last executing test programs: 21.997877058s ago: executing program 1 (id=31): r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)=ANY=[@ANYBLOB="9c000000130a050000000000000000000d000009560008009ab975e411227f9ccb41ecbb0c5dddef8a81e9b0a217deb556269cde138e22c81cf5192945df3869734f13417d73f13efae5afcb4c70a0d167be6b9505c5d77ffbc35e16209d323aac6976fed600000900021073797a32000000000900010073797a30000000000900010073797a30000000000900010073797a300000000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x12c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff1f, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x12c}}, 0x880) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000440)) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x6, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}}, 0x20000000) r5 = syz_open_dev$usbfs(&(0x7f0000003f80), 0x77a, 0x80002) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000000)) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000002200)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000003fc0)={0x1904, r8, 0x4, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x160, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffa3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_MASK={0xab, 0x5, "b0ade8d0d4bd56b1910f775de6dd7a25790d15e5cab939a6c89358594abaf4894dbe82cfe9a310dcdedbe3a0b94c0c3f4965dc82b72fa39f6f3ef9d282c011f9f506bc8a2c18513bbf87f2bfd8c702ebb6b17c3ae3be095272c6a0cfcd1f8d0171e1e7a93d6b17f6a603d69d88152c55bfb19e9e6d9cd5ae5ad1bebf3468d80fe7a0ebec7a157df60e81dd5cd2edc28d2c2304125b547e9dfbb425e84320bc273bd3cc74c30814"}, @ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "f84f451a38c3dab375547b73ccf944f0f4f4a30376d1f3b51eda87cc40c6a72737586269760966671846c3576a8915e32db9a47f7b470ba720bd250db730c8f418a4115f239d656e5f30eb1b556508cffff527903220d822190e71227d58da194d1b17c9b7ee2ba3631d55cbfaadee15ab777c637f64778f257ae7dec6"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1e0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x62, 0x4, "1e2ea0e237161482ffaea4e1a1a97484dd85c78986e697ee5b901891ea530bd5b86271b1c4d098df96e4d9e94d57d970bc616f5cd26b8da11645224eada3e476739384b774198bc73f15d7a954fdf447995864933f98b09bf30f961813af"}, @ETHTOOL_A_BITSET_MASK={0x9, 0x5, "ac09867a45"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x164, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#-\'.&\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x70}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '}![]%-%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '[\xa3),){-$-2!}%\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '$)gr\x80\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1140, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x1a, 0x5, "5bfe3a54123144befb3acf4c4a58be5e659991e3396f"}, @ETHTOOL_A_BITSET_MASK={0x27, 0x5, "fb423d018fdbb74f7f034349b40a689ff24d3f43b4e8f8e0847bce0b30969569272a5b"}, @ETHTOOL_A_BITSET_MASK={0x71, 0x5, "72ddf3e57b9d0a15e45db869b69608bbaaf8a86d9dc305851dbf7bae7318f15c219b4181cba039eadfaac8d2863e7cb7a6b1dcbc0546d900c12ce6d0b72afd2ec8e64a6dbedb65cb34939445e21a893787d0f577b8c7eb7490060ff04b8d5b7345e63283923309172f96d7285e"}, @ETHTOOL_A_BITSET_VALUE={0x76, 0x4, "f90159831b468749bf45fc5ede884890dd550e05a7decbe24aab33afd3b07cf464abec243334944c9af7cd2cffd708e2038297b0d932e9e58a7897e2f9163181e3513c2622b3c73423ab9a81c03494baf81d7a7b356b2ecde373071c2a3ea0ceab8df1fa2c1ea914a2bb41ab3e1f7a2f3076"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x184, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xe7, 0x4, "c0e32b1060af2c0c775e2c22586fe50169bf7fac7048d593c99e9c634427093290ec701deaf6d9b1258b21f535f8909268bb1818cd3cf19b4dc764a9300c79d208483254b8770f68f28a5cb9d71f4cb54c0de48c2fe0794dedc6536afeea03bf981bb1a17779fe6ae3baf03e9769d270e9aa2e57409a4b74089eee7d14bf0f94cac4d80f0405f671dacd269ae3d60f41af81c5c4c284d8bb6e5a0a6151da0be271e77802712a9638bf6276fbbab42cd142437110ea024f744afe4638cd61650fe79f68635db961288422a3dfb9436dc8a63c66e70478230a85e6db6ddb0a558db857ef"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_VALUE={0x2b, 0x4, "7f4f19eb3b8abc487388da8e7370bdc4a1865604cb95e88085838da4811cff41267dbdf4991fa7"}, @ETHTOOL_A_BITSET_MASK={0x57, 0x5, "b12303f99b36fcf04b18dd7ea804023775487545d568fd6f72a7bd5622b75f5c22ebf7d49113913baece8e334301b346f1d68a72ffc95d73220810602720be5c3d0b30fb81fd7d8c01148e6f92f4a4e9caae88"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc216}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "2910a6f2983c8cc6665186ed8557671650a0cd521f35cabeedf1ec3d6a6909a2ba9a458cc12e3194aab863cf7fd5fbb41a02896d6fc98a97042854553e744031f2324b9c12306ade1de8ce8f03ed7801154034331303502bec8869731eb43c3e7243d086bcd60d627ed311db8d122b7db24a2bea9aac6f1f7641910355c3df9e8aa7148e732f0a35b72c127487d09fc513e4e1be6832b999d7fa032279f3106d2138"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x164, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!(^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd83}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfb7}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xcc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '}![]%-%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x97, 0x2, '\x83ev\x8cink\x00\xc3[HV\x1e|\xc7\xfdz\xed\xf2\xf1I\x9dLR&\x18\xf1c\xf8so\x19\xf2\xa9\xeeV\x96x\xfc\xa9\x00`<\xfa\xefS\xad\xf0L\xb8\xaa\x94\xebBQ\xcbl\xaaHJ\x04\x02\xb7\xbe\xf5\t\np\xf17\xf4\x9e\x18\x86\xda(\x06\xdb\xb0\xe2\x90;\xd92&B\x1c\xe8\x1f(\x1f\x93\xe3\xfa\x05\xdb\x8d\x80\xfa&\x831\xae \xcc\xa2\xaa?\xdb\x16\x81L\xb4\xf4N`\xbe\xae:/\xee\v^\\\xc2N\xf8\x89\xbe\x83(}\xc6\n\xf76U|#\xfd\x9f\xe6p\xccH\xc9\x13'}]}]}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\x00\xfd\xff\xff\xff\x00\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'cake\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-\'\\)[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1904}, 0x1, 0x0, 0x0, 0x40}, 0x10) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xffffffff}, @TCA_CAKE_MEMORY={0x8, 0xa, 0xbe6}]}}]}, 0x44}}, 0x40400c0) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x47, &(0x7f0000000500)={@broadcast, @local, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@x25={0x805, {0x2, 0x82, 0x1, "1b9bbcda8c2fd0089632310909cd287fc8502d252b83aaacaf7334542557cb52486c770671e3e7b98528c44ea08b6dfe7049"}}}}, &(0x7f0000000580)={0x0, 0x2, [0x701, 0x3d4, 0x6b3, 0xdf3]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 21.776892522s ago: executing program 1 (id=33): openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x22100) listen(0xffffffffffffffff, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400191809004beafd0d3602010100000000000000000000a2bc56030000000fdd32aa4da87f2af1e264147f89004e002050da742dac0000000101ff0502000300020000", 0x48}], 0x1) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_ublk_setup_io_uring(0x90b, &(0x7f0000000240)={0x0, 0x9aba, 0x1234, 0x1, 0xfc}, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f00000003c0)) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 20.656569446s ago: executing program 1 (id=35): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$tun(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x8, 0x8, 0x8, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x44) write(0xffffffffffffffff, &(0x7f0000000240)="14000000140005b7ffcc", 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e085cca6a169fd5801b79b5e5dd5ca55277a42df"], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000540)='.