last executing test programs: 5.484903985s ago: executing program 2 (id=226): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x48045) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) flock(r1, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) syz_io_uring_setup(0x643d, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) waitid(0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x4, 0x0) 4.561042161s ago: executing program 2 (id=231): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001800dd8d00000000fedbdf2502201000fd04fe020000000008001e000100000004000880"], 0x28}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', 0x0, 0x0, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x54, 0x2000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x10, r5, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4082, 0xff2}], 0x1) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r7, 0x0, 0x2000, 0x1) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00068000000889078ac1414bbac1414aaff3c79ee0b1bb5b4bbfe4e24009c90780100000004000000497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d4bbef500000000221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7da851525b16af17fe87ac3ae2ab0b233d01422d01cd53c3abe94331d0b7918724"], 0x0) recvmmsg(r3, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000340)="1c0000001d005f0214fffffffffffff8070000000d00000000000700", 0x1c) 2.70804109s ago: executing program 3 (id=238): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) r5 = openat$iommufd(0xffffff9c, &(0x7f00000000c0), 0x2500, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f0000000100)={0x10}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.707405161s ago: executing program 2 (id=239): r0 = syz_open_dev$ndb(&(0x7f0000000900), 0x0, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r2, r3, 0x26, 0x0, @val=@netkit}, 0x1c) close(r3) close(r4) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80000) ioctl$NBD_DO_IT(r5, 0xab03) 2.43093082s ago: executing program 0 (id=240): syz_open_dev$ndb(0x0, 0x0, 0x40400) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.950500524s ago: executing program 0 (id=245): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001800dd8d00000000fedbdf2502201000fd04fe020000000008001e000100000004000880"], 0x28}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', 0x0, 0x0, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x54, 0x2000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x10, r5, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4082, 0xff2}], 0x1) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r7, 0x0, 0x2000, 0x1) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00068000000889078ac1414bbac1414aaff3c79ee0b1bb5b4bbfe4e24009c90780100000004000000497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d4bbef500000000221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7da851525b16af17fe87ac3ae2ab0b233d01422d01cd53c3abe94331d0b7918724"], 0x0) recvmmsg(r3, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000340)="1c0000001d005f0214fffffffffffff8070000000d00000000000700", 0x1c) 1.95018316s ago: executing program 1 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=inte']) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) openat2(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440)={0x80000, 0x10, 0x20}, 0x18) r3 = getpgrp(0xffffffffffffffff) sched_setaffinity(r3, 0x8, &(0x7f0000000480)=0x5) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) 1.845090355s ago: executing program 1 (id=247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000041}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x300}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x10080000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0x8, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c065}, 0x4008000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x384, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x2f8, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x2e4, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0xc, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x114, 0x4, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xe}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="daeb4ba1a6c6"}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_DMAC={0xa, 0x3, @random="e9e1c4838306"}]}, {0xb3, 0x6, "649da7c5a93df67b1e63cd08a15283a9ed2eee0dce8cbba647648da0c4e1189f5e75d062c9263caca11ce7563082def05f8cb93010a196799bf09defed733c3efdfbd35e2b3c59cd043aaacb82d9e4937148807bc76d94517d981e73b94ed69029f1a3f6b34f43e157efb7b5389cfb58509d1105d466a0504300777cc31865e8ea4140c45ad15e937943bae99cdc3c196b0c725ed5fc0fc86135cc3894584393468c6a51873d1e62cc477678f76d2e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x180, 0x1a, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xa2f74}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_LABEL={0x8, 0x5, 0x9ea71}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x4, 0xffffffffffffffff, 0x6, 0x3}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa7d65}]}, {0xfe, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x7f}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffffff, 0xffffff00, 0xff000000, 0xff]}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e22}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @random="0ffa796ee045"}]}}]}, 0x384}, 0x1, 0x0, 0x0, 0x20}, 0x2) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c002400000000000600000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 1.805318231s ago: executing program 0 (id=248): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xb7) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x800) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xad, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0xf4e, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x59c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r4, @ANYRESHEX=r5], 0x15) 1.800305141s ago: executing program 2 (id=249): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'nr0\x00', 0x100}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES8=r1], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) tkill(r0, 0x13) ptrace(0x4206, r0) ptrace$peekuser(0x3, r0, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000), 0x4) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000001300)={0x0, 0x0, 0x3}) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil}) r5 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x0, 0x5004) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x6, 0x0, 0xffffffffffffffff) read$dsp(r6, &(0x7f00000002c0)=""/4096, 0x1000) 1.78092779s ago: executing program 3 (id=250): mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f00000000c0), 0x2438cc1c75303902, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x53b8}, 0x1, 0x80000000, 0x0, 0x5, r0, r0, 0x5}) r3 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x769e, 0x9dd2, 0x63, 0x0, 0x0) 1.519587818s ago: executing program 3 (id=251): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'nr0\x00', 0x100}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES8=r1], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) tkill(r0, 0x13) ptrace(0x4206, r0) ptrace$peekuser(0x3, r0, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000), 0x4) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000001300)={0x0, 0x0, 0x3}) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil}) r5 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x0, 0x5004) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x6, 0x0, 0xffffffffffffffff) read$dsp(r6, &(0x7f00000002c0)=""/4096, 0x1000) 958.913505ms ago: executing program 0 (id=252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x3c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 918.805603ms ago: executing program 0 (id=253): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9, 0x9}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'gretap0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x7, 0x80, 0x3, 0x3, {{0x1d, 0x4, 0x1, 0x17, 0x74, 0x65, 0x0, 0x5, 0x29, 0x0, @multicast2, @multicast2, {[@cipso={0x86, 0xa, 0x1, [{0x2, 0x4, '!M'}]}, @ssrr={0x89, 0x7, 0xfa, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x4c, 0xf6, 0x3, 0x5, [{@rand_addr=0x64010102, 0x1}, {@multicast2, 0x54bd}, {@broadcast, 0xfffffff7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff8}, {@loopback, 0x7}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x10}, {@multicast2, 0x5d66}, {@rand_addr=0x64010100, 0x401}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="d4000000f5000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0317000000000000a40034801400350070696d726567310000000000000000001400350065727370616e30000000000000000000140035007665746830000000000000000000000014003500626174616476300000000000000000001400350076657468305f746f5f6873720000000014003500697036677265746170300000000000001400350076657468315f766c616e0000000000001400350064766d72703100000000000000000000080004000008000008000a00", @ANYRES32=r7, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x2004d888}, 0x20004) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x57, 0x9, 0x4, @mcast2, @mcast1, 0x80, 0x8000, 0x0, 