0x196e, 0x8, 0x10000, 0x8, 0x9, 0x21, 0x4, 0xfffffffe, 0x6, 0x2, 0x3, 0x5, 0x0, 0x5, 0x8001, 0x4]}, 0x45c) 10.466220154s ago: executing program 3 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sigaltstack(&(0x7f0000000280)={&(0x7f0000000200)=""/69, 0x3, 0x45}, &(0x7f00000022c0)={0x0}) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) 9.994946629s ago: executing program 1 (id=103): socket$pptp(0x18, 0x1, 0x2) syz_io_uring_setup(0x29c, &(0x7f0000000300)={0x0, 0x14ba, 0x8, 0x1, 0x533}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000000)={0x1, 0x5}, 0x2) syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000000, 0x4e5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r2) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="010026bd7000fedbdf2504000000140001800f0001006574683a6e6963766630d2"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="611550000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r8, 0x0, 0x7}, 0x38) 9.846947332s ago: executing program 0 (id=104): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x5c}}, 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000006c0)='.\x00', 0x40001a2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r2, r3, 0x0) readv(r3, &(0x7f0000000440)=[{&(0x7f0000000340)=""/48, 0x30}], 0x50) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_emit_ethernet(0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaa86aaaaaabbbbbbbbbbbb86dd60000000003c2b00fc020000000000000000000000000000fe8000000000000000000000000000aa6700000000000000210000000034907822060000000000008fbab2e630c3e6a031fd2ad9265431d968f1028b8c7271bda9f785aa6887dd17aea49bf2"], 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}], 0x1, 0x40000c0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0xc0844123, &(0x7f0000002fc0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e22, @loopback}], 0x10) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000140)=0x5, 0x4) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup(r7) 8.876775386s ago: executing program 0 (id=105): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0), 0x8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) kexec_load(0x2, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080), 0x0, 0x3, 0x2}], 0x80000) writev(r5, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}], 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000280)={0x24}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) 8.699521848s ago: executing program 3 (id=106): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0xc000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7, 0xd, 0x5, 0x1, 0x3}, 0x0) r2 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x2, {"4772ffacff04856ec9e8776f8ee906be", "0000000000000300", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x804000, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) unshare(0x2a020480) openat$vsock(0xffffff9c, 0x0, 0x101002, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x8, 0x0, 0x0, 0x3, &(0x7f0000000140), 0x0, 0x0, 0x0, {0x0, r7}}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2f, 0x0, &(0x7f0000000240)="e300c0678bb63701fd85b69fb68a0000ec67838717bd86ddece156d0f9421c617dd2206d3e037652465d82a75b8a4e", 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r11], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20008004) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r10, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x24}}, 0x0) r12 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) ioctl$FIBMAP(r12, 0x1, &(0x7f0000000040)=0x85) 8.281666137s ago: executing program 1 (id=107): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0), 0x8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) kexec_load(0x2, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="4c2a9e5fdbbd6e10d17cae3b91d35d734a99bc6074fb67a79fbdcb93ec0c7a03c7d6f538e40ee641013705c91365cb8a8e2da00766d6417883cab2493185e9a69c488747e20a6c377387c3223f906091c88dca43d7a411499dd0a227a1cd89882e9ac2206832b884c8684edc1d19693da78b49aa82d1749b89889d8bbc950d8ba4ef9d694141a5f2aa8a8c3ebe9f0d434ee5ec3354d99ff87422614e48c8d1b9f78f63e6203ad18ea2bb0721b3084e3dcd6ce355313c00", 0xb7, 0x3, 0x2}], 0x80000) writev(r5, &(0x7f0000000540), 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000280)={0x24}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) 7.85575811s ago: executing program 2 (id=108): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0), 0x8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) kexec_load(0x2, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="4c2a9e5fdbbd6e10d17cae3b91d35d734a99bc6074fb67a79fbdcb93ec0c7a03c7d6f538e40ee641013705c91365cb8a8e2da00766d6417883cab2493185e9a69c488747e20a6c377387c3223f906091c88dca43d7a411499dd0a227a1cd89882e9ac2206832b884c8684edc1d19693da78b49aa82d1749b89889d8bbc950d8ba4ef9d694141a5f2aa8a8c3ebe9f0d434ee5ec3354d99ff87422614e48c8d1b9f78f63e6203ad18ea2bb0721b3084e3dcd6ce355313c00", 0xb7, 0x3, 0x2}], 0x80000) writev(r5, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}], 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) 7.03880485s ago: executing program 0 (id=109): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0xc000) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7, 0xd, 0x5, 0x1, 0x3}, 0x0) r2 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x2, {"4772ffacff04856ec9e8776f8ee906be", "0000000000000300", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x804000, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) unshare(0x2a020480) openat$vsock(0xffffff9c, 0x0, 0x101002, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x8, 0x0, 0x0, 0x3, &(0x7f0000000140), 0x0, 0x0, 0x0, {0x0, r7}}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2f, 0x0, &(0x7f0000000240)="e300c0678bb63701fd85b69fb68a0000ec67838717bd86ddece156d0f9421c617dd2206d3e037652465d82a75b8a4e", 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r10], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20008004) 6.320446621s ago: executing program 3 (id=110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sigaltstack(&(0x7f0000000280)={&(0x7f0000000200)=""/69, 0x3, 0x45}, &(0x7f00000022c0)={0x0}) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2) 5.754691276s ago: executing program 0 (id=111): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f00000005c0)={0x3c947200, 0x0, 0x0, &(0x7f00000003c0), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10010, 0xffffffffffffffff, 0x13074000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) msgsnd(0x0, 0x0, 0x70, 0x800) 5.358167692s ago: executing program 1 (id=112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x98}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read(r1, &(0x7f0000000880)=""/4096, 0x1000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a3100"], 0xec}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r7 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) getsockopt$inet6_int(r7, 0x29, 0x18, 0x0, &(0x7f0000000280)) syz_io_uring_setup(0xef4, &(0x7f0000000040)={0x0, 0xefe1, 0x2000, 0x1, 0x1a4}, &(0x7f00000000c0), &(0x7f0000000100)) 5.336396219s ago: executing program 2 (id=113): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0), 0x8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) unshare(0x6a040000) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) kexec_load(0x2, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="4c2a9e5fdbbd6e10d17cae3b91d35d734a99bc6074fb67a79fbdcb93ec0c7a03c7d6f538e40ee641013705c91365cb8a8e2da00766d6417883cab2493185e9a69c488747e20a6c377387c3223f906091c88dca43d7a411499dd0a227a1cd89882e9ac2206832b884c8684edc1d19693da78b49aa82d1749b89889d8bbc950d8ba4ef9d694141a5f2aa8a8c3ebe9f0d434ee5ec3354d99ff87422614e48c8d1b9f78f63e6203ad18ea2bb0721b3084e3dcd6ce355313c00", 