\x00', 0x850003d1) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffff9c, &(0x7f0000000280), 0x2a000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, 0x0) 19.676787321s ago: executing program 1 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x6a) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x147442, 0x18) r4 = creat(&(0x7f0000000080)='./file1\x00', 0xec) write$cgroup_int(r4, &(0x7f0000000180)=0x5, 0x12) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)="de", 0x1}], 0x1, 0xfffffffe, 0x200c86a) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) ftruncate(r6, 0xf4240) close(r6) mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x2000042, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r7, &(0x7f0000000300)='1\x00', 0x2) close(r7) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000380)={0xc, 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 19.528714233s ago: executing program 1 (id=39): openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x22100) listen(0xffffffffffffffff, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400191809004beafd0d3602010100000000000000000000a2bc56030000000fdd32aa4da87f2af1e264147f89004e002050da742dac0000000101ff0502000300020000", 0x48}], 0x1) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) syz_ublk_setup_io_uring(0x90b, &(0x7f0000000240)={0x0, 0x9aba, 0x1234, 0x1, 0xfc, 0x0, r4}, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f00000003c0)) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 18.817108477s ago: executing program 1 (id=41): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "31f19589992c8ef3", "d96e78e2204a508de452a277bc294c91d9156e94e5042064b50aad9051c805c8", "43b045ce", "ebbaa92c169b7e76"}, 0x38) sendfile(0xffffffffffffffff, r4, 0x0, 0x100c6) openat$cgroup_ro(r4, &(0x7f00000005c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x410080, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0x7, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x5, 0x2) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYBLOB="98a60800080211000000ffffffffffff080211000001308d020b06008d81cf4f9c70a31e0efeafb0aba3c86d1539921c8d8dae2b2533a5305c67d0d64f57dd34376429688b409b579318bc44285f55ee01b8bc65bc3ebd7b365d3031f549b3c8dfab03ef901a996c4b16fb3ce305485a45d16feb37a6443cdaeb85f9f840a0cdc8c29a9ee784bb52cd2b9c3dad5e1ec836727eeaf969e13101378f9e93e8c3e1ddd72ee0d5959b711fdf6033907c7c7de23282ed773d0ed8d305be0d3c49fe36ecc4dcfbba3825392f72f5e95228354ad7b977e7a4b205cfc1675debcf68115c51979e7d96a281515743aac44179fbf053406363bd8446d2ebd0f6390789f149c647302faa3d211d352222adf7d8f223e406103aabce27f3feb12446d46208ec8bb77836ad7bf73d066f751f32e3754e51eac3689ef3e668ce6a91b93fc9ce21f61024e6f697ff0ab1e2aefde9953286add0bd8f53387c6907a8d6250c384090e5845d8fbf4d6afd6be0f13962064050b752cd575ae3fb15d7bc7c9cd3ee6f526dca5ed29944f96e8d80c81586891282bae3c754f7533016cfd68e1d4eaae7827f6797b8be5b495b248010a249bcfcf52ea070fa88c3f90b1bc6dc3aa7cd8ab0650631aba2179ff630d31e50db6107468c5567b35c1598a5190e1eebd8a0eb896cc099aaec06beac711f2cfd2ce39701dc3abad626350efdefef2f49cf8e86b9454913af699fdcc66f1db575faf35a5af0f916fd8a8b4d8803ed6121e873bbdb35cbdc1ee9b7a8e546d4f71937031f0336834b3da252211bf47b22c7e6cb7c9b6ee264e6ba3218beb5d7bbf0e01e1d6b73f53928fd16b1160a7c1f6554c0a6c8cfc9d494d164932ab83eaba0b2da1b8679b81997af7c48aaf7fca8e33f57f93256ddc15a71dc560a94a6b89f2992d6650afddf1cf684053f7455d55d57186c63be4ae6e44b539592abc32e8b1bb77da499e83b3ccd54f67bd680b955b106ecfc84dba132900014212f44211602bf40f027cf81d5f26952e7547ae2b6cc16917b2ed0080151449954f8e739bb2885ff0951a3331794e56fa0de7257bb9bc0cc5be3b912e9"], 0x305) write$tun(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="3e030200000005000000ffffffffffffaa9eaaaaaabb81000002080046f8002c00640000070690780a010101ac14142f8903910000004e24", @ANYRES32=0x41424344, @ANYRES64=r5, @ANYBLOB="504000069078"], 0x48) 18.58183143s ago: executing program 32 (id=41): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x2730, 0x800, 0x1, 0x82}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000240)=0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000000c0)=""/250, 0xfa}], 0x2}}], 0x1, 0x34000, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "31f19589992c8ef3", "d96e78e2204a508de452a277bc294c91d9156e94e5042064b50aad9051c805c8", "43b045ce", "ebbaa92c169b7e76"}, 0x38) sendfile(0xffffffffffffffff, r4, 0x0, 0x100c6) openat$cgroup_ro(r4, &(0x7f00000005c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000040)={0x30, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4844c1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x410080, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0x7, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x5, 0x2) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x305) write$tun(r6, &(0x7f0000000640)=ANY=[@ANYBLOB="3e030200000005000000ffffffffffffaa9eaaaaaabb81000002080046f8002c00640000070690780a010101ac14142f8903910000004e24", @ANYRES32=0x41424344, @ANYRES64=r5, @ANYBLOB="504000069078"], 0x48) 3.703616259s ago: executing program 4 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) io_setup(0x9, &(0x7f0000000340)=0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r0, 0x2000000000000211, &(0x7f0000000840)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x9, r1, 0x0}]) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f00000000c0)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc008045}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0xa0201, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x241, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0x4, @loopback, 0x81}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000002c0)) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x1, 0x1, 0x9, 0x5}, 0x20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r7) r8 = socket(0x2, 0x2, 0x0) unshare(0x20400) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x3, 0xfffffffc, @private2}, 0x1c) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r9, &(0x7f0000000400)='dummy_udc.0', 0xb) 3.321354279s ago: executing program 4 (id=108): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x7, &(0x7f0000000040)=0x8000001, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000001c0)) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRES64=r4, @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x24048454}, 0x0) ptrace$peekuser(0x3, r5, 0x7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x5514, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000040)={'\x00', 0xd, 0x1, 0x102, 0x401, 0x1}) 3.016538411s ago: executing program 0 (id=111): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0xc41d, 0x2, 0x7c, 0x2, 0x2, 0x8001}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000001c0)={0x2, 'dummy0\x00', {0x1}, 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "138c62345923fecf", "fb8c120266a9cecdc3b7e4c96505ce79", "10001000", "8b07d135f977d25f"}, 0x28) sendto$inet6(r1, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) sendto$inet6(r1, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22", 0x10, 0x8040, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0x78) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4157, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.877137328s ago: executing program 3 (id=113): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b00000000000000000040000000000000400000000000000000000000000000004000000000000000000000000000000ff0f0000f4000000040000000000000007000000000000008c00000000000000f9ffffffffffff14010000000000000004000080000000000800000006080000050000000070000078bcc133", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="ff010000fcffffff000000000400000000000000e60000000000000002"], 0x0, 0x0, 0x0}) (async) getdents(r3, &(0x7f0000000140)=""/224, 0xe0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async) read$FUSE(r0, &(0x7f000000a3c0)={0x2020}, 0x2020) (async) syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x4b, 0x0, 0x4) (async) r7 = getpgid(0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000640)=""/207, &(0x7f0000000740)=0xcf) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) memfd_create(&(0x7f00000003c0)='%\x00\xae\xdb\xb8\x18\xc1\xecWbNO\xde^\xff\x19\x17QE{*X\xe3\xe2\x06\x00\x00\x00\xcc\xf6\xc0H\xa2\x83?