0x9}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r2, @ANYBLOB="040027bd7000fcdbdf251500000044000180080003000100000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0800030000000000080003000200000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030002000004c3576a9a82c3212598a130e4531548000180d7fd0100", @ANYRES32=0x0, @ANYRESDEC=r5, @ANYRES32=r7, @ANYRESDEC=r1, @ANYRES32=r8, @ANYBLOB="0800030001000000080003000300000014000200766972745f7769666930000000000000080003000300000018000180140002007465616d30000000000000000000000004000180"], 0xbc}, 0x1, 0x0, 0x0, 0x60000000}, 0x48000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_setup(0x30aa, &(0x7f00000007c0)={0x0, 0x764, 0x200, 0x1, 0x14c}) socket$alg(0x26, 0x5, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0a00ff720100007110060000000000950000000000000036481c0bb0d75d190026bc8dd41a52dd8652c2eeea13aedd18805a9d6b4b88ea97e7e54d7483b5f058f6160997c5081ced4e737e98b7c7245b4d9db5205fa4ae99722bfbec66b969adce0690fa808ec257322ae5f92d5715851feaf6f3525e0ab4d7af9687e35d9c157ff6a16ef5ecaedeebdaece8f9367eb9258eb98149317cdd2cd86194f772eca3"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='9p\x00', 0x208000, 0x0) syz_io_uring_setup(0x496, 0x0, &(0x7f0000000340), &(0x7f0000000080)) 861.636393ms ago: executing program 2 (id=254): syz_open_dev$ndb(0x0, 0x0, 0x40400) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, 0x0, 0x0, 0x0) 860.823392ms ago: executing program 1 (id=255): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=inte']) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) openat2(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440)={0x80000, 0x10, 0x20}, 0x18) r3 = getpgrp(0xffffffffffffffff) sched_setaffinity(r3, 0x8, &(0x7f0000000480)=0x5) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) 800.970747ms ago: executing program 0 (id=256): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="654671ca4b48f31b5f810e5e09c898e9f6", 0x11}], 0x1, 0x0, 0x0, 0xd0}, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000200)={0x20, r2, 0x329, 0xfffffffc, 0x25dfdbfe, {0x16}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000870}, 0x4008004) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) splice(r5, &(0x7f00000001c0), r4, &(0x7f0000000200)=0x5, 0x40, 0xc) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, &(0x7f0000000000)={0x98, 0xa}) r6 = openat$sndseq(0xffffff9c, &(0x7f0000000300), 0x82000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000340)={0x20, 0x9, 0x4}) timer_create(0x5, &(0x7f0000000240)={0x0, 0x1, 0x0, @thr={&(0x7f0000000380)="2db1452ecf11bdbcb6734af5487f6045f3a7ca08a775475d129153a24be33894bf4611d9ce1f38a6734495df63da1b046f18e207d2ec8392376abf41a17fbff9487e0f267b3e6a8915ba79caeec95146afa246ce60c7c04a3c2d145cd8bf37c7f098ce3735eb1b8d21a2bb3610557d0909e77346c207597aafeebc125f534f009bd3215a8e00b898a231dfb40067fcbbb439d35a7611b797c5f8fdced0018566ba1dc3f0cf7adbeefd1edeaafb1bab1c6856b94479f0ad5aad6859c7a4eccaab63f9d46b7bd8960a82c67dab7c41", &(0x7f0000000480)="2584249a5daa1d92ed2d03bf3f985d55d177c4d66df252fc69607f898a767b72630ec65e055ac567ad3fe40f640ba612d425ac8c0a0af047c4973db5c49af61e4eab51faf2cdfcff1a9e6030cd3481"}}, &(0x7f00000002c0)=0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) timer_settime(r7, 0x0, &(0x7f0000000580)={{r8, r9+10000000}, {0x77359400}}, &(0x7f00000005c0)) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x1e, 0x8, 0x0, 0x3, @multicast}, 0x10) connect$llc(r4, &(0x7f0000000080)={0x1a, 0x5, 0x3, 0xbf, 0x8, 0x4, @multicast}, 0x10) io_setup(0x6, &(0x7f0000000600)=0x0) r11 = openat$vmci(0xffffff9c, &(0x7f0000000640), 0x2, 0x0) r12 = eventfd2(0x4, 0x100001) io_cancel(r10, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x8, 0xfff7, r11, &(0x7f0000000680)="0a6cf8ca777d783497e719645cbf2a5be13dcec0a00874afdf959b91bfc48479f88aff20432876dd05b8599b8a7aff46c9fa916c7338b6fd6a54edb4b49aaf45efa05b00e727009f15298b5ad2bff881742b5513dab6591abd7dce22519a7f96e68c6862c7add8e91b10a0f54a3518d19c8c4fb872293816e6cfbb75f3e0bb7c613b35ed2d78bd60ab49f2254c91749360bc84d4f3dc7729abc9d8a4ebc235d8e00153b06f2c6ea19039011801eafc5cb5d25b1da4b081740d", 0xb9, 0x5, 0x0, 0x0, r12}, &(0x7f0000000780)) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r13, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_settime(r13, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 640.922884ms ago: executing program 3 (id=257): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001800dd8d00000000fedbdf2502201000fd04fe020000000008001e000100000004000880"], 0x28}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', 0x0, 0x0, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x54, 0x2000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pB \x00'}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x10, r5, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4082, 0xff2}], 0x1) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pread64(r7, 0x0, 0x2000, 0x1) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00068000000889078ac1414bbac1414aaff3c79ee0b1bb5b4bbfe4e24009c90780100000004000000497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d4bbef500000000221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7da851525b16af17fe87ac3ae2ab0b233d01422d01cd53c3abe94331d0b7918724"], 0x0) recvmmsg(r3, &(0x7f00000033c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000340)="1c0000001d005f0214fffffffffffff8070000000d00000000000700", 0x1c) 638.968498ms ago: executing program 1 (id=265): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) r5 = openat$iommufd(0xffffff9c, &(0x7f00000000c0), 0x2500, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f0000000100)={0x10}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 484.678658ms ago: executing program 3 (id=258): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r5) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES16=r3, @ANYRES8=r6, @ANYRES8=r4], 0x14}}, 0x88c5) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESOCT=r4, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x4044880}, 0x40000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r8, 0x1, 0x70bd2c, 0x5, {}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nbd\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x265da54ce6cb8ded}, 0x404c000) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r8, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4084}, 0x4000) 417.91689ms ago: executing program 3 (id=259): mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f00000000c0), 0x2438cc1c75303902, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x53b8}, 0x1, 0x80000000, 0x0, 0x5, r0, r0, 0x5}) r3 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x769e, 0x9dd2, 0x63, 0x0, 0x0) 311.018437ms ago: executing program 2 (id=260): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'nr0\x00', 0x100}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES8=r1], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) tkill(r0, 0x13) ptrace(0x4206, r0) ptrace$peekuser(0x3, r0, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000), 0x4) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000001300)={0x0, 0x0, 0x3}) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil}) r5 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x0, 0x5004) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x6, 0x0, 0xffffffffffffffff) read$dsp(r6, &(0x7f00000002c0)=""/4096, 0x1000) 90.306138ms ago: executing program 1 (id=261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x3c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 0s ago: executing program 1 (id=262): timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) getpid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:29148' (ED25519) to the list of known hosts. [ 48.369956][ T5913] cgroup: Unknown subsys name 'net' [ 48.491843][ T5913] cgroup: Unknown subsys name 'cpuset' [ 48.497196][ T5913] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.372526][ T5913] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.954280][ T5293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.957290][ T5293] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.960207][ T5293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.962745][ T5293] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.965292][ T5293] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.969542][ T5293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.973092][ T5293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.973584][ T5942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.976279][ T5293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.979108][ T5942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.980972][ T5293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.984627][ T5942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.988826][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.989155][ T5947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.992183][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.992938][ T5941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.993613][ T5941] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.994945][ T5947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.003056][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.005354][ T5947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.325245][ T5930] chnl_net:caif_netlink_parms(): no params data found [ 53.356535][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 53.381820][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 53.417765][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 