0xb7, 0x3, 0x2}], 0x80000) writev(r5, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000280)={0x24}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) 4.314165862s ago: executing program 1 (id=114): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000f40)={0x64, r2, 0x1, 0xffffffff, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8, 0xb, 0x5}}]}, 0x64}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioprio_set$uid(0x3, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1c8, 0x12) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r10 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc8", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)={0x8, 0x3, 0x8, 0x80000000, 0x80d2, 0x80000001, 0xffffffffffffb90a, 0x92, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000200)={[0x2000000000c45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x80, 0x3, 0x0, 0x1, 0x8d], 0x100000, 0x480}) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_j1939(r13, &(0x7f0000000400)={0x1d, r14, 0x0, {0x1, 0x1, 0x3}, 0xff}, 0x18) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fbdbdf25e200000008000327", @ANYRES32=r6, @ANYBLOB="08000600", @ANYRES32=r9, @ANYBLOB='\b\x00:\x00\x00\x00\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 3.379423236s ago: executing program 2 (id=115): socket$pptp(0x18, 0x1, 0x2) syz_io_uring_setup(0x29c, &(0x7f0000000300)={0x0, 0x14ba, 0x8, 0x1, 0x533}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000000)={0x1, 0x5}, 0x2) syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000000, 0x4e5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x2, 0x6, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(r2) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="010026bd7000fedbdf2504000000140001800f0001006574683a6e6963766630d2"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x810) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r8, 0x0, 0x7}, 0x38) 3.275441368s ago: executing program 1 (id=116): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000002380)=[{{&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00', 0x80}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)="04b493473f8f80d0f722183b922d35aa13d2b3e64481c9508b133a0040e884c03a04bd59e5025a68dd37ec4535a58a1cf22cedae0e436419cb59d46b80f8dca09e790f4a1f57fc48894d6b1c2fd409932f9f80dae0330617769a5be1cb185c605728d6480c36d8d727cbeac7ecbdb647f11d5c74f5", 0x75}, {&(0x7f0000000700)="1e8bb81aa0332ab37489a3b733c8a8fad7fc09a60a5ac53bb53fd0c71f3c2101b8e423653fc899c8d1abca5ec7e970606ef3c3f4591b9c2c63fa24d0f90f53d5ce7eb701040c103d5ddb046806c69427f08c82f2f32dfe6ade307bdfd1270fc95c2a2adc678b7b6be31b4192d11f5ff477dc40c4c4a5c5fd1c2c56639d03ccd9f9e731ef2782f3ec0a83918b279fc1e0925effe95521430ce2354df87be408ed1f92aef345c8cf8025e1c9294c8ed05a450b5014df9c724176b64323a89ac494016cc48c27dda64fb1395fd3fe90050ad75a0a2554148f67578be01e19eb1122d4da603b31e8214ecba6bb00532ffa87b5da7607ed5f20d444", 0xf9}, {&(0x7f0000000380)="335899049c160ade999bdaf35eb0b41416cf9bf18985c8449fc2d38476fe4af29d9c901eeb0f85537063ec0529da4d8235cb822417c4ce71", 0x38}], 0x3, &(0x7f00000024c0)=ANY=[@ANYBLOB="4802000008010000f2ffffff086d2bbeee509bcb9225bfd2873a061a1ca36ff31a25659baa9950faa9b42e537b0668b6f436dbe655e1085322f700000000000000b6b47b7cb01f3fc3abbf74aceca80000000000000024c4ef7827a2c9410b7b11fa154fd6e94f1708a13fd6c410e1bc0eadac2a109c94002e67926f73b7172a8f494bb08336a36f58f7c5e48aac8d2368c31cfea8535107529ea7b181dd3cb5db58dc8019c9852ae506e70ac2cf1df82b"], 0x48}}, {{&(0x7f0000000800)=@l2={0x1f, 0x1, @any, 0x0, 0x2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000880)="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", 0xfc}, {&(0x7f0000000980)="978f88a8d326cadb36f85e51b150e44beb015a1f8a89a2d99d50371a23cfd52cc8ea5d04dd04d60aa169ad2f07b185c80c04da3c33e1bf7835d6151188fa8fd7c9d7a9b964940bce0da0406b5a2cdef7336e6ea24717f4b5d5c7e0a93d053734e3fda591436cc869e34e05b587", 0x6d}], 0x2, &(0x7f0000001300)=ANY=[@ANYBLOB="60000000070100000700000077c591ea04b95461b397111c255670ff22c3e30015831c2a7469067f1e5d535d85bfc15583465dcce4bafedea362555cbcb9f4cc925c9d4ac8c2c260aa085eb0c398d3357993f9aa1e480fb6d24b03f6cd72000072354e3af832b5e701d7eae3443c608333ec9fbbd1d057e54b45407a7b26d1803eaa86f5856557629344447d"], 0x60}}, {{&(0x7f0000000a80)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b00)="c91be729c48c328b6fe9857daf3120627e85b87fbc64318bea3a58aab2b7d8d0142821c5128c19843a82d8fe529d422c4b856ee9a0a7a0fcb466c27759c9475ee4c241c80db3265d65fa265534fe5c22d0542ae9", 0x54}, {&(0x7f0000000540)="de772942e0bd608272f68efe7827d559503744dfd426e05206fee6339dc545d57f6c891cfb0a1c0b7cc2d2ee16da4542bb9a681d4c3e265a", 0x38}, {&(0x7f0000000b80)="e7db2e63e970cc37d22d60ef028c5a11250c3842a022b9db1c5b1cdf5a6d11060ecba5eef821cc402a411458c3d7a3f5e8062becc4de2a9b97b4a6c005bac637baba69d9d17ce75f00a4d1ff50fc126501a609befac22f7fe84050602c25de365d88aded68051a05f74abd8c0dd9c56d09fb920d2b18189dd25d2c52b8573c3166451a0dc9afeee1e70bc6197cba4799f10faa718caa8206df025fe16d14b30de7946cac166488f6487215fdfa0b026b483842649e5fb0d1420d3cdef772bc88bf885ad64e8a6ce55f65d8faecc3ef418b3baa1acd6d0d478e7883c2f2867cf7d219a409ab3e6566f755265533e09555afa1", 0xf2}], 0x3, &(0x7f0000002400)=ANY=[@ANYBLOB="3c000000010100000900000012b63a02dc9f6146240bf6e98e5e75e68ec813a318c0ed4ed10eddcec99c31930c96ed193d1cdc559a9b9590f3f5000081d3d37a584b84bed0595ba51e6ccd6c84f2fa0b680e3e6215805b4624453a0cb48f36c4ed502288570f61adc8ab4982fdccfea83f75f3b42566e3bdc943eeb8d91363adc09ee32e30f9c3"], 0x3c}}, {{&(0x7f0000000d00)=@can, 0x80, &(0x7f0000001280)=[{&(0x7f0000000d80)="614bf84eb5982e31cfd3e03a995b672641904d896da1aff7cb6eee9e677f62bf532869871f050684ee01f586637a32a9e895d3e82aef7f9da4c8488c6741cab8b116136f13fc0cfb88510a10152a568c82a4527b8aa616ddfcf2bcc9606b9693a8e0c6ae286fd877008dbda2070ed67344c940ac683f1dd74be11d0dffa5c183d106fe4561", 0x85}, {&(0x7f0000000e40)="74a216e036c46f11c29ed26d1833c18da4b184158d61bd73f1620f97f85d6b49a7c0489fdba5b7a766f141305c9307ae9ebde4a6be8de6c13d644af368827e66043e4f48d55082e51409adc17a615f206fdbc4ed2939055c6c793ff546b02fc91078bae3dcf6371790b2cb3d513c93bf9285bec3728d5420346fc275e2f9f35329a95a2b6bfc053ba15d55155a325b0020e6ae257c55f5d0438dcf73e43160a1dfa69c5287d84c99928189588aac5f17a9fb3a372785330ec643b2b343970085ac6f6e3685880e0ae3f32b6c33ea9f02e48f7cf7d5f354f2", 0xd8}, {&(0x7f0000000f40)="1381446c4d97b65c969adc53f5944db1c5ff25813e79a7967c9dca3e555c8519a0d98e1d5435d48e0a7605bfc77b1bc38a523ac75ee26f34240c4edd0ce420cb2525706ff3f4e9cb92df", 0x4a}, {&(0x7f0000000fc0)="5bfc292813b3a4043bb76bb92c8627be876851239d70461595322990bd2216dc09b07a48ed7384e9af3d81b4e73400532721468cb9ec1ee7dff8359a3cb3a5eabcd15139e20a9f70554c23d4b149047fa609368d30d7b98b91ac29c76eb1f3ba188a9518a9c38f4902cbdeaff9e94e978e998f588fb8606db75be98ac5de9b1adb3a775dd25917ef6af34ab51274261ea76f5053f5bb3f6cae9614775403db", 0x9f}, {&(0x7f0000001080)="d3a5a8af8e0b1b9204ebcf370e6f55db42e004621c6fd6c4c916523c1a968371bfb8b4303c38bb8654c315fc9ca71efdd5d1ca06a9703f6e2dfaf7cf7326eb2f6d4390582bc11c7d60f64c41bd71dd8e8bd7865f364fb0ed804a4e", 0x5b}, {&(0x7f0000001100)="b1379b56cb3b4d6be5b0b32cfd75d0f87f21ab5197ec2aa592f95a73c703f96b87c714ba62bb4792f6b34029357fa6e8e208f5db4ade4cf98cc51db7795646c3f2fa8f5fbf7b7ac298640dc3fbf927974dcb694a964e5347319decfe7a69f1", 0x5f}, {&(0x7f0000001180)="399220388557487552e7555573311f637dfe9a272994875113b4ff7ccf63a13c5a09b9efd8cf497c4812c3cb3a07931a30bd0d0123286824d626ab4a8cb7d173ada18f887bd2f16d598705a8240f3c6cd0b69f9c02b8b576be6fe8d472afcdabf19c125f633c5584ea466b480c5d2352e5a4e914d21bdf58d8dc9c62962e28a7565f7d2a1d526b79a654802add396a9ee2b0db90ded7318bb4e57e5b4ba16509fabec125611adf2de4553ea3540096fb4a1d9b3889e52242474d08516b644531e6ab76192aa34c2876f73d065955f0a168ee48800f7c6684bdb72ef5462103a5924816113d2f68c0", 