\xe7\x89*\xf1\xc5b\v\xec\xe4\xb0\xa2\xc5\xee\x04\x98\xa9\xb9\xe5\x8c\xc3\x97B\xaa+\xf2o\xf6k\xcc\xf7\x057\x8d\xb1\xa0\x86\xe8\xda\x90\xc2\x1e\x15\x11\x92\x9d\xc1M\xe5@\v\x001\xae\x19$\xf8\x96\x81\xcbR\xae`\xd3\xf8_R~7\xf5\x1c\xc8\xf9\xe2z\x00<\xdc\x11\x89\xc9&f\x00\x00\x00\xe2\x83\xf1\x0eg\a\xec\xac\xa5\x94~v\x80P5\xf9/$', 0x4) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000804000000020000000000001103000000ffffffff02000000000000080200000000005f00"], 0x0, 0x38}, 0x28) (async) socket$nl_route(0x10, 0x3, 0x0) 2.806594675s ago: executing program 3 (id=114): openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x22100) listen(0xffffffffffffffff, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_ublk_setup_io_uring(0x90b, &(0x7f0000000240)={0x0, 0x9aba, 0x1234, 0x1, 0xfc}, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f00000003c0)) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 2.717257011s ago: executing program 0 (id=115): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}}], 0x1, 0x4) mkdir(0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e2, &(0x7f0000000300)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x56, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x414, 0x0, 0x9403, 0x0, 0x240, 0x2c0, 0x34c, 0x3d8, 0x3d8, 0x34c, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x240, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}, @common=@inet=@hashlimit2={{0x150}, {'syz_tun\x00', {0x100, 0xffffffff, 0x2, 0x56, 0x1000000, 0x1, 0x800, 0x40, 0x8}, {0xffff0001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x1}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x14, 0x3, 0x40a, 0x6, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x470) 2.237112942s ago: executing program 2 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000440)="000000008008b4abd804b2800b00000000", 0x11) 2.236853284s ago: executing program 2 (id=119): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040110) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x7) nanosleep(&(0x7f0000000000)={0x0, 0x10000000}, 0x0) 1.867261993s ago: executing program 2 (id=120): pipe2$9p(&(0x7f0000000080), 0x84880) getpgid(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r4 = syz_open_pts(r3, 0x141000) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000080)=0x1) socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{0x0}], 0x1, &(0x7f0000001040)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x880}], 0x1, 0x80001) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000440)=""/88, 0x58}], 0x1}, 0x9}], 0x1, 0x40010143, 0x0) 1.797386656s ago: executing program 4 (id=121): socket$netlink(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) r0 = getpid() syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0xb4, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}, {&(0x7f0000000080)="5acd7236d4bf7a304a8809f68d4770e143173d2880006781a0c0cc79b67f87206dd23a31a248a1f112aebdb1e3bb103a6d2496e5d9e9975a882ca9378c", 0x3d}], 0x3) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) r3 = syz_usbip_server_init(0x5) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x40}}, 0x0) writev(r3, 0x0, 0x0) r5 = io_uring_setup(0x7e8, &(0x7f0000000500)={0x0, 0xb455, 0x8000, 0x3, 0x2ce}) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r7 = socket(0x1e, 0x4, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x201, 0x3fffff, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0xfffffffa, 0x0, 0x7, 0x2000000}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) socket(0x30, 0xa, 0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001300050027bd7000fedbdf", @ANYRESHEX=r1, @ANYBLOB="0000000001060400140003007665746830000000000000000089f6001400168053"], 0x48}}, 0x48000) 1.697309822s ago: executing program 0 (id=122): socket$pppl2tp(0x18, 0x1, 0x1) chown(&(0x7f00000003c0)='./cgroup\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x40000000, 0x0, 0x4, 0x40, 0x1}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000200)=0x4, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x3, 0x8001, @remote, 0x5}, 0x1c) r3 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$TIOCCBRK(r3, 0x5428) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4040) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 16) 1.557135256s ago: executing program 3 (id=123): r0 = syz_open_dev$media(&(0x7f0000000040), 0x6, 0x141081) (async) r1 = inotify_init() (async) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x480, 0x0, 0x0) (async) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) (async) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc01c7c02, &(0x7f00000003c0)={0x80000000, 0x0, 0x0}) 1.556850592s ago: executing program 0 (id=124): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000004e40)={0xfb, 0x1d, 0x0, 0x6, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x200) 1.556482581s ago: executing program 0 (id=125): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) pipe2$watch_queue(0x0, 0x80) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r3, 0x0, 0x100000000000000}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020040090900010073797a30000000001400000002120500000000000000000000000005140000001100010000000000000000000700000a"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) r6 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r6, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000003c0)={0x0, 0x55, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 1.506963686s ago: executing program 3 (id=126): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r2) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20004001) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xa4, &(0x7f0000000600)=""/164, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000e00)=0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001a000100080000bc679e36dd2ea470fea71ec4cb00fcdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="00000000140003000700"/24], 0x30}}, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) ptrace$ARCH_GET_FS(0x1e, r3, &(0x7f00000003c0), 0x1003) r9 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="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", 0x135, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r8, r9}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) getpid() futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) 1.216898791s ago: executing program 4 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000200)={0x400, 0x200003, 0x3, 0x4, 0x5, 0x3950}) r0 = socket$inet6(0xa, 0x2, 0x81) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x72f4}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000022, 0x0, 0x9}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x0, @void}, 0x10) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6, 0xc8cb, 0xb6, 0x100, 0x200, 0x40, r2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x100) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000580)={@mcast1, 