53.531267][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.534424][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.537659][ T5930] bridge_slave_0: entered allmulticast mode [ 53.541761][ T5930] bridge_slave_0: entered promiscuous mode [ 53.564614][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.570028][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.573122][ T5930] bridge_slave_1: entered allmulticast mode [ 53.577038][ T5930] bridge_slave_1: entered promiscuous mode [ 53.590512][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.592905][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.595210][ T5934] bridge_slave_0: entered allmulticast mode [ 53.597855][ T5934] bridge_slave_0: entered promiscuous mode [ 53.601952][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.604314][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.606566][ T5934] bridge_slave_1: entered allmulticast mode [ 53.612257][ T5934] bridge_slave_1: entered promiscuous mode [ 53.636933][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.642210][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.644493][ T5936] bridge_slave_0: entered allmulticast mode [ 53.647128][ T5936] bridge_slave_0: entered promiscuous mode [ 53.659390][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.661767][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.664062][ T5936] bridge_slave_1: entered allmulticast mode [ 53.666743][ T5936] bridge_slave_1: entered promiscuous mode [ 53.691359][ T5930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.715143][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.717516][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.719943][ T5935] bridge_slave_0: entered allmulticast mode [ 53.723000][ T5935] bridge_slave_0: entered promiscuous mode [ 53.733493][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.735820][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.738074][ T5935] bridge_slave_1: entered allmulticast mode [ 53.740904][ T5935] bridge_slave_1: entered promiscuous mode [ 53.745500][ T5930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.750215][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.761394][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.776329][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.780912][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.791296][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.813332][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.817561][ T5930] team0: Port device team_slave_0 added [ 53.821233][ T5930] team0: Port device team_slave_1 added [ 53.850950][ T5934] team0: Port device team_slave_0 added [ 53.858998][ T5936] team0: Port device team_slave_0 added [ 53.867220][ T5934] team0: Port device team_slave_1 added [ 53.869852][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.872251][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.880512][ T5930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.885836][ T5936] team0: Port device team_slave_1 added [ 53.889654][ T5935] team0: Port device team_slave_0 added [ 53.898697][ T5935] team0: Port device team_slave_1 added [ 53.900977][ T5930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.903235][ T5930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.911877][ T5930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.937527][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.939815][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.948292][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.953337][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.955677][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.963725][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.980045][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.982921][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.993555][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.009495][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.012442][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.023119][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.054332][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.057354][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.068601][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.084095][ T5930] hsr_slave_0: entered promiscuous mode [ 54.086530][ T5930] hsr_slave_1: entered promiscuous mode [ 54.098620][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.101759][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.112706][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.135455][ T5934] hsr_slave_0: entered promiscuous mode [ 54.137746][ T5934] hsr_slave_1: entered promiscuous mode [ 54.140269][ T5934] debugfs: 'hsr0' already exists in 'hsr' [ 54.142269][ T5934] Cannot create hsr debugfs directory [ 54.156068][ T5936] hsr_slave_0: entered promiscuous mode [ 54.159418][ T5936] hsr_slave_1: entered promiscuous mode [ 54.162082][ T5936] debugfs: 'hsr0' already exists in 'hsr' [ 54.164239][ T5936] Cannot create hsr debugfs directory [ 54.225270][ T5935] hsr_slave_0: entered promiscuous mode [ 54.227721][ T5935] hsr_slave_1: entered promiscuous mode [ 54.230042][ T5935] debugfs: 'hsr0' already exists in 'hsr' [ 54.231976][ T5935] Cannot create hsr debugfs directory [ 54.493687][ T5930] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.501273][ T5930] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.506330][ T5930] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.519255][ T5930] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.560380][ T5936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.565792][ T5936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.579143][ T5936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.589731][ T5936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.650293][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.654838][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.674892][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.680987][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.720870][ T5935] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.726958][ T5935] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.731054][ T5935] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.736376][ T5935] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.748992][ T5930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.774673][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.798893][ T5930] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.810142][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.812667][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.817704][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.828442][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.830805][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.880338][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.883438][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.890418][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.893533][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.928121][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.953586][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.973666][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.990942][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.996422][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.999064][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.003659][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.006273][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.022066][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.025201][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.029092][ T5947] Bluetooth: hci3: command tx timeout [ 55.031181][ T5947] Bluetooth: hci2: command tx timeout [ 55.033101][ T5947] Bluetooth: hci1: command tx timeout [ 55.035010][ T5947] Bluetooth: hci0: command tx timeout [ 55.043289][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.045672][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.137864][ T5930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.143851][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.204156][ T5930] veth0_vlan: entered promiscuous mode [ 55.206909][ T5936] veth0_vlan: entered promiscuous mode [ 55.214545][ T5930] veth1_vlan: entered promiscuous mode [ 55.224580][ T5936] veth1_vlan: entered promiscuous mode [ 55.234849][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.248284][ T5930] veth0_macvtap: entered promiscuous mode [ 55.254536][ T5930] veth1_macvtap: entered promiscuous mode [ 55.272154][ T5936] veth0_macvtap: entered promiscuous mode [ 55.281182][ T5936] veth1_macvtap: entered promiscuous mode [ 55.287721][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.292024][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.296713][ T5930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.315088][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.318595][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.322293][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.337888][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.341552][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.352254][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.367131][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.372254][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.376177][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.380221][ T5934] veth0_vlan: entered promiscuous mode [ 55.387490][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.392779][ T5934] veth1_vlan: entered promiscuous mode [ 55.402401][ T5935] veth0_vlan: entered promiscuous mode [ 55.407453][ T5935] veth1_vlan: entered promiscuous mode [ 55.459514][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.462196][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.481576][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.484163][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.493269][ T5934] veth0_macvtap: entered promiscuous mode [ 55.513310][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.514601][ T5934] veth1_macvtap: entered promiscuous mode [ 55.515922][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.531395][ T5935] veth0_macvtap: entered promiscuous mode [ 55.542257][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.545588][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.546281][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.555930][ T5935] veth1_macvtap: entered promiscuous mode [ 55.561338][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.574346][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.579877][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.584594][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.585003][ T5930] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.587270][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.609391][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.616134][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.627628][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.634145][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.639216][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.650899][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.752257][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.754888][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.816554][ T6026] syzkaller0: entered promiscuous mode [ 55.818676][ T6026] syzkaller0: entered allmulticast mode [ 55.872230][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.875769][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.947779][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.953786][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.982035][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.992033][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.262542][ T6034] Zero length message leads to an empty skb [ 56.376329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 56.380932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.418602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.698972][ T6037] bond0: option ad_select: unable to set because the bond device is up [ 57.029695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.108635][ T5933] Bluetooth: hci0: command tx timeout [ 57.111128][ T5933] Bluetooth: hci1: command tx timeout [ 57.113546][ T5933] Bluetooth: hci2: command tx timeout [ 57.116017][ T5933] Bluetooth: hci3: command tx timeout [ 57.258984][ T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.328983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.368658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.372559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.439577][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 57.443470][ T34] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 57.446804][ T34] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 57.450776][ T34] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 57.454584][ T34] usb 7-1: config 250 has no interface number 0 [ 57.456848][ T34] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 57.461083][ T34] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 57.464385][ T34] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 57.467631][ T34] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 57.471368][ T34] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 57.476570][ T34] usb 7-1: config 250 interface 228 has no altsetting 0 [ 57.480568][ T34] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 57.483606][ T34] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 57.486245][ T34] usb 7-1: Product: syz [ 57.487680][ T34] usb 7-1: SerialNumber: syz [ 57.498784][ T34] hub 7-1:250.228: bad descriptor, ignoring hub [ 57.500861][ T34] hub 7-1:250.228: probe with driver hub failed with error -5 [ 57.716597][ T34] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 57.934236][ T6067] nr0: entered promiscuous mode [ 58.008977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.148710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 58.360238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 58.734916][ T6078] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 58.737130][ T6078] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 58.740926][ T6078] vhci_hcd vhci_hcd.0: Device attached [ 58.800977][ T1022] usb 7-1: USB disconnect, device number 2 [ 58.835919][ T1022] usblp0: removed [ 58.938258][ T6073] orangefs_mount: mount request failed with -4 [ 59.008531][ T6019] usb 44-1: SetAddress Request (2) to port 0 [ 59.010890][ T6019] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 59.182349][ T6088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22'. [ 59.188786][ T5933] Bluetooth: hci3: command tx timeout [ 59.188815][ T5947] Bluetooth: hci2: command tx timeout [ 59.190970][ T5933] Bluetooth: hci1: command tx timeout [ 59.193124][ T5947] Bluetooth: hci0: command tx timeout [ 59.232630][ T6079] vhci_hcd: connection reset by peer [ 59.237938][ T60] vhci_hcd vhci_hcd.3: stop threads [ 59.240528][ T60] vhci_hcd vhci_hcd.3: release socket [ 59.243549][ T60] vhci_hcd vhci_hcd.3: disconnect device [ 59.255148][ T6088] netlink: 228 bytes leftover after parsing attributes in process `syz.1.22'. [ 59.352667][ T6090] process 'syz.1.22' launched 'À' with NULL argv: empty string added [ 60.016775][ T6101] tmpfs: Bad value for 'mpol' [ 60.429791][ T6105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.268456][ T5939] Bluetooth: hci0: command tx timeout [ 61.278489][ T5947] Bluetooth: hci2: command tx timeout [ 61.278514][ T5933] Bluetooth: hci3: command tx timeout [ 61.280371][ T5939] Bluetooth: hci1: command tx timeout [ 61.324089][ T6112] orangefs_mount: mount request failed with -4 [ 61.612722][ T6132] xfrm0: entered promiscuous mode [ 61.614992][ T6132] xfrm0: entered allmulticast mode [ 61.724658][ T6135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.37'. [ 61.759435][ T6135] netlink: 228 bytes leftover after parsing attributes in process `syz.2.37'. [ 62.607638][ T40] audit: type=1804 audit(1771729460.095:2): pid=6148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.41" name="/newroot/10/file0" dev="tmpfs" ino=72 res=1 errno=0 [ 62.616892][ T6147] uprobe: syz.1.41:6147 failed to unregister, leaking uprobe [ 62.709255][ T6151] syzkaller0: entered promiscuous mode [ 62.711253][ T6151] syzkaller0: entered allmulticast mode [ 63.088514][ T827] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.148812][ T6143] orangefs_mount: mount request failed with -4 [ 63.228910][ T827] usb 6-1: device descriptor read/64, error -71 [ 63.478445][ T827] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 63.608468][ T827] usb 6-1: device descriptor read/64, error -71 [ 63.728807][ T827] usb usb6-port1: attempt power cycle [ 64.058662][ T1338] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 64.069660][ T6019] usb 44-1: device descriptor read/8, error -110 [ 64.098590][ T827] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 64.119833][ T827] usb 6-1: device descriptor read/8, error -71 [ 64.209661][ T1338] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 64.212890][ T1338] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 64.217405][ T1338] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.222900][ T1338] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 64.226547][ T1338] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 64.233563][ T1338] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 64.236764][ T1338] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 64.241654][ T1338] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.246546][ T1338] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 64.252357][ T1338] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 64.258713][ T1338] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 64.262541][ T1338] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 64.267025][ T1338] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.271969][ T1338] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 64.276546][ T1338] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 64.284094][ T1338] usb 8-1: string descriptor 0 read error: -22 [ 64.286201][ T1338] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 64.289156][ T1338] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.299750][ T1338] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 64.369209][ T827] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 64.388864][ T827] usb 6-1: device descriptor read/8, error -71 [ 64.473790][ T6019] usb usb44-port1: attempt power cycle [ 64.501795][ T827] usb usb6-port1: unable to enumerate USB device [ 64.503352][ T1338] usb 8-1: USB disconnect, device number 2 [ 64.719092][ T6181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.50'. [ 64.722410][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 64.728112][ T6181] FAULT_INJECTION: forcing a failure. [ 64.728112][ T6181] name failslab, interval 1, probability 0, space 0, times 1 [ 64.733030][ T6181] CPU: 0 UID: 0 PID: 6181 Comm: syz.2.50 Not tainted syzkaller #0 PREEMPT(full) [ 64.733044][ T6181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.733051][ T6181] Call Trace: [ 64.733055][ T6181] [ 64.733059][ T6181] dump_stack_lvl+0x100/0x190 [ 64.733080][ T6181] should_fail_ex.cold+0x5/0xa [ 64.733094][ T6181] should_failslab+0xc2/0x120 [ 64.733113][ T6181] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 64.733129][ T6181] ? __pmd_alloc+0xbf/0x9c0 [ 64.733143][ T6181] __pmd_alloc+0xbf/0x9c0 [ 64.733153][ T6181] ? __pud_alloc+0x57a/0x760 [ 64.733164][ T6181] __handle_mm_fault+0xa99/0x2b60 [ 64.733180][ T6181] ? mt_find+0x45e/0x8e0 [ 64.733194][ T6181] ? __pfx___handle_mm_fault+0x10/0x10 [ 64.733206][ T6181] ? __pfx_mt_find+0x10/0x10 [ 64.733230][ T6181] handle_mm_fault+0x36d/0xa20 [ 64.733246][ T6181] __get_user_pages+0xf9c/0x34d0 [ 64.733263][ T6181] ? __pfx___get_user_pages+0x10/0x10 [ 64.733277][ T6181] get_user_pages_remote+0x3d2/0xb10 [ 64.733291][ T6181] ? __pfx_get_user_pages_remote+0x10/0x10 [ 64.733314][ T6181] get_arg_page+0xf4/0x310 [ 64.733329][ T6181] ? __pfx_get_arg_page+0x10/0x10 [ 64.733347][ T6181] copy_string_kernel+0x17d/0x500 [ 64.733365][ T6181] do_execveat_common.isra.0+0x2e6/0x580 [ 64.733383][ T6181] __ia32_compat_sys_execve+0x9c/0xd0 [ 64.733400][ T6181] __do_fast_syscall_32+0xe3/0x8c0 [ 64.733415][ T6181] do_fast_syscall_32+0x32/0x70 [ 64.733428][ T6181] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 64.733442][ T6181] RIP: 0023:0xf7fd8f6c [ 64.733451][ T6181] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 64.733461][ T6181] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 000000000000000b [ 64.733472][ T6181] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000 [ 64.733479][ T6181] RDX: 0000000080000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.733484][ T6181] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 64.733490][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.733496][ T6181] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 64.733509][ T6181] [ 65.101628][ T6019] usb usb44-port1: unable to enumerate USB device [ 65.888554][ T6188] orangefs_mount: mount request failed with -4 [ 65.950488][ T6199] tmpfs: Bad value for 'mpol' [ 65.955805][ T6201] tmpfs: Bad value for 'mpol' [ 66.023179][ T6205] netlink: 20 bytes leftover after parsing attributes in process `syz.2.55'. [ 66.026827][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 66.260981][ T6207] openvswitch: netlink: Flow actions attr not present in new flow. [ 67.228464][ T6019] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 67.380275][ T6019] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.384852][ T6019] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 67.389746][ T6019] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.393985][ T6019] usb 8-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 67.397937][ T6019] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.404916][ T6019] usb 8-1: config 0 descriptor?? [ 67.602289][ T6225] orangefs_mount: mount request failed with -4 [ 67.728419][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.777153][ T6241] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 67.819498][ T6019] cypress 0003:04B4:07B1.0002: unknown main item tag 0x0 [ 67.822946][ T6019] cypress 0003:04B4:07B1.0002: unknown main item tag 0x0 [ 67.825311][ T6019] cypress 0003:04B4:07B1.0002: unknown main item tag 0x0 [ 67.827577][ T6019] cypress 0003:04B4:07B1.0002: unknown main item tag 0x0 [ 67.830851][ T6019] cypress 0003:04B4:07B1.0002: unknown main item tag 0x0 [ 67.833315][ T6019] cypress 0003:04B4:07B1.0002: unknown main item tag 0x0 [ 67.838969][ T6019] cypress 0003:04B4:07B1.0002: hidraw1: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.3-1/input0 [ 67.878444][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 67.881291][ T9] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 67.883963][ T9] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 67.886937][ T9] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 67.889893][ T9] usb 5-1: config 250 has no interface number 0 [ 67.891985][ T9] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 67.895594][ T9] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 67.899367][ T9] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 67.902606][ T9] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 67.906017][ T9] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 67.910619][ T9] usb 5-1: config 250 interface 228 has no altsetting 0 [ 67.917187][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 67.922988][ T9] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 67.925621][ T9] usb 5-1: Product: syz [ 67.926973][ T9] usb 5-1: SerialNumber: syz [ 67.938596][ T9] hub 5-1:250.228: bad descriptor, ignoring hub [ 67.940657][ T9] hub 5-1:250.228: probe with driver hub failed with error -5 [ 68.023818][ T6179] usb 8-1: USB disconnect, device number 3 [ 68.150452][ T9] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 69.236618][ T6252] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 69.240354][ T6252] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 69.250441][ T6252] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 69.256626][ T6252] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 69.259378][ T6252] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 69.265003][ T6252] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 69.270183][ T6252] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 69.273179][ T6252] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 69.277805][ T6252] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 69.285436][ T6252] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 69.288283][ T6252] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 69.292378][ T6252] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 69.906247][ T6268] tmpfs: Bad value for 'mpol' [ 70.528738][ T6279] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 70.531128][ T6279] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 70.533904][ T6279] vhci_hcd vhci_hcd.0: Device attached [ 70.544504][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 70.788616][ T5939] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.808466][ T827] usb 40-1: SetAddress Request (2) to port 0 [ 70.810793][ T827] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 70.923044][ T40] audit: type=1326 audit(1771729468.415:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.2.84" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd8f6c code=0x0 [ 71.269056][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.336689][ T6285] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.340696][ T6285] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.348811][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.352533][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.494892][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.530393][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.631858][ T6280] vhci_hcd: connection reset by peer [ 71.637618][ T95] vhci_hcd vhci_hcd.1: stop threads [ 71.641915][ T95] vhci_hcd vhci_hcd.1: release socket [ 71.644840][ T95] vhci_hcd vhci_hcd.1: disconnect device [ 71.647949][ T9] usb 5-1: USB disconnect, device number 2 [ 71.658149][ T9] usblp0: removed [ 71.697346][ T60] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.700544][ T60] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.704566][ T60] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.717526][ T60] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.745723][ T6292] tmpfs: Bad value for 'mpol' [ 72.029817][ T6295] tmpfs: Bad value for 'mpol' [ 72.474044][ T6302] veth0_macvtap: left promiscuous mode [ 72.485290][ T6302] macvtap0: entered promiscuous mode [ 72.600095][ T6309] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.606090][ T6309] zonefs (nullb0) ERROR: Not a zoned block device [ 72.630958][ T40] audit: type=1326 audit(1771729470.125:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.92" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8f6c code=0x7ffc0000 [ 72.638612][ T40] audit: type=1326 audit(1771729470.125:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.92" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd8f6c code=0x7ffc0000 [ 72.645773][ T40] audit: type=1326 audit(1771729470.125:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.92" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8f6c code=0x7ffc0000 [ 72.652846][ T40] audit: type=1326 audit(1771729470.125:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.92" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd8f6c code=0x7ffc0000 [ 72.660893][ T40] audit: type=1326 audit(1771729470.125:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.92" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8f6c code=0x7ffc0000 [ 72.667801][ T40] audit: type=1326 