0xe8}], 0x7, &(0x7f0000002580)=ANY=[@ANYBLOB="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"], 0x1074}}], 0x4, 0x18800) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="81020000008000000c001a800800008004000180"], 0x2c}}, 0x0) listen(r0, 0x8) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000500)={0x9, 0x207, 0x5, 0x691}, 0x10) sendto$inet6(r4, &(0x7f0000000400)='x', 0x1, 0x10, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = semget$private(0x0, 0x6, 0x0) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000340)) sigaltstack(&(0x7f0000000000)={&(0x7f0000000040)=""/4072, 0x100000000, 0xfe8}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = epoll_create1(0x0) epoll_pwait(r7, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c20005000180c200000086dd600101200010000000000000000000003c8c05cf00000000000185009ffc497300"/56], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x138, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff7}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x108, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}, [@TCA_NETEM_LOSS={0xc2, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x40, 0xf, 0xa, 0x4006559, 0x8}}, @NETEM_LOSS_GI={0x0, 0x1, {0x0, 0x8, 0x1, 0x6, 0x3ff}}, @NETEM_LOSS_GE={0xa, 0x2, {0x1, 0x400, 0x1, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0xcfbb, 0xfffffffd, 0x3, 0x8, 0x1}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x9de, 0x9, 0xb502}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x3, 0x5, 0x4, 0xea}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x0, 0x101, 0x0, 0x3}}]}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0x1000}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xbba1, 0xae}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x100020}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x138}}, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r11, r11) socket$nl_generic(0x10, 0x3, 0x10) 2.752389633s ago: executing program 1 (id=117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)}, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sigaltstack(&(0x7f0000000280)={&(0x7f0000000200)=""/69, 0x3, 0x45}, &(0x7f00000022c0)={0x0}) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2) 2.106662467s ago: executing program 3 (id=118): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f00000005c0)={0x3c947200, 0x0, 0x0, &(0x7f00000003c0), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10010, 0xffffffffffffffff, 0x13074000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x111, 0x4b4, 0x1ac, 0xd4feffff, 0x2b8, 0x20a, 0x278, 0x2b8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffff00, 0xffffff00], [0x0, 0xff000000, 0x0, 0xffffffff], 'ipvlan0\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0xe}, 0x0, 0x188, 0x1ac, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x7b}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'hsr0\x00', 'pim6reg1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x1, 0xfffffffe, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3dc) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) msgsnd(0x0, 0x0, 0x70, 0x800) 1.791586212s ago: executing program 2 (id=119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x70bd69, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xc}]}]}, 0x28}}, 0x24000040) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0)="110000000200050000efdf2254f217c2", 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x4) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000180)={[{0x2b, 'cpuset'}]}, 0x8) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "534448d7f08e6c6fd690e50a1a69e7f713c2417c9390c001ce740d708055cb0842e4d1cc88b9a7b6e1019717ec21a3fda1e4ffc44dc6b801049b81e80c5e4eac", 0x37}, 0x48, 0xfffffffffffffffa) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b140209000000000001090224"], 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) r10 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKPG(r10, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x400400, 0x1000, 0xd}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r11 = request_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='*@^-\x00', 0xfffffffffffffffe) keyctl$instantiate(0xc, r8, 0x0, 0x0, r11) 1.761091646s ago: executing program 0 (id=120): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000d0003006c6973743a736574000000010500050000000000050001000700000005000400000000000900020073797a32000000000c000780080006"], 0x54}}, 0x0) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000400)={{}, [@default, @netrom, @netrom, @remote, @null, @remote, @bcast, @rose]}, &(0x7f0000000280)=0x48, 0x80000) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000480)=@bpq0, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x2000ff0f, 0x0) 380.973239ms ago: executing program 2 (id=121): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40c03) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000100)={{0x0, 0x1}, 0x1, 0x0, 0x0, {0x4, 0x14}, 0x3, 0xc}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)={0x30000010}) 78.205423ms ago: executing program 0 (id=122): pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000260000008500000086000000850000007d000000bf91000000000000b70200000010000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r4, 0x0, 0xd1, 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0xc0305720, &(0x7f0000000380)) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRESHEX=r0], 0x10c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000340)=0x15) ioctl$TIOCSTI(r7, 0x5412, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=123): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000180)=0x1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x7, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x7, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0xfffffff7, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x100788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x87, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x5, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x20000100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0x45eb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'gre0\x00'}) r3 = socket$phonet(0x23, 0x2, 0x1) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r4, 0x60}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:33125' (ED25519) to the list of known hosts. [ 78.016779][ T5896] cgroup: Unknown subsys name 'net' [ 78.141554][ T5896] cgroup: Unknown subsys name 'cpuset' [ 78.145359][ T5896] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.146874][ T5896] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.664910][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.668879][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.673513][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.674232][ T5956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.674508][ T5958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.674926][ T5957] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.676571][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.676667][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.677202][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.677492][ T5955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.679450][ T5956] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.682065][ T5957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.683926][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.685528][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.687408][ T5957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.687622][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.688086][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.688416][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.711366][ T5957] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.714640][ T5957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.983662][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 83.000381][ T5947] chnl_net:caif_netlink_parms(): no params data found [ 83.043611][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 83.125296][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 83.130409][ T5947] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.133462][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.135782][ T5947] bridge_slave_0: entered allmulticast mode [ 83.138498][ T5947] bridge_slave_0: entered promiscuous mode [ 83.165380][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.167788][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.171031][ T5947] bridge_slave_1: entered allmulticast mode [ 83.173907][ T5947] bridge_slave_1: entered promiscuous mode [ 83.176884][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.179340][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.181784][ T5943] bridge_slave_0: entered allmulticast mode [ 83.184507][ T5943] bridge_slave_0: entered promiscuous mode [ 83.187861][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.190569][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.193059][ T5943] bridge_slave_1: entered allmulticast mode [ 83.195887][ T5943] bridge_slave_1: entered promiscuous mode [ 83.263100][ T5947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.270327][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.287771][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.291662][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.294724][ T5942] bridge_slave_0: entered allmulticast mode [ 83.298456][ T5942] bridge_slave_0: entered promiscuous mode [ 83.304416][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.307748][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.311200][ T5942] bridge_slave_1: entered allmulticast mode [ 83.314863][ T5942] bridge_slave_1: entered promiscuous mode [ 83.321253][ T5947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.327055][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.401769][ T5943] team0: Port device team_slave_0 added [ 83.404305][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.406676][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.409580][ T5949] bridge_slave_0: entered allmulticast mode [ 83.413514][ T5949] bridge_slave_0: entered promiscuous mode [ 83.429239][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.434567][ T5943] team0: Port device team_slave_1 added [ 83.437078][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.440147][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.443047][ T5949] bridge_slave_1: entered allmulticast mode [ 83.446877][ T5949] bridge_slave_1: entered promiscuous mode [ 83.451739][ T5947] team0: Port device team_slave_0 added [ 83.454789][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.485179][ T5947] team0: Port device team_slave_1 added [ 83.499456][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.502494][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.511690][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.521846][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.524059][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.532397][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.544659][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.555627][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.564883][ T5942] team0: Port device team_slave_0 added [ 83.567412][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.569762][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.577711][ T5947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.598521][ T5942] team0: Port device team_slave_1 added [ 83.606143][ T5947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.608376][ T5947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.616663][ T5947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.625769][ T5949] team0: Port device team_slave_0 added [ 83.644291][ T5949] team0: Port device team_slave_1 added [ 83.647110][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.650253][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.661092][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.666885][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.669249][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.678422][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.707096][ T5943] hsr_slave_0: entered promiscuous mode [ 83.709699][ T5943] hsr_slave_1: entered promiscuous mode [ 83.739813][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.742846][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.754176][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.780033][ T5947] hsr_slave_0: entered promiscuous mode [ 83.782420][ T5947] hsr_slave_1: entered promiscuous mode [ 83.784668][ T5947] debugfs: 'hsr0' already exists in 'hsr' [ 83.786961][ T5947] Cannot create hsr debugfs directory [ 83.790458][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.793454][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.804705][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.835966][ T5942] hsr_slave_0: entered promiscuous mode [ 83.839776][ T5942] hsr_slave_1: entered promiscuous mode [ 83.843480][ T5942] debugfs: 'hsr0' already exists in 'hsr' [ 83.846442][ T5942] Cannot create hsr debugfs directory [ 83.942044][ T5949] hsr_slave_0: entered promiscuous mode [ 83.944340][ T5949] hsr_slave_1: entered promiscuous mode [ 83.946409][ T5949] debugfs: 'hsr0' already exists in 'hsr' [ 83.948237][ T5949] Cannot create hsr debugfs directory [ 84.157422][ T5943] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.164133][ T5943] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.168433][ T5943] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.178001][ T5943] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.208267][ T5947] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.214156][ T5947] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.222932][ T5947] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.229621][ T5947] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.276496][ T5942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.283375][ T5942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.291214][ T5942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.298018][ T5942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.364400][ T5949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.369871][ T5949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.374513][ T5949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.379844][ T5949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.417277][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.447467][ T5947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.456571][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.477304][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.480421][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.495799][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.498093][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.504058][ T5947] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.515858][ T685] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.518148][ T685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.526171][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.528486][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.542314][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.563874][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.576639][ T685] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.579812][ T685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.600321][ T5943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.610105][ T685] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.612430][ T685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.647093][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.671494][ T5947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.704239][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.704845][ T5954] Bluetooth: hci1: command tx timeout [ 84.710470][ T5957] Bluetooth: hci2: command tx timeout [ 84.720925][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.723198][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.734478][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.737006][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.779518][ T5954] Bluetooth: hci3: command tx timeout [ 84.779776][ T5957] Bluetooth: hci0: command tx timeout [ 84.807497][ T5947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.820443][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.852964][ T5947] veth0_vlan: entered promiscuous mode [ 84.859937][ T5947] veth1_vlan: entered promiscuous mode [ 84.880538][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.887434][ T5943] veth0_vlan: entered promiscuous mode [ 84.900986][ T5943] veth1_vlan: entered promiscuous mode [ 84.920883][ T5947] veth0_macvtap: entered promiscuous mode [ 84.927431][ T5947] veth1_macvtap: entered promiscuous mode [ 84.943455][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.957193][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.965223][ T5943] veth0_macvtap: entered promiscuous mode [ 84.971994][ T5947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.980332][ T5942] veth0_vlan: entered promiscuous mode [ 84.985094][ T1211] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.002005][ T5943] veth1_macvtap: entered promiscuous mode [ 85.005318][ T1211] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.008525][ T1211] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.014395][ T5942] veth1_vlan: entered promiscuous mode [ 85.025549][ T1211] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.052440][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.057529][ T5949] veth0_vlan: entered promiscuous mode [ 85.067893][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.075797][ T5942] veth0_macvtap: entered promiscuous mode [ 85.092397][ T685] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.096628][ T5949] veth1_vlan: entered promiscuous mode [ 85.099657][ T5942] veth1_macvtap: entered promiscuous mode [ 85.104931][ T685] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.107694][ T1211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.107730][ T1211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.116190][ T685] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.131405][ T685] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.160170][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.168022][ T685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.174568][ T685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.186199][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.198111][ T5949] veth0_macvtap: entered promiscuous mode [ 85.208075][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.212310][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.212941][ T5949] veth1_macvtap: entered promiscuous mode [ 85.222217][ T5947] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.243401][ T1211] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.253007][ T1211] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.256574][ T1211] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.264935][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.268296][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.273248][ T1211] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.283886][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.305849][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.341288][ T685] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.345197][ T685] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.371023][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.374269][ T685] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.401481][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.403941][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.438996][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.442559][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.448633][ T6030] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 85.478477][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.487337][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.516353][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.522754][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.152096][ T6039] program syz.2.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.233671][ T54] cfg80211: failed to load regulatory.db [ 86.869595][ T5957] Bluetooth: hci1: command tx timeout [ 86.869626][ T5954] Bluetooth: hci2: command tx timeout [ 86.869844][ T5955] Bluetooth: hci3: command tx timeout [ 86.870126][ T5301] Bluetooth: hci0: command tx timeout [ 88.939914][ T5954] Bluetooth: hci3: command tx timeout [ 88.941768][ T5954] Bluetooth: hci0: command tx timeout [ 88.949334][ T5954] Bluetooth: hci1: command tx timeout [ 88.951509][ T5954] Bluetooth: hci2: command tx timeout [ 90.062205][ T6064] program syz.0.8 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.019003][ T5957] Bluetooth: hci2: command tx timeout [ 91.021093][ T5957] Bluetooth: hci1: command tx timeout [ 91.023044][ T5957] Bluetooth: hci0: command tx timeout [ 91.024844][ T5957] Bluetooth: hci3: command tx timeout [ 95.968445][ T6122] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.258948][ T24] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 96.517014][ T24] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 96.519935][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.525079][ T24] usb 7-1: config 0 has no interfaces? [ 96.528890][ T24] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 96.531737][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.576298][ T24] usb 7-1: config 0 descriptor?? [ 96.584630][ T6124] program syz.1.18 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.140432][ T6138] program syz.3.23 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.795067][ T6149] program syz.0.25 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.989547][ T39] usb 7-1: USB disconnect, device number 2 [ 99.199064][ T6148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.305795][ T6148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.475388][ T6148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.918505][ T6148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.978201][ T1160] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.989998][ T1211] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.002136][ T1211] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.013080][ T1211] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.889621][ T6181] fuse: Unknown parameter 'subj_user' [ 102.041692][ T6184] binder: 6183:6184 ioctl 81e8943c 80000580 returned -22 [ 102.044233][ T6184] binder: 6183:6184 ioctl 5000943f 80000980 returned -22 [ 102.653240][ T6197] program syz.1.35 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.552106][ T6213] program syz.2.37 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.715143][ T6235] program syz.2.44 