0x3b, r2}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) unshare(0x24020400) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r8) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, 0x12c1a, 0x1a111}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x20004000) ioctl$SNAPSHOT_FREE(r6, 0x3305) r10 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdc, 0xdc, 0x4, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x3, 0x6}, @union={0xb, 0x6, 0x0, 0x5, 0x1, 0x93, [{0x8, 0x2, 0x1}, {0xd, 0x0, 0x1400000}, {0x5, 0x0, 0x3}, {0xf, 0x3, 0x3}, {0xa, 0x0, 0x11dc8f12}, {0xa, 0x4, 0xdd4}]}, @restrict={0x8, 0x0, 0x0, 0xb, 0x4}, @restrict={0xf, 0x0, 0x0, 0xb, 0x5}, @struct={0xa, 0x7, 0x0, 0x4, 0x0, 0x38dd, [{0x6, 0x3, 0x8}, {0x8, 0x4, 0x2040000}, {0x6, 0x5, 0x3f38c000}, {0xc, 0x1, 0x3}, {0xf, 0x4}, {0x9, 0x2, 0x5}, {0x0, 0x2, 0x6}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f00000003c0)=""/17, 0xf8, 0x11, 0x1, 0x6}, 0x28) recvmmsg(r10, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000000440)="7801da618d3efc6e128aaddbebfdd96f", 0x10) bind$inet(r10, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r10) 1.215917849s ago: executing program 3 (id=128): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0xfffffeda, &(0x7f0000000380)={&(0x7f0000000200)={0x40, r2, 0x10, 0x70bd27, 0x1}, 0x40}}, 0x804) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) 1.215645482s ago: executing program 3 (id=129): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x7, &(0x7f0000000040)=0x8000001, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000001c0)) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRES64=r4, @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x24048454}, 0x0) ptrace$peekuser(0x3, r5, 0x7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314230c2dbd7000ffdbdf250900020073797a32000f00000800410072786500140033007767320000000000000000000000000066129cbdaaf92ea305126427a766b1c085924cd6ad57b03cfe9655f622d77d2aeea86454e08d702ca2d6392ca31ef21b722d78da5d90886bb0db32b0e33c89a5e901bb4e0379f25665d395238e6730ad37288567b268fe7f1586d588e526e7d727ec73b81279a75e879dd960e5107507609756ec582a8032a0ae41beb16ed972c66cc59029b79ace6666660cde28316ee23ff7ea64e39ae6d39b5f45f5ccf2adaffee80cc44776710ba5c2a2e806dcb0a1fd133d11902dea4f"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x5514, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000040)={'\x00', 0xd, 0x1, 0x102, 0x401, 0x1}) 966.48575ms ago: executing program 2 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x4, 0x0, [{0x88, 0x0, 0x6}, {0x283, 0x0, 0x37}, {0x8d6, 0x0, 0x7fff}, {0x898, 0x0, 0xfffffffffffffffa}]}) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/kernel/mm/hugepages/hugepages-2048kB/free_hugepages\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/256, 0x100) 933.135073ms ago: executing program 2 (id=131): socket$l2tp6(0xa, 0x2, 0x73) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x19d740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x6}}, 0x20) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x0, @val=@tracing={0xffffffffffffffff, 0x8}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r4}, 0x10) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r6, r7, 0x0, 0x8000fb00) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r10, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 659.719807ms ago: executing program 0 (id=132): openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x22100) listen(0xffffffffffffffff, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_ublk_setup_io_uring(0x90b, &(0x7f0000000240)={0x0, 0x9aba, 0x1234, 0x1, 0xfc}, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f00000003c0)) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 346.773598ms ago: executing program 4 (id=133): r0 = syz_open_dev$cec(0x0, 0x0, 0xe8c00) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) r1 = dup2(r0, r0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d1d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000040)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) execveat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x9362, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) syz_open_dev$usbfs(&(0x7f00000000c0), 0xd, 0x20000) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) 16.153342ms ago: executing program 4 (id=134): openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x22100) listen(0xffffffffffffffff, 0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400191809004beafd0d3602010100000000000000000000a2bc56030000000fdd32aa4da87f2af1e264147f89004e002050da742dac0000000101ff0502000300020000", 0x48}], 0x1) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x2) syz_ublk_setup_io_uring(0x90b, &(0x7f0000000240)={0x0, 0x9aba, 0x1234, 0x1, 0xfc, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f00000003c0)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 0s ago: executing program 2 (id=135): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)={0x30, r4, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xd181}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r6], 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r8, &(0x7f0000000300)='vhci_hcd.0\x00', 0xb) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r9, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) (async) setsockopt$sock_int(r9, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000100)) (async) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x300, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x12d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x300, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x12d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="7483055cef7c7fb8ed89e4d9a42e61a9308e5d2e6be2dbfb120849c2a5aed78a9cf30787c4fcd4cebb19b1822794a82ce3b7d5a1f9974506aa9b8d", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x8000) syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x101000) (async) r11 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x101000) setresuid(0x0, 0xee01, 0x0) (async) setresuid(0x0, 0xee01, 0x0) ioctl$IOC_PR_RESERVE(r11, 0x401070c9, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:64560' (ED25519) to the list of known hosts. [ 42.658731][ T5696] cgroup: Unknown subsys name 'net' [ 42.834224][ T5696] cgroup: Unknown subsys name 'cpuset' [ 42.841138][ T5696] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.880502][ T5696] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.888302][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.909695][ T5759] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.912831][ T5759] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.915863][ T5759] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.919550][ T5759] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.921282][ T5761] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.922903][ T5759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.923732][ T5760] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.925320][ T5761] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.925481][ T5760] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.925823][ T5760] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.927371][ T5760] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.927839][ T5759] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.928144][ T5759] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.930316][ T5761] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.935050][ T5760] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.936243][ T5762] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.937760][ T5761] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.955644][ T5761] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.958553][ T5761] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 49.629826][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.633477][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.637015][ T5752] bridge_slave_0: entered allmulticast mode [ 49.642317][ T5752] bridge_slave_0: entered promiscuous mode [ 49.647469][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.650598][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.653584][ T5751] bridge_slave_0: entered allmulticast mode [ 49.657090][ T5751] bridge_slave_0: entered promiscuous mode [ 49.679314][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.681681][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.683984][ T5752] bridge_slave_1: entered allmulticast mode [ 49.687252][ T5752] bridge_slave_1: entered promiscuous mode [ 49.698791][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.703350][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.706294][ T5751] bridge_slave_1: entered allmulticast mode [ 49.709182][ T5751] bridge_slave_1: entered promiscuous mode [ 49.735942][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.738454][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.740901][ T5756] bridge_slave_0: entered allmulticast mode [ 49.743583][ T5756] bridge_slave_0: entered promiscuous mode [ 49.756999][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.761677][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.772394][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.775433][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.777733][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.779966][ T5756] bridge_slave_1: entered allmulticast mode [ 49.782781][ T5756] bridge_slave_1: entered promiscuous mode [ 49.811667][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.822759][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.843158][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.847301][ T5752] team0: Port device team_slave_0 added [ 49.868913][ T5752] team0: Port device team_slave_1 added [ 49.880755][ T5751] team0: Port device team_slave_0 added [ 49.891925][ T5751] team0: Port device team_slave_1 added [ 49.898930][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.901777][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.903990][ T5747] bridge_slave_0: entered allmulticast mode [ 49.906533][ T5747] bridge_slave_0: entered promiscuous mode [ 49.910975][ T5756] team0: Port device team_slave_0 added [ 49.926703][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.930164][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.933194][ T5747] bridge_slave_1: entered allmulticast mode [ 49.936985][ T5747] bridge_slave_1: entered promiscuous mode [ 49.941827][ T5756] team0: Port device team_slave_1 added [ 49.949776][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.952007][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.960396][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.983704][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.987078][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.995786][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.999856][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.002060][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.010285][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.021278][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.024067][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.032810][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.037181][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.039419][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.047250][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.051219][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.053549][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.062422][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.072400][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.078693][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.146452][ T5751] hsr_slave_0: entered promiscuous mode [ 50.150017][ T5751] hsr_slave_1: entered promiscuous mode [ 50.155994][ T5747] team0: Port device team_slave_0 added [ 50.162490][ T5747] team0: Port device team_slave_1 added [ 50.171043][ T5756] hsr_slave_0: entered promiscuous mode [ 50.174542][ T5756] hsr_slave_1: entered promiscuous mode [ 50.177718][ T5756] debugfs: 'hsr0' already exists in 'hsr' [ 50.180499][ T5756] Cannot create hsr debugfs directory [ 50.213754][ T5752] hsr_slave_0: entered promiscuous mode [ 50.216036][ T5752] hsr_slave_1: entered promiscuous mode [ 50.218318][ T5752] debugfs: 'hsr0' already exists in 'hsr' [ 50.221233][ T5752] Cannot create hsr debugfs directory [ 50.245329][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.247478][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.255727][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.260192][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.262415][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.270619][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.419315][ T5747] hsr_slave_0: entered promiscuous mode [ 50.422567][ T5747] hsr_slave_1: entered promiscuous mode [ 50.425553][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 50.427946][ T5747] Cannot create hsr debugfs directory [ 50.581737][ T5751] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.588926][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.601348][ T5751] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.607990][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.611322][ T5751] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.619345][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.630121][ T5751] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.639391][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.678072][ T5752] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.684499][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.691028][ T5752] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.696138][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.707673][ T5752] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.713746][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.719978][ T5752] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.726945][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.753641][ T5756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.761404][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.764578][ T5756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.769828][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.779630][ T5756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.785865][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.788613][ T5756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.792834][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.863704][ T5747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.870860][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.874394][ T5747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.880743][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.886555][ T5747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.892439][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.897743][ T5747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.902935][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.943986][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.970570][ T5761] Bluetooth: hci3: command tx timeout [ 50.970653][ T5108] Bluetooth: hci2: command tx timeout [ 50.972754][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.972933][ T5750] Bluetooth: hci1: command tx timeout [ 50.973038][ T5750] Bluetooth: hci0: command tx timeout [ 51.013262][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.016282][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.031086][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.034156][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.038865][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.041078][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.056538][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.060226][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.062732][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.068030][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.070231][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.112730][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.133446][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.136563][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.138933][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.155978][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.158323][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.188979][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.198591][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.200907][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.214217][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.216959][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.443601][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.468122][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.476822][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.487234][ T5752] veth0_vlan: entered promiscuous mode [ 51.502040][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.509174][ T5752] veth1_vlan: entered promiscuous mode [ 51.544496][ T5751] veth0_vlan: entered promiscuous mode [ 51.557565][ T5756] veth0_vlan: entered promiscuous mode [ 51.566053][ T5752] veth0_macvtap: entered promiscuous mode [ 51.570874][ T5751] veth1_vlan: entered promiscuous mode [ 51.578673][ T5756] veth1_vlan: entered promiscuous mode [ 51.592713][ T5752] veth1_macvtap: entered promiscuous mode [ 51.596515][ T5747] veth0_vlan: entered promiscuous mode [ 51.609414][ T5747] veth1_vlan: entered promiscuous mode [ 51.630098][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.643901][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.648402][ T5751] veth0_macvtap: entered promiscuous mode [ 51.652864][ T5756] veth0_macvtap: entered promiscuous mode [ 51.658178][ T5756] veth1_macvtap: entered promiscuous mode [ 51.666436][ T5751] veth1_macvtap: entered promiscuous mode [ 51.697164][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.700537][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.709365][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.718430][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.727234][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.730201][ T5747] veth0_macvtap: entered promiscuous mode [ 51.744328][ T5747] veth1_macvtap: entered promiscuous mode [ 51.822560][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.844387][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.847751][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.847982][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.880426][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.884298][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.921878][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.924938][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.954438][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.958049][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.966327][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.970549][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.982633][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.985676][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.007495][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.013536][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.015466][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.019353][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.023186][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.049266][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.052742][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.067000][ T5752] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.084427][ T5752] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.090504][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.092518][ T5756] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.098232][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.100497][ T5756] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.114970][ T5751] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 52.132502][ T5559] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.140350][ T5559] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.170985][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.176034][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.200118][ T5559] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.206156][ T5559] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.348821][ T5559] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.360139][ T5559] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.454832][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.555603][ T5905] vmxnet3 0000:00:03.0: Incompatible h/w version (0x0) for adapter [ 52.593130][ T5905] vmxnet3 0000:00:03.0: probe with driver vmxnet3 failed with error -16 [ 52.699652][ T41] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.852821][ T41] usb 6-1: config 0 has no interfaces? [ 52.855679][ T41] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 52.859339][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.865127][ T41] usb 6-1: config 0 descriptor?? [ 53.049689][ T5108] Bluetooth: hci3: command tx timeout [ 53.049797][ T5760] Bluetooth: hci0: command tx timeout [ 53.051797][ T5108] Bluetooth: hci1: command tx timeout [ 53.051819][ T5108] Bluetooth: hci2: command tx timeout [ 53.136872][ T60] usb 6-1: USB disconnect, device number 2 [ 53.380110][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.870387][ T5919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.283285][ T5922] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7'. [ 54.318122][ T5922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 54.325588][ T5922] ip6gretap0: entered promiscuous mode [ 54.328710][ T5922] vlan2: entered promiscuous mode [ 55.130346][ T5761] Bluetooth: hci2: command tx timeout [ 55.131877][ T5108] Bluetooth: hci1: command tx timeout [ 55.132294][ T5761] Bluetooth: hci3: command tx timeout [ 55.137548][ T5760] Bluetooth: hci0: command tx timeout [ 55.405528][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 55.460776][ T5931] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.665069][ T5937] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 55.667269][ T5937] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 55.670967][ T5937] vhci_hcd vhci_hcd.0: Device attached [ 55.889700][ T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 56.335758][ T5946] wg2 speed is unknown, defaulting to 1000 [ 56.348555][ T5946] wg2 speed is unknown, defaulting to 1000 [ 56.403545][ T5946] wg2 speed is unknown, defaulting to 1000 [ 56.419566][ T29] usb 44-1: SetAddress Request (2) to port 0 [ 56.421612][ T29] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 56.711025][ T34] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 56.717424][ T34] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 56.723430][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.764304][ T5942] vhci_hcd: connection reset by peer [ 56.789250][ T12] vhci_hcd vhci_hcd.3: stop threads [ 56.797293][ T12] vhci_hcd vhci_hcd.3: release socket [ 56.804901][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 56.811464][ T5939] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 56.822542][ T34] opticon 7-1:1.0: opticon converter detected [ 56.842723][ T34] usb 7-1: opticon converter now attached to ttyUSB0 [ 56.870899][ T5931] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.904881][ T5954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.917040][ T5821] wg2 speed is unknown, defaulting to 1000 [ 56.924705][ T5946] infiniband syz2: set active [ 56.926292][ T5946] infiniband syz2: added wg2 [ 56.947536][ T5931] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.976956][ T5946] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 56.999320][ T5946] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 57.019126][ T5946] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 57.089112][ T5946] RDS/IB: syz2: added [ 57.100726][ T5946] smc: adding ib device syz2 with port count 1 [ 57.112150][ T5946] smc: ib device syz2 port 1 has no pnetid [ 57.123550][ T5931] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.185259][ T5946] wg2 speed is unknown, defaulting to 1000 [ 57.189313][ T5821] wg2 speed is unknown, defaulting to 1000 [ 57.212134][ T5760] Bluetooth: hci2: command tx timeout [ 57.212784][ T5761] Bluetooth: hci0: command tx timeout [ 57.214005][ T5108] Bluetooth: hci3: command tx timeout [ 57.215635][ T5750] Bluetooth: hci1: command tx timeout [ 57.450447][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.469559][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.472324][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.479687][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.490288][ T5946] wg2 speed is unknown, defaulting to 1000 [ 57.576585][ T5946] wg2 speed is unknown, defaulting to 1000 [ 57.695613][ T5946] wg2 speed is unknown, defaulting to 1000 [ 57.900678][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 57.979753][ T65] block nbd0: Receive control failed (result -1) [ 58.008634][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 58.014297][ T5968] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 58.105404][ T5963] Set syz1 is full, maxelem 14 reached [ 58.579604][ T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.729538][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 58.733975][ T34] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.737261][ T34] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 58.740424][ T34] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.743587][ T34] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 58.746416][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.757273][ T34] hub 8-1:1.0: bad descriptor, ignoring hub [ 58.760177][ T34] hub 8-1:1.0: probe with driver hub failed with error -5 [ 58.763262][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 58.764907][ T34] cdc_wdm 8-1:1.0: skipping garbage [ 58.766705][ T34] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 58.784013][ T5977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.837250][ T5989] warning: `syz.0.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.821612][ T60] usb 8-1: USB disconnect, device number 2 [ 61.542552][ T29] usb 44-1: device descriptor read/8, error -110 [ 61.960436][ T6006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.030659][ T29] usb usb44-port1: attempt power cycle [ 62.149480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 62.199478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.481285][ T34] usb 7-1: USB disconnect, device number 2 [ 62.851061][ T6009] jffs2: notice: (6009) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 62.868101][ T6018] 9p: Bad value for 'wfdno' [ 62.882636][ T29] usb usb44-port1: unable to enumerate USB device [ 63.563059][ T34] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 63.566903][ T34] opticon 7-1:1.0: device disconnected [ 63.922247][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 63.940424][ T6031] netlink: 156 bytes leftover after parsing attributes in process `syz.1.31'. [ 63.987545][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31'. [ 63.998651][ T6031] ip6gretap0: entered promiscuous mode [ 64.000792][ T6031] vlan2: entered promiscuous mode [ 64.076613][ T34] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 64.082377][ T34] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 64.088992][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.111231][ T6025] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 64.131026][ T34] opticon 7-1:1.0: opticon converter detected [ 64.154668][ T34] usb 7-1: opticon converter now attached to ttyUSB0 [ 65.444268][ T6046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.444536][ T6053] ======================================================= [ 65.444536][ T6053] WARNING: The mand mount option has been deprecated and [ 65.444536][ T6053] and is ignored by this kernel. Remove the mand [ 65.444536][ T6053] option from the mount to silence this warning. [ 65.444536][ T6053] ======================================================= [ 65.652546][ T6052] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 65.662850][ T6052] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 65.700434][ T6052] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 65.712110][ T6052] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 65.714633][ T6052] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 65.724945][ T6052] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 65.734052][ T6052] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 65.736842][ T6052] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 65.745736][ T6052] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 65.753327][ T6052] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 65.755658][ T6052] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 65.765373][ T6052] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.250038][ T42] audit: type=1800 audit(1785954288.495:2): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.37" name="file1" dev="9p" ino=78395459 res=0 errno=0 [ 66.272285][ T6060] Mass Storage Function, version: 2009/09/11 [ 66.274702][ T6060] LUN: removable file: (no medium) [ 66.278359][ T42] audit: type=1800 audit(1785954288.525:3): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.37" name="cdrom" dev="configfs" ino=12779 res=0 errno=0 [ 66.285127][ T42] audit: type=1800 audit(1785954288.535:4): pid=6060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.37" name="file" dev="configfs" ino=12780 res=0 errno=0 [ 66.984682][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.072717][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.278821][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.358160][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.442536][ T5108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.445730][ T5108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.448745][ T5108] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.457831][ T5108] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.463300][ T5108] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.660649][ T12] bridge_slave_1: left allmulticast mode [ 67.665394][ T12] bridge_slave_1: left promiscuous mode [ 67.668689][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.677698][ T12] bridge_slave_0: left allmulticast mode [ 67.680724][ T12] bridge_slave_0: left promiscuous mode [ 67.682963][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.770351][ T5108] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.770380][ T5750] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.772514][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.864511][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.960277][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.966037][ T12] bond0 (unregistering): Released all slaves [ 67.977003][ T5460] 8021q: adding VLAN 0 to HW filter on device eth2 [ 68.067233][ T6073] wg2 speed is unknown, defaulting to 1000 [ 68.160056][ T847] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 68.288146][ T5460] 8021q: adding VLAN 0 to HW filter on device eth3 [ 68.309324][ T6095] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 68.311516][ T6095] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 68.320470][ T6095] vhci_hcd vhci_hcd.0: Device attached [ 68.331624][ T847] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 68.331646][ T847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 68.334102][ T847] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 68.334199][ T847] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 68.334213][ T847] usb 5-1: Product: syz [ 68.334223][ T847] usb 5-1: Manufacturer: syz [ 68.334232][ T847] usb 5-1: SerialNumber: syz [ 68.338716][ T847] usb 5-1: config 0 descriptor?? [ 68.351612][ T847] usb 5-1: selecting invalid altsetting 0 [ 68.399767][ T6095] syz2: rxe_newlink: already configured on wg2 [ 68.520030][ T5460] 8021q: adding VLAN 0 to HW filter on device eth4 [ 68.589666][ T29] usb 44-1: SetAddress Request (6) to port 0 [ 68.591599][ T29] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 68.615072][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.617441][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.619821][ T6073] bridge_slave_0: entered allmulticast mode [ 68.622684][ T6073] bridge_slave_0: entered promiscuous mode [ 68.626086][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.628323][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.630706][ T6073] bridge_slave_1: entered allmulticast mode [ 68.634218][ T6073] bridge_slave_1: entered promiscuous mode [ 68.651936][ T6073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.676052][ T6073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.724165][ T6073] team0: Port device team_slave_0 added [ 68.737605][ T6073] team0: Port device team_slave_1 added [ 68.793349][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.795732][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.803944][ T6073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.811815][ T5460] 8021q: adding VLAN 0 to HW filter on device eth5 [ 68.825733][ T6073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.828038][ T6073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.837250][ T6073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.884892][ T6101] vhci_hcd: connection reset by peer [ 68.887458][ T13] vhci_hcd vhci_hcd.3: stop threads [ 68.889174][ T13] vhci_hcd vhci_hcd.3: release socket [ 68.891306][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 68.909373][ T6073] hsr_slave_0: entered promiscuous mode [ 68.912426][ T6073] hsr_slave_1: entered promiscuous mode [ 68.915164][ T6073] debugfs: 'hsr0' already exists in 'hsr' [ 68.917493][ T6073] Cannot create hsr debugfs directory [ 69.137422][ T6073] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.151112][ T6073] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.154435][ T6073] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.158757][ T6073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.175116][ T6073] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.180347][ T6073] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.183105][ T6073] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.192355][ T6073] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.250995][ T6073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.272455][ T6073] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.293373][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.295916][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.313907][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.316731][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.387940][ T12] hsr_slave_0: left promiscuous mode [ 69.390628][ T12] hsr_slave_1: left promiscuous mode [ 69.393154][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.395616][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.406863][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.409314][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.426304][ T12] veth1_macvtap: left promiscuous mode [ 69.428203][ T12] veth0_macvtap: left promiscuous mode [ 69.430591][ T12] veth1_vlan: left promiscuous mode [ 69.432440][ T12] veth0_vlan: left promiscuous mode [ 69.476170][ T60] usb 7-1: USB disconnect, device number 3 [ 69.487649][ T60] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 69.501056][ T60] opticon 7-1:1.0: device disconnected [ 69.532236][ T5761] Bluetooth: hci0: command tx timeout [ 69.554939][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 69.652278][ T12] team0 (unregistering): Port device team_slave_1 removed [ 69.660701][ T12] team0 (unregistering): Port device team_slave_0 removed [ 69.783249][ T6160] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.849654][ T5108] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.851538][ T5108] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.856429][ T5761] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.876270][ T6160] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.986599][ T6160] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.022285][ T6073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.052428][ T41] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 70.068032][ T6160] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.101990][ T6191] bridge_slave_0: left allmulticast mode [ 70.104245][ T6191] bridge_slave_0: left promiscuous mode [ 70.107618][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.115937][ T6191] bridge_slave_1: left allmulticast mode [ 70.118203][ T6191] bridge_slave_1: left promiscuous mode [ 70.123062][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.132155][ T6191] bond0: (slave bond_slave_0): Releasing backup interface [ 70.137950][ T6191] bond0: (slave bond_slave_1): Releasing backup interface [ 70.147574][ T6191] team0: Port device team_slave_0 removed [ 70.152801][ T6191] team0: Port device team_slave_1 removed [ 70.154956][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.157210][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.162929][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.165143][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.168658][ T6191] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 70.176799][ T60] wg2 speed is unknown, defaulting to 1000 [ 70.