audit(1771729470.125:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.92" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8f6c code=0x7ffc0000 [ 72.674857][ T40] audit: type=1326 audit(1771729470.125:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.92" exe="/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7fd8f6c code=0x7ffc0000 [ 72.718039][ T6312] netlink: 48 bytes leftover after parsing attributes in process `syz.0.93'. [ 72.724623][ T6312] netlink: 48 bytes leftover after parsing attributes in process `syz.0.93'. [ 72.868490][ T5933] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.871411][ T40] audit: type=1326 audit(1771729470.365:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.92" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8f6c code=0x7ffc0000 [ 72.879735][ T6297] orangefs_mount: mount request failed with -4 [ 72.887621][ T40] audit: type=1326 audit(1771729470.365:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6308 comm="syz.2.92" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8f6c code=0x7ffc0000 [ 72.997521][ T6315] FAULT_INJECTION: forcing a failure. [ 72.997521][ T6315] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 73.002821][ T6315] CPU: 3 UID: 0 PID: 6315 Comm: syz.3.94 Not tainted syzkaller #0 PREEMPT(full) [ 73.002843][ T6315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 73.002853][ T6315] Call Trace: [ 73.002859][ T6315] [ 73.002866][ T6315] dump_stack_lvl+0x100/0x190 [ 73.002897][ T6315] should_fail_ex.cold+0x5/0xa [ 73.002918][ T6315] _copy_from_user+0x2e/0xd0 [ 73.002946][ T6315] move_addr_to_kernel+0x65/0x170 [ 73.002973][ T6315] __sys_bind+0x11d/0x260 [ 73.002998][ T6315] ? __pfx___sys_bind+0x10/0x10 [ 73.003032][ T6315] ? ksys_write+0x1ac/0x250 [ 73.003057][ T6315] ? __pfx_ksys_write+0x10/0x10 [ 73.003084][ T6315] __ia32_sys_bind+0x71/0xb0 [ 73.003108][ T6315] ? lockdep_hardirqs_on+0x78/0x100 [ 73.003127][ T6315] __do_fast_syscall_32+0xe3/0x8c0 [ 73.003150][ T6315] do_fast_syscall_32+0x32/0x70 [ 73.003170][ T6315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 73.003191][ T6315] RIP: 0023:0xf6fcef6c [ 73.003206][ T6315] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 73.003221][ T6315] RSP: 002b:00000000f539c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000169 [ 73.003242][ T6315] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 73.003253][ T6315] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.003262][ T6315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.003271][ T6315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.003281][ T6315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.003302][ T6315] [ 73.163386][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.166821][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.358490][ T5933] Bluetooth: hci1: command 0x0c1a tx timeout [ 73.438512][ T5933] Bluetooth: hci3: command 0x0c1a tx timeout [ 73.440628][ T5933] Bluetooth: hci2: command 0x0c1a tx timeout [ 73.616181][ T5939] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 73.819216][ T6325] tmpfs: Bad value for 'mpol' [ 74.948566][ T5939] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.394450][ T6342] orangefs_mount: mount request failed with -4 [ 75.428525][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.518504][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout [ 75.518531][ T5933] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.569106][ T6361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.107'. [ 75.573660][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 75.918571][ T827] usb 40-1: device descriptor read/8, error -110 [ 76.089377][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.091598][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.094396][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 76.339369][ T827] usb usb40-port1: attempt power cycle [ 76.930171][ T827] usb usb40-port1: unable to enumerate USB device [ 77.419577][ T6373] orangefs_mount: mount request failed with -4 [ 77.805069][ T6389] zonefs (nullb0) ERROR: Not a zoned block device [ 77.815137][ T40] audit: type=1326 audit(1771729475.305:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8f6c code=0x7ffc0000 [ 77.839100][ T40] audit: type=1326 audit(1771729475.315:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd8f6c code=0x7ffc0000 [ 77.847485][ T40] audit: type=1326 audit(1771729475.315:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8f6c code=0x7ffc0000 [ 77.856010][ T40] audit: type=1326 audit(1771729475.315:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd8f6c code=0x7ffc0000 [ 77.862878][ T40] audit: type=1326 audit(1771729475.315:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8f6c code=0x7ffc0000 [ 77.869734][ T40] audit: type=1326 audit(1771729475.315:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8f6c code=0x7ffc0000 [ 77.876613][ T40] audit: type=1326 audit(1771729475.315:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7fd8f6c code=0x7ffc0000 [ 78.041913][ T40] audit: type=1326 audit(1771729475.535:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8f6c code=0x7ffc0000 [ 78.049556][ T40] audit: type=1326 audit(1771729475.535:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6388 comm="syz.2.116" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd8f6c code=0x7ffc0000 [ 78.335244][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.123'. [ 78.925106][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.132'. [ 79.218817][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 79.357107][ T6411] orangefs_mount: mount request failed with -4 [ 79.358488][ T34] usb 7-1: device descriptor read/64, error -71 [ 79.403191][ T6443] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 79.599262][ T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 79.748548][ T34] usb 7-1: device descriptor read/64, error -71 [ 79.878422][ T34] usb usb7-port1: attempt power cycle [ 80.239125][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 80.270819][ T34] usb 7-1: device descriptor read/8, error -71 [ 80.518640][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 80.553501][ T34] usb 7-1: device descriptor read/8, error -71 [ 80.622122][ T6463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.141'. [ 80.668974][ T34] usb usb7-port1: unable to enumerate USB device [ 81.473494][ T6465] orangefs_mount: mount request failed with -4 [ 81.664639][ T6477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.146'. [ 81.674564][ T6477] ======================================================= [ 81.674564][ T6477] WARNING: The mand mount option has been deprecated and [ 81.674564][ T6477] and is ignored by this kernel. Remove the mand [ 81.674564][ T6477] option from the mount to silence this warning. [ 81.674564][ T6477] ======================================================= [ 81.752938][ T6479] tmpfs: Bad value for 'mpol' [ 82.125379][ T6482] netlink: 256 bytes leftover after parsing attributes in process `syz.2.148'. [ 82.150378][ T40] audit: type=1326 audit(1771729479.635:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6483 comm="syz.1.149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 82.229290][ T6493] tmpfs: Bad value for 'mpol' [ 82.277902][ T6489] syzkaller0: entered promiscuous mode [ 82.284735][ T6489] syzkaller0: entered allmulticast mode [ 82.623712][ T6504] tipc: Failed to remove unknown binding: 66,0,0/0:1389556701/1389556702 [ 82.639827][ T6504] tipc: Failed to remove unknown binding: 66,0,0/0:1389556701/1389556702 [ 83.238536][ T827] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 83.368625][ T827] usb 8-1: device descriptor read/64, error -71 [ 83.608478][ T827] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 83.672198][ T6506] orangefs_mount: mount request failed with -4 [ 83.738880][ T827] usb 8-1: device descriptor read/64, error -71 [ 83.848776][ T827] usb usb8-port1: attempt power cycle [ 84.160606][ T6519] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 84.162718][ T6519] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 84.165485][ T6519] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 84.167697][ T6519] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 84.218455][ T827] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 84.259067][ T827] usb 8-1: device descriptor read/8, error -71 [ 84.498991][ T827] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 84.529017][ T827] usb 8-1: device descriptor read/8, error -71 [ 84.638778][ T827] usb usb8-port1: unable to enumerate USB device [ 85.588963][ T5933] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.842957][ T6573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.227492][ T6577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.239568][ T5939] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.239579][ T5933] Bluetooth: hci2: command 0x0c1a tx timeout [ 86.239584][ T5947] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.365738][ T39] cfg80211: failed to load regulatory.db [ 86.676985][ T6586] zonefs (nullb0) ERROR: Not a zoned block device [ 86.699966][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 86.699984][ T40] audit: type=1326 audit(1771729484.195:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 86.995518][ T6593] tmpfs: Bad value for 'mpol' [ 87.045899][ T40] audit: type=1326 audit(1771729484.195:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 