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.938465][ T6253] program syz.0.46 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.620007][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 110.655969][ T6262] program syz.2.50 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.913703][ T40] audit: type=1326 audit(1774514303.217:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.3.51" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feef6c code=0x0 [ 113.626872][ T6285] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 113.627525][ T6284] binder: 6283:6284 ioctl 81e8943c 80000580 returned -22 [ 113.629309][ T6285] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 113.630297][ T6285] vhci_hcd vhci_hcd.0: Device attached [ 113.639400][ T6284] binder: 6283:6284 ioctl 5000943f 80000980 returned -22 [ 113.809026][ T1456] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 113.868949][ T1456] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 114.217494][ T6286] vhci_hcd: connection reset by peer [ 114.223775][ T71] vhci_hcd vhci_hcd.3: stop threads [ 114.225970][ T71] vhci_hcd vhci_hcd.3: release socket [ 114.233368][ T71] vhci_hcd vhci_hcd.3: disconnect device [ 114.791143][ T6307] binder: 6306:6307 ioctl 81e8943c 80000580 returned -22 [ 114.796143][ T6307] binder: 6306:6307 ioctl 5000943f 80000980 returned -22 [ 115.061901][ T6315] program syz.2.61 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.410467][ T6316] program syz.0.62 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.809643][ T6329] program syz.2.65 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.858903][ T6328] ALSA: mixer_oss: invalid OSS volume '' [ 119.858442][ T6360] program syz.0.71 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.136483][ T6362] program syz.3.73 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.189116][ T1456] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 120.501940][ T6368] binder: 6367:6368 ioctl 81e8943c 0 returned -22 [ 120.504513][ T6368] binder: 6367:6368 ioctl 5000943f 80000980 returned -22 [ 123.798150][ T6406] program syz.1.82 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.453388][ T6412] binder: 6411:6412 ioctl 81e8943c 80000580 returned -22 [ 124.457457][ T6412] binder: 6411:6412 ioctl 5000943f 80000980 returned -22 [ 126.553434][ T6438] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.768370][ T6438] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.917187][ T6427] program syz.1.88 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.081683][ T6438] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.210033][ T6438] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.392086][ T685] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.394716][ T685] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.402809][ T685] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.413254][ T685] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.198968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 129.313818][ T6461] binder: 6460:6461 ioctl 81e8943c 80000580 returned -22 [ 129.316633][ T6461] binder: 6460:6461 ioctl 5000943f 80000980 returned -22 [ 129.515476][ T6466] program syz.2.94 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.681642][ T6470] netlink: 184 bytes leftover after parsing attributes in process `syz.3.96'. [ 129.726575][ T6473] program syz.1.97 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.804344][ T6474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.96'. [ 129.808379][ T6474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.96'. [ 130.333811][ T6480] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 130.335965][ T6480] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 130.351626][ T6480] vhci_hcd vhci_hcd.0: Device attached [ 130.530834][ T34] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 130.668934][ T34] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 130.969043][ T6481] vhci_hcd: connection reset by peer [ 130.973347][ T13] vhci_hcd vhci_hcd.0: stop threads [ 130.977467][ T13] vhci_hcd vhci_hcd.0: release socket [ 130.981966][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 133.134049][ T6515] program syz.3.106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.713109][ T6075] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 135.749059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 135.788983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 135.808942][ T34] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 136.067794][ T6541] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 136.070427][ T6541] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 136.076111][ T6541] vhci_hcd vhci_hcd.0: Device attached [ 136.156996][ T6548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.112'. [ 136.161091][ T6548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.112'. [ 136.190519][ T6548] syz_tun: entered promiscuous mode [ 136.202495][ T6075] usb 8-1: config index 0 descriptor too short (expected 28277, got 36) [ 136.205705][ T6075] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.209867][ T6075] usb 8-1: config 0 has no interfaces? [ 136.214247][ T6075] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 136.217097][ T6075] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.258111][ T6075] usb 8-1: config 0 descriptor?? [ 136.265931][ T6548] syz_tun: left promiscuous mode [ 136.317583][ T34] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 136.389177][ T34] usb 37-1: device descriptor read/64, error -110 [ 136.570155][ T34] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 136.602854][ T6548] Zero length message leads to an empty skb [ 136.639179][ T34] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 137.114469][ T6558] block device autoloading is deprecated and will be removed. [ 137.422517][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.424633][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.162453][ T6542] vhci_hcd: connection reset by peer [ 138.165158][ T1211] vhci_hcd vhci_hcd.0: stop threads [ 138.172541][ T1211] vhci_hcd vhci_hcd.0: release socket [ 138.174543][ T1211] vhci_hcd vhci_hcd.0: disconnect device [ 139.056265][ T1331] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 139.148744][ T5980] usb 8-1: USB disconnect, device number 2 [ 139.210290][ T1331] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 139.213128][ T1331] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.216731][ T1331] usb 6-1: config 0 has no interfaces? [ 139.218674][ T1331] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 139.223334][ T1331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.230865][ T1331] usb 6-1: config 0 descriptor?? [ 139.452067][ T6576] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 139.454425][ T6576] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 139.469057][ T6576] vhci_hcd vhci_hcd.0: Device attached [ 139.600956][ T6580] dummy0: entered allmulticast mode [ 139.669484][ T50] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 139.728938][ T50] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 139.908874][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 140.058979][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 140.064465][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.069061][ T24] usb 7-1: config 0 has no interfaces? [ 140.071529][ T24] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 140.075572][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.082726][ T24] usb 7-1: config 0 descriptor?? [ 140.417441][ T24] usb 7-1: USB disconnect, device number 3 [ 140.424719][ T6579] dummy0: left allmulticast mode [ 141.283605][ T6577] vhci_hcd: connection reset by peer [ 141.299447][ T155] vhci_hcd vhci_hcd.3: stop threads [ 141.301222][ T155] vhci_hcd vhci_hcd.3: release socket [ 141.303674][ T155] vhci_hcd vhci_hcd.3: disconnect device [ 141.493494][ T5954] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 141.498225][ T5954] CPU: 3 UID: 0 PID: 5954 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 141.498249][ T5954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.498261][ T5954] Workqueue: hci0 hci_rx_work [ 141.498289][ T5954] Call Trace: [ 141.498308][ T5954] [ 141.498316][ T5954] dump_stack_lvl+0x100/0x190 [ 141.498346][ T5954] sysfs_warn_dup.cold+0x1c/0x28 [ 141.498369][ T5954] sysfs_create_dir_ns+0x24b/0x2b0 [ 141.498393][ T5954] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 141.498419][ T5954] ? kobject_namespace+0x72/0x1a0 [ 141.498437][ T5954] ? kobject_namespace+0x97/0x1a0 [ 141.498458][ T5954] kobject_add_internal+0x2c8/0x930 [ 141.498480][ T5954] kobject_add+0x16a/0x1e0 [ 141.498499][ T5954] ? __pfx_kobject_add+0x10/0x10 [ 141.498515][ T5954] ? class_to_subsys+0x10f/0x150 [ 141.498541][ T5954] ? kobject_put+0xb9/0x640 [ 141.498555][ T5954] ? _raw_spin_unlock+0x28/0x50 [ 141.498584][ T5954] device_add+0x294/0x1950 [ 141.498607][ T5954] ? __pfx_dev_set_name+0x10/0x10 [ 141.498632][ T5954] ? __pfx_device_add+0x10/0x10 [ 141.498653][ T5954] ? mgmt_send_event_skb+0x2fb/0x460 [ 141.498682][ T5954] hci_conn_add_sysfs+0x1a3/0x260 [ 141.498707][ T5954] le_conn_complete_evt+0x11cb/0x1f40 [ 141.498735][ T5954] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 141.498763][ T5954] hci_le_conn_complete_evt+0x23c/0x3a0 [ 141.498786][ T5954] ? skb_pull_data+0x15f/0x1e0 [ 141.498808][ T5954] hci_le_meta_evt+0x34a/0x5f0 [ 141.498831][ T5954] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 141.498855][ T5954] hci_event_packet+0x682/0x11c0 [ 141.498878][ T5954] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 141.498902][ T5954] ? __pfx_hci_event_packet+0x10/0x10 [ 141.498925][ T5954] ? kcov_remote_start+0x374/0x660 [ 141.498942][ T5954] ? lockdep_hardirqs_on+0x78/0x100 [ 141.498981][ T5954] hci_rx_work+0x451/0xfc0 [ 141.499007][ T5954] process_one_work+0xa23/0x19a0 [ 141.499045][ T5954] ? __pfx_process_one_work+0x10/0x10 [ 141.499077][ T5954] ? __pfx_hci_rx_work+0x10/0x10 [ 141.499100][ T5954] worker_thread+0x5ef/0xe50 [ 141.499133][ T5954] ? kthread+0x13a/0x450 [ 141.499154][ T5954] ? __pfx_worker_thread+0x10/0x10 [ 141.499176][ T5954] kthread+0x370/0x450 [ 141.499197][ T5954] ? __pfx_kthread+0x10/0x10 [ 141.499220][ T5954] ret_from_fork+0x754/0xd80 [ 141.499246][ T5954] ? __pfx_ret_from_fork+0x10/0x10 [ 141.499273][ T5954] ? __switch_to+0x7b4/0x1120 [ 141.499292][ T5954] ? __pfx_kthread+0x10/0x10 [ 141.499316][ T5954] ret_from_fork_asm+0x1a/0x30 [ 141.499371][ T5954] [ 141.589021][ T5954] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 141.593464][ T5954] Bluetooth: hci0: failed to register connection device [ 141.598690][ T5954] ================================================================== [ 141.601261][ T5954] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0xe57/0x1050 [ 141.603778][ T5954] Read of size 8 at addr ffff8880255f0480 by task kworker/u33:3/5954 [ 141.607620][ T5954] [ 141.608759][ T5954] CPU: 3 UID: 0 PID: 5954 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 141.608775][ T5954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.608785][ T5954] Workqueue: hci0 hci_rx_work [ 141.608804][ T5954] Call Trace: [ 141.608809][ T5954] [ 141.608813][ T5954] dump_stack_lvl+0x100/0x190 [ 141.608833][ T5954] print_report+0x156/0x4c9 [ 141.608850][ T5954] ? __virt_addr_valid+0x81/0x620 [ 141.608866][ T5954] ? __phys_addr+0xe8/0x180 [ 141.608882][ T5954] ? l2cap_connect_cfm+0xe57/0x1050 [ 141.608895][ T5954] kasan_report+0xdf/0x1e0 [ 141.608908][ T5954] ? l2cap_connect_cfm+0xe57/0x1050 [ 141.608923][ T5954] l2cap_connect_cfm+0xe57/0x1050 [ 141.608940][ T5954] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 141.608960][ T5954] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 141.608974][ T5954] le_conn_complete_evt+0x195c/0x1f40 [ 141.608990][ T5954] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 141.609006][ T5954] hci_le_conn_complete_evt+0x23c/0x3a0 [ 141.609021][ T5954] ? skb_pull_data+0x15f/0x1e0 [ 141.609035][ T5954] hci_le_meta_evt+0x34a/0x5f0 [ 141.609053][ T5954] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 141.609069][ T5954] hci_event_packet+0x682/0x11c0 [ 141.609083][ T5954] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 141.609098][ T5954] ? __pfx_hci_event_packet+0x10/0x10 [ 141.609113][ T5954] ? kcov_remote_start+0x374/0x660 [ 141.609124][ T5954] ? lockdep_hardirqs_on+0x78/0x100 [ 141.609143][ T5954] hci_rx_work+0x451/0xfc0 [ 141.609158][ T5954] process_one_work+0xa23/0x19a0 [ 141.609177][ T5954] ? __pfx_process_one_work+0x10/0x10 [ 141.609195][ T5954] ? __pfx_hci_rx_work+0x10/0x10 [ 141.609209][ T5954] worker_thread+0x5ef/0xe50 [ 141.609227][ T5954] ? kthread+0x13a/0x450 [ 141.609241][ T5954] ? __pfx_worker_thread+0x10/0x10 [ 141.609257][ T5954] kthread+0x370/0x450 [ 141.609272][ T5954] ? __pfx_kthread+0x10/0x10 [ 141.609287][ T5954] ret_from_fork+0x754/0xd80 [ 141.609304][ T5954] ? __pfx_ret_from_fork+0x10/0x10 [ 141.609321][ T5954] ? __switch_to+0x7b4/0x1120 [ 141.609333][ T5954] ? __pfx_kthread+0x10/0x10 [ 141.609348][ T5954] ret_from_fork_asm+0x1a/0x30 [ 141.609364][ T5954] [ 141.609367][ T5954] [ 141.676242][ T5954] Allocated by task 5954: [ 141.677612][ T5954] kasan_save_stack+0x30/0x50 [ 141.679126][ T5954] kasan_save_track+0x14/0x30 [ 141.680633][ T5954] __kasan_kmalloc+0xaa/0xb0 [ 141.682038][ T5954] l2cap_chan_create+0x44/0x940 [ 141.683572][ T5954] l2cap_sock_alloc.constprop.0+0xf5/0x1e0 [ 141.685403][ T5954] l2cap_sock_new_connection_cb+0x101/0x260 [ 141.687273][ T5954] l2cap_connect_cfm+0x4e2/0x1050 [ 141.688869][ T5954] le_conn_complete_evt+0x195c/0x1f40 [ 141.690605][ T5954] hci_le_conn_complete_evt+0x23c/0x3a0 [ 141.692353][ T5954] hci_le_meta_evt+0x34a/0x5f0 [ 141.693887][ T5954] hci_event_packet+0x682/0x11c0 [ 141.695455][ T5954] hci_rx_work+0x451/0xfc0 [ 141.696884][ T5954] process_one_work+0xa23/0x19a0 [ 141.698392][ T5954] worker_thread+0x5ef/0xe50 [ 141.699777][ T5954] kthread+0x370/0x450 [ 141.701037][ T5954] ret_from_fork+0x754/0xd80 [ 141.702505][ T5954] ret_from_fork_asm+0x1a/0x30 [ 141.704029][ T5954] [ 141.704795][ T5954] Freed by task 6592: [ 141.706055][ T5954] kasan_save_stack+0x30/0x50 [ 141.707513][ T5954] kasan_save_track+0x14/0x30 [ 141.709005][ T5954] kasan_save_free_info+0x3b/0x70 [ 141.710626][ T5954] __kasan_slab_free+0x5f/0x80 [ 141.712156][ T5954] kfree+0x1f6/0x6b0 [ 141.713403][ T5954] l2cap_chan_put+0x235/0x300 [ 141.714888][ T5954] l2cap_sock_cleanup_listen+0x4d/0x2d0 [ 141.716636][ T5954] l2cap_sock_release+0x69/0x280 [ 141.718204][ T5954] __sock_release+0xb3/0x260 [ 141.719590][ T5954] sock_close+0x1c/0x30 [ 141.720885][ T5954] __fput+0x3ff/0xb40 [ 141.722137][ T5954] task_work_run+0x150/0x240 [ 141.723594][ T5954] exit_to_user_mode_loop+0x100/0x4a0 [ 141.725291][ T5954] __do_fast_syscall_32+0x578/0x8c0 [ 141.726893][ T5954] do_fast_syscall_32+0x32/0x70 [ 141.728409][ T5954] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 141.730460][ T5954] [ 141.731233][ T5954] The buggy address belongs to the object at ffff8880255f0000 [ 141.731233][ T5954] which belongs to the cache kmalloc-2k of size 2048 [ 141.735544][ T5954] The buggy address is located 1152 bytes inside of [ 141.735544][ T5954] freed 2048-byte region [ffff8880255f0000, ffff8880255f0800) [ 141.739775][ T5954] [ 141.740563][ T5954] The buggy address belongs to the physical page: [ 141.742558][ T5954] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x255f0 [ 