87.054983][ T40] audit: type=1326 audit(1771729484.195:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.179" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 87.064306][ T40] audit: type=1326 audit(1771729484.195:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 87.073630][ T40] audit: type=1326 audit(1771729484.195:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 87.082777][ T40] audit: type=1326 audit(1771729484.195:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.179" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 87.094298][ T40] audit: type=1326 audit(1771729484.195:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 87.127771][ T40] audit: type=1326 audit(1771729484.195:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.179" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 87.151306][ T40] audit: type=1326 audit(1771729484.195:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.1.179" exe="/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 87.558759][ T6607] zonefs (nullb0) ERROR: Not a zoned block device [ 87.571900][ T40] audit: type=1326 audit(1771729485.065:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.3.186" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 89.377713][ T6641] zonefs (nullb0) ERROR: Not a zoned block device [ 89.765496][ T6651] tipc: Failed to remove unknown binding: 66,0,0/0:4096375544/4096375545 [ 89.769319][ T6651] tipc: Failed to remove unknown binding: 66,0,0/0:4096375544/4096375545 [ 91.388487][ T6672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.519860][ T6676] block nbd0: server does not support multiple connections per device. [ 91.526200][ T6676] block nbd0: shutting down sockets [ 91.644889][ T6683] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 91.773914][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 91.806634][ T6690] block device autoloading is deprecated and will be removed. [ 92.038503][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 92.265787][ T9] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 92.269166][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.275542][ T9] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 92.279676][ T9] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 92.288763][ T9] usb 8-1: Manufacturer: syz [ 92.307560][ T9] usb 8-1: config 0 descriptor?? [ 92.698476][ T9] rc_core: IR keymap rc-hauppauge not found [ 92.701366][ T9] Registered IR keymap rc-empty [ 92.720025][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 92.727008][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input6 [ 92.771417][ T9] usb 8-1: USB disconnect, device number 8 [ 93.637887][ T6726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.998467][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 93.998480][ T40] audit: type=1326 audit(1771729491.445:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6729 comm="syz.1.224" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe4f6c code=0x0 [ 94.184082][ T6738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.451971][ T6757] FAULT_INJECTION: forcing a failure. [ 95.451971][ T6757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.464578][ T6751] syzkaller0: entered promiscuous mode [ 95.466412][ T6751] syzkaller0: entered allmulticast mode [ 95.467066][ T6757] CPU: 3 UID: 0 PID: 6757 Comm: syz.0.230 Not tainted syzkaller #0 PREEMPT(full) [ 95.467082][ T6757] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.467088][ T6757] Call Trace: [ 95.467092][ T6757] [ 95.467096][ T6757] dump_stack_lvl+0x100/0x190 [ 95.467130][ T6757] should_fail_ex.cold+0x5/0xa [ 95.467146][ T6757] _copy_from_iter+0x1f4/0x1690 [ 95.467166][ T6757] ? __asan_memset+0x23/0x50 [ 95.467182][ T6757] ? __pfx__copy_from_iter+0x10/0x10 [ 95.467198][ T6757] ? __pfx___alloc_skb+0x10/0x10 [ 95.467215][ T6757] netlink_sendmsg+0x808/0xda0 [ 95.467231][ T6757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.467246][ T6757] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 95.467263][ T6757] ____sys_sendmsg+0xa54/0xc30 [ 95.467280][ T6757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.467306][ T6757] ___sys_sendmsg+0x190/0x1e0 [ 95.467322][ T6757] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.467355][ T6757] __sys_sendmsg+0x170/0x220 [ 95.467392][ T6757] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.467415][ T6757] ? __pfx_ksys_write+0x10/0x10 [ 95.467435][ T6757] __do_fast_syscall_32+0xe3/0x8c0 [ 95.467450][ T6757] do_fast_syscall_32+0x32/0x70 [ 95.467463][ T6757] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 95.467477][ T6757] RIP: 0023:0xf7f83f6c [ 95.467487][ T6757] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 95.467497][ T6757] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 95.467508][ T6757] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800010c0 [ 95.467514][ T6757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.467520][ T6757] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.467527][ T6757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.467533][ T6757] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 95.467546][ T6757] [ 95.506321][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 95.581203][ T6755] syzkaller0: entered promiscuous mode [ 95.583729][ T6755] syzkaller0: entered allmulticast mode [ 97.493675][ T6786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.614887][ T6792] netlink: 68 bytes leftover after parsing attributes in process `syz.1.242'. [ 97.618054][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.242'. [ 97.699175][ T6796] zonefs (nullb0) ERROR: Not a zoned block device [ 97.709920][ T40] audit: type=1326 audit(1771729495.205:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 97.721633][ T40] audit: type=1326 audit(1771729495.205:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 97.730965][ T40] audit: type=1326 audit(1771729495.215:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 97.740517][ T40] audit: type=1326 audit(1771729495.215:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 97.750113][ T40] audit: type=1326 audit(1771729495.215:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 97.759323][ T40] audit: type=1326 audit(1771729495.215:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 97.767905][ T40] audit: type=1326 audit(1771729495.215:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 97.775327][ T40] audit: type=1326 audit(1771729495.215:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6795 comm="syz.1.244" exe="/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7fe4f6c code=0x7ffc0000 [ 98.101315][ T6799] tmpfs: Bad value for 'mpol' [ 98.169025][ T5947] block nbd2: Receive control failed (result -32) [ 98.169174][ T6783] block nbd2: shutting down sockets [ 98.279802][ T6803] syzkaller0: entered promiscuous mode [ 98.281644][ T6803] syzkaller0: entered allmulticast mode [ 99.195442][ T6835] tmpfs: Bad value for 'mpol' [ 99.609390][ T6842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.033996][ T6856] ================================================================== [ 100.036642][ T6856] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0 [ 100.039021][ T6856] Write of size 4 at addr ffff888025b3f908 by task syz.1.262/6856 [ 100.043251][ T6856] [ 100.044340][ T6856] CPU: 0 UID: 0 PID: 6856 Comm: syz.1.262 Not tainted syzkaller #0 PREEMPT(full) [ 100.044364][ T6856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.044376][ T6856] Call Trace: [ 100.044383][ T6856] [ 100.044391][ T6856] dump_stack_lvl+0x100/0x190 [ 100.044420][ T6856] print_report+0x156/0x4c9 [ 100.044437][ T6856] ? __virt_addr_valid+0x81/0x620 [ 100.044449][ T6856] ? __phys_addr+0xe8/0x180 [ 100.044462][ T6856] ? try_module_get+0x4c/0xd0 [ 100.044478][ T6856] kasan_report+0xdf/0x1e0 [ 100.044497][ T6856] ? try_module_get+0x4c/0xd0 [ 100.044515][ T6856] kasan_check_range+0x10f/0x1e0 [ 100.044526][ T6856] try_module_get+0x4c/0xd0 [ 100.044543][ T6856] dvb_device_open+0x124/0x3b0 [ 100.044557][ T6856] ? __pfx_dvb_device_open+0x10/0x10 [ 100.044570][ T6856] chrdev_open+0x234/0x6a0 [ 100.044586][ T6856] ? __pfx_apparmor_file_open+0x10/0x10 [ 100.044602][ T6856] ? __pfx_chrdev_open+0x10/0x10 [ 100.044619][ T6856] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 100.044638][ T6856] do_dentry_open+0x6d8/0x1660 [ 100.044654][ T6856] ? __pfx_chrdev_open+0x10/0x10 [ 100.044673][ T6856] vfs_open+0x82/0x3f0 [ 100.044686][ T6856] path_openat+0x208c/0x31a0 [ 100.044698][ T6856] ? asm_int80_emulation+0x1a/0x20 [ 100.044709][ T6856] ? __pfx_path_openat+0x10/0x10 [ 100.044728][ T6856] do_file_open+0x20e/0x430 [ 100.044738][ T6856] ? __pfx_do_file_open+0x10/0x10 [ 100.044752][ T6856] ? _raw_spin_unlock+0x28/0x50 [ 100.044768][ T6856] ? alloc_fd+0x476/0x790 [ 100.044786][ T6856] do_sys_openat2+0x10d/0x1e0 [ 100.044798][ T6856] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.044811][ T6856] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 100.044827][ T6856] __ia32_compat_sys_openat+0x12d/0x210 [ 100.044840][ T6856] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 100.044856][ T6856] do_int80_emulation+0x141/0x6b0 [ 100.044870][ T6856] asm_int80_emulation+0x1a/0x20 [ 100.044881][ T6856] RIP: 0023:0xf71e5b6b [ 100.044890][ T6856] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 100.044900][ T6856] RSP: 002b:00000000f54a603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 100.044911][ T6856] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54a6100 [ 100.044917][ T6856] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.044923][ T6856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.044930][ T6856] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.044936][ T6856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.044945][ T6856] [ 100.044948][ T6856] [ 100.131410][ T6856] Allocated by task 1: [ 100.132763][ T6856] kasan_save_stack+0x30/0x50 [ 100.134360][ T6856] kasan_save_track+0x14/0x30 [ 100.135906][ T6856] __kasan_kmalloc+0xaa/0xb0 [ 100.137406][ T6856] bus_add_driver+0x92/0x5b0 [ 100.138897][ T6856] driver_register+0x1e2/0x360 [ 100.140453][ T6856] i2c_register_driver+0xd9/0x1f0 [ 100.142087][ T6856] do_one_initcall+0x11d/0x760 [ 100.143784][ T6856] kernel_init_freeable+0x6e5/0x7a0 [ 100.145503][ T6856] kernel_init+0x1f/0x1e0 [ 100.146922][ T6856] ret_from_fork+0x754/0xd80 [ 100.148428][ T6856] ret_from_fork_asm+0x1a/0x30 [ 100.149970][ T6856] [ 100.150778][ T6856] The buggy address belongs to the object at ffff888025b3f800 [ 100.150778][ T6856] which belongs to the cache kmalloc-256 of size 256 [ 100.155369][ T6856] The buggy address is located 56 bytes to the right of [ 100.155369][ T6856] allocated 208-byte region [ffff888025b3f800, ffff888025b3f8d0) [ 100.159922][ T6856] [ 100.160737][ T6856] The buggy address belongs to the physical page: [ 100.162871][ T6856] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25b3e [ 100.165748][ T6856] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 100.168466][ T6856] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 100.170870][ T6856] page_type: f5(slab) [ 100.172185][ T6856] raw: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 100.174982][ T6856] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 100.177788][ T6856] head: 00fff00000000040 ffff88801b842b40 dead000000000100 dead000000000122 [ 100.180627][ T6856] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 100.183471][ T6856] head: 00fff00000000001 ffffea000096cf81 00000000ffffffff 00000000ffffffff [ 100.186913][ T6856] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 100.190526][ T6856] page dumped because: kasan: bad access detected [ 100.193000][ T6856] page_owner tracks the page as allocated [ 100.195141][ T6856] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 16502887354, free_ts 16470952703 [ 100.203011][ T6856] post_alloc_hook+0x153/0x170 [ 100.204965][ T6856] get_page_from_freelist+0x111d/0x3140 [ 100.207343][ T6856] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 100.209814][ T6856] new_slab+0xa6/0x6d0 [ 100.211604][ T6856] refill_objects+0x26b/0x400 [ 100.213624][ T6856] __pcs_replace_empty_main+0x19f/0x600 [ 100.215989][ T6856] __kmalloc_cache_noprof+0x493/0x6f0 [ 100.218044][ T6856] usb_string+0x10f/0x570 [ 100.219523][ T6856] usb_cache_string+0x80/0x140 [ 100.221167][ T6856] usb_new_device+0x166/0x7d0 [ 100.222848][ T6856] register_root_hub+0x4e6/0x639 [ 100.224792][ T6856] usb_add_hcd.cold+0xccd/0x1158 [ 100.226406][ T6856] vhci_hcd_probe+0x1c2/0x4e0 [ 100.228277][ T6856] platform_probe+0x106/0x1d0 [ 100.230309][ T6856] really_probe+0x241/0xa60 [ 100.232333][ T6856] __driver_probe_device+0x1de/0x400 [ 100.234571][ T6856] page last free pid 1 tgid 1 stack trace: [ 100.237066][ T6856] __free_frozen_pages+0x7e1/0x10d0 [ 100.239420][ T6856] rcu_core+0x5a2/0x10d0 [ 100.241160][ T6856] handle_softirqs+0x1eb/0x9e0 [ 100.243242][ T6856] __irq_exit_rcu+0xef/0x150 [ 100.245283][ T6856] irq_exit_rcu+0x9/0x30 [ 100.247153][ T6856] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 100.249741][ T6856] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 100.252365][ T6856] [ 100.253390][ T6856] Memory state around the buggy address: [ 100.255891][ T6856] ffff888025b3f800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 100.259479][ T6856] ffff888025b3f880: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 100.262983][ T6856] >ffff888025b3f900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.265895][ T6856] ^ [ 100.267306][ T6856] ffff888025b3f980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 100.269942][ T6856] ffff888025b3fa00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 100.272620][ T6856] ================================================================== [ 100.277359][ T6856] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 100.279674][ T6856] CPU: 0 UID: 0 PID: 6856 Comm: syz.1.262 Not tainted syzkaller #0 PREEMPT(full) [ 100.282611][ T6856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.286588][ T6856] Call Trace: [ 100.288086][ T6856] [ 100.289276][ T6856] dump_stack_lvl+0x100/0x190 [ 100.290848][ T6856] vpanic+0x552/0x970 [ 100.292179][ T6856] ? __pfx_vpanic+0x10/0x10 [ 100.293665][ T6856] ? try_module_get+0x4c/0xd0 [ 100.295564][ T6856] panic+0xd1/0xe0 [ 100.296800][ T6856] ? __pfx_panic+0x10/0x10 [ 100.298268][ T6856] ? try_module_get+0x4c/0xd0 [ 100.299829][ T6856] ? preempt_schedule_common+0x42/0xc0 [ 100.301635][ T6856] check_panic_on_warn.cold+0x19/0x34 [ 100.303433][ T6856] end_report.part.0+0x3a/0x90 [ 100.305366][ T6856] kasan_report.cold+0xe/0x18 [ 100.307487][ T6856] ? try_module_get+0x4c/0xd0 [ 100.309571][ T6856] kasan_check_range+0x10f/0x1e0 [ 100.311251][ T6856] try_module_get+0x4c/0xd0 [ 100.312765][ T6856] dvb_device_open+0x124/0x3b0 [ 100.314372][ T6856] ? __pfx_dvb_device_open+0x10/0x10 [ 100.316123][ T6856] chrdev_open+0x234/0x6a0 [ 100.317602][ T6856] ? __pfx_apparmor_file_open+0x10/0x10 [ 100.319452][ T6856] ? __pfx_chrdev_open+0x10/0x10 [ 100.321107][ T6856] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 100.323168][ T6856] do_dentry_open+0x6d8/0x1660 [ 100.324920][ T6856] ? __pfx_chrdev_open+0x10/0x10 [ 100.326571][ T6856] vfs_open+0x82/0x3f0 [ 100.327937][ T6856] path_openat+0x208c/0x31a0 [ 100.329460][ T6856] ? asm_int80_emulation+0x1a/0x20 [ 100.331163][ T6856] ? __pfx_path_openat+0x10/0x10 [ 100.332806][ T6856] do_file_open+0x20e/0x430 [ 100.334344][ T6856] ? __pfx_do_file_open+0x10/0x10 [ 100.336044][ T6856] ? _raw_spin_unlock+0x28/0x50 [ 100.337654][ T6856] ? alloc_fd+0x476/0x790 [ 100.339088][ T6856] do_sys_openat2+0x10d/0x1e0 [ 100.340651][ T6856] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.342360][ T6856] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 100.344270][ T6856] __ia32_compat_sys_openat+0x12d/0x210 [ 100.346257][ T6856] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 100.348257][ T6856] do_int80_emulation+0x141/0x6b0 [ 100.349910][ T6856] asm_int80_emulation+0x1a/0x20 [ 100.351576][ T6856] RIP: 0023:0xf71e5b6b [ 100.353127][ T6856] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 100.361105][ T6856] RSP: 002b:00000000f54a603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 100.364592][ T6856] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54a6100 [ 100.367821][ T6856] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.371143][ T6856] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.374421][ T6856] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 100.377719][ T6856] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.381045][ T6856] [ 100.383082][ T6856] Kernel Offset: disabled [ 100.384913][ T6856] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:04:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85769f25 RDI=ffffffff9b486f80 RBP=ffffffff9b486f40 RSP=ffffc900259672b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000064 R14=0000000000000010 R15=ffffffff85769ec0 RIP=ffffffff85769f4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097151000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7458824 CR3=00000000726ac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000267f8d RBX=ffff88801bf12480 RCX=ffffffff8b8cec75 RDX=0000000000000000 RSI=ffffffff8de7a780 RDI=ffffffff8c1aee20 RBP=0000000000000001 RSP=ffffc9000046fdf0 R8 =0000000000000001 R9 =ffffed1005666795 R10=ffff88802b333cab R11=0000000000000000 R12=ffffed10037e2490 R13=0000000000000001 R14=ffffffff90d99010 R15=0000000000000000 RIP=ffffffff8b8cd5df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097251000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080000300 CR3=000000004c73d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000017f7ab RBX=ffff88801bfd4900 RCX=ffffffff8b8cec75 RDX=0000000000000000 RSI=ffffffff8de7a780 RDI=ffffffff8c1aee20 RBP=0000000000000002 RSP=ffffc9000047fdf0 R8 =0000000000000001 R9 =ffffed1005686795 R10=ffff88802b433cab R11=0000000000000000 R12=ffffed10037fa920 R13=0000000000000002 R14=ffffffff90d99010 R15=0000000000000000 RIP=ffffffff8b8cd5df RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097351000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbaeb9225d0 CR3=0000000073f3b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000014aa7d RBX=ffff88801bfd2480 RCX=ffffffff8b8cec75 RDX=0000000000000000 RSI=ffffffff8de7a780 RDI=ffffffff8c1aee20 RBP=0000000000000003 RSP=ffffc9000048fdf0 R8 =0000000000000001 R9 =ffffed10056a6795 R10=ffff88802b533cab R11=0000000000000000 R12=ffffed10037fa490 R13=0000000000000003 R14=ffffffff90d99010 R15=0000000000000000 RIP=ffffffff8b8cd5df RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097451000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7fda190 CR3=000000005483f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000