141.745278][ T5954] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 141.747911][ T5954] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 141.750272][ T5954] page_type: f5(slab) [ 141.751560][ T5954] raw: 00fff00000000040 ffff88801b842f00 dead000000000100 dead000000000122 [ 141.754255][ T5954] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 141.756936][ T5954] head: 00fff00000000040 ffff88801b842f00 dead000000000100 dead000000000122 [ 141.759711][ T5954] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 141.762407][ T5954] head: 00fff00000000003 ffffea0000957c01 00000000ffffffff 00000000ffffffff [ 141.765131][ T5954] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 141.767865][ T5954] page dumped because: kasan: bad access detected [ 141.769905][ T5954] page_owner tracks the page as allocated [ 141.771681][ T5954] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5943, tgid 5943 (syz-executor), ts 83065771137, free_ts 27864945688 [ 141.778186][ T5954] post_alloc_hook+0x153/0x170 [ 141.779764][ T5954] get_page_from_freelist+0x111d/0x3140 [ 141.781514][ T5954] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 141.783369][ T5954] new_slab+0xa6/0x6b0 [ 141.784671][ T5954] refill_objects+0x26b/0x400 [ 141.786124][ T5954] __pcs_replace_empty_main+0x1ab/0x660 [ 141.787829][ T5954] __kmalloc_cache_noprof+0x493/0x6f0 [ 141.789484][ T5954] rtnl_newlink+0x126/0x2380 [ 141.790917][ T5954] rtnetlink_rcv_msg+0x95e/0xe90 [ 141.792451][ T5954] netlink_rcv_skb+0x159/0x420 [ 141.793955][ T5954] netlink_unicast+0x5aa/0x870 [ 141.795504][ T5954] netlink_sendmsg+0x8b0/0xda0 [ 141.797030][ T5954] __sys_sendto+0x468/0x4b0 [ 141.798482][ T5954] __ia32_compat_sys_socketcall+0x59a/0x770 [ 141.800396][ T5954] do_int80_emulation+0x141/0x6b0 [ 141.801988][ T5954] asm_int80_emulation+0x1a/0x20 [ 141.803547][ T5954] page last free pid 5353 tgid 5353 stack trace: [ 141.805535][ T5954] __free_frozen_pages+0x7e1/0x10d0 [ 141.807178][ T5954] qlist_free_all+0x47/0xe0 [ 141.808634][ T5954] kasan_quarantine_reduce+0x1a0/0x1f0 [ 141.810389][ T5954] __kasan_slab_alloc+0x69/0x90 [ 141.811939][ T5954] kmem_cache_alloc_noprof+0x241/0x6e0 [ 141.813665][ T5954] do_getname+0x35/0x390 [ 141.815013][ T5954] do_readlinkat+0xa9/0x370 [ 141.816409][ T5954] __x64_sys_readlink+0x78/0xc0 [ 141.817944][ T5954] do_syscall_64+0x106/0xf80 [ 141.819416][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.821302][ T5954] [ 141.822075][ T5954] Memory state around the buggy address: [ 141.823840][ T5954] ffff8880255f0380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.826280][ T5954] ffff8880255f0400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.828797][ T5954] >ffff8880255f0480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.831317][ T5954] ^ [ 141.832651][ T5954] ffff8880255f0500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.835148][ T5954] ffff8880255f0580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.837662][ T5954] ================================================================== [ 141.842976][ T5954] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 141.845286][ T5954] CPU: 3 UID: 0 PID: 5954 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 141.848263][ T5954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.851525][ T5954] Workqueue: hci0 hci_rx_work [ 141.853062][ T5954] Call Trace: [ 141.854129][ T5954] [ 141.855074][ T5954] dump_stack_lvl+0x100/0x190 [ 141.856580][ T5954] vpanic+0x552/0x970 [ 141.857854][ T5954] ? __pfx_vpanic+0x10/0x10 [ 141.859299][ T5954] ? l2cap_connect_cfm+0xe57/0x1050 [ 141.860979][ T5954] panic+0xd1/0xe0 [ 141.862271][ T5954] ? __pfx_panic+0x10/0x10 [ 141.863740][ T5954] ? l2cap_connect_cfm+0xe57/0x1050 [ 141.865428][ T5954] ? preempt_schedule_common+0x42/0xc0 [ 141.867203][ T5954] check_panic_on_warn.cold+0x19/0x34 [ 141.868967][ T5954] end_report.part.0+0x3a/0x90 [ 141.870549][ T5954] kasan_report.cold+0xe/0x18 [ 141.872093][ T5954] ? l2cap_connect_cfm+0xe57/0x1050 [ 141.873762][ T5954] l2cap_connect_cfm+0xe57/0x1050 [ 141.875383][ T5954] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 141.877162][ T5954] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 141.879006][ T5954] le_conn_complete_evt+0x195c/0x1f40 [ 141.880928][ T5954] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 141.882928][ T5954] hci_le_conn_complete_evt+0x23c/0x3a0 [ 141.884782][ T5954] ? skb_pull_data+0x15f/0x1e0 [ 141.886324][ T5954] hci_le_meta_evt+0x34a/0x5f0 [ 141.887876][ T5954] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 141.889837][ T5954] hci_event_packet+0x682/0x11c0 [ 141.891426][ T5954] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 141.893130][ T5954] ? __pfx_hci_event_packet+0x10/0x10 [ 141.894844][ T5954] ? kcov_remote_start+0x374/0x660 [ 141.896438][ T5954] ? lockdep_hardirqs_on+0x78/0x100 [ 141.898109][ T5954] hci_rx_work+0x451/0xfc0 [ 141.899556][ T5954] process_one_work+0xa23/0x19a0 [ 141.901181][ T5954] ? __pfx_process_one_work+0x10/0x10 [ 141.902893][ T5954] ? __pfx_hci_rx_work+0x10/0x10 [ 141.904529][ T5954] worker_thread+0x5ef/0xe50 [ 141.906017][ T5954] ? kthread+0x13a/0x450 [ 141.907392][ T5954] ? __pfx_worker_thread+0x10/0x10 [ 141.909026][ T5954] kthread+0x370/0x450 [ 141.910375][ T5954] ? __pfx_kthread+0x10/0x10 [ 141.911865][ T5954] ret_from_fork+0x754/0xd80 [ 141.913379][ T5954] ? __pfx_ret_from_fork+0x10/0x10 [ 141.915007][ T5954] ? __switch_to+0x7b4/0x1120 [ 141.916490][ T5954] ? __pfx_kthread+0x10/0x10 [ 141.917925][ T5954] ret_from_fork_asm+0x1a/0x30 [ 141.919421][ T5954] [ 141.921096][ T5954] Kernel Offset: disabled [ 141.922446][ T5954] Rebooting in 86400 seconds.. VM DIAGNOSIS: 08:38:54 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff88802b23b348 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff88802b23b34a RBP=dffffc0000000000 RSP=ffffc900032f7468 R8 =0000000000000001 R9 =ffffed1005647669 R10=ffff88802b23b34b R11=0000000000000000 R12=0000000000007e20 R13=ffffed1005647669 R14=ffff88802b23c240 R15=0000000000000000 RIP=ffffffff8b90c904 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097146000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080116018 CR3=0000000053984000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88802b23b348 RCX=0000000000000100 RDX=0000000000000001 RSI=0000000000000002 RDI=ffff88802b23b34a RBP=dffffc0000000000 RSP=ffffc9000046f960 R8 =0000000000000001 R9 =ffffed1005647669 R10=ffff88802b23b34b R11=0000000000000000 R12=0000000000007de0 R13=ffffed1005647669 R14=ffff88802b33c240 R15=0000000000000000 RIP=ffffffff8b90c8e5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097246000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080104018 CR3=0000000053984000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000e9041 RBX=ffff88801c3c4980 RCX=ffffffff8b8ddc75 RDX=0000000000000000 RSI=ffffffff8de80d8a RDI=ffffffff8c1b11a0 RBP=0000000000000000 RSP=ffffc9000047fdf0 R8 =0000000000000001 R9 =ffffed100568679d R10=ffff88802b433ceb R11=0000000000000000 R12=0000000000000002 R13=ffffed1003878930 R14=0000000000000002 R15=ffffffff90d9da10 RIP=ffffffff8b8dc5df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097346000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000008000f000 CR3=000000004d477000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8577dbf5 RDI=ffffffff9b492180 RBP=ffffffff9b492140 RSP=ffffc9000667f250 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000035393554 R12=0000000000000000 R13=0000000000000020 R14=0000000000000010 R15=ffffffff8577db90 RIP=ffffffff8577dc1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097446000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000030610ff8 CR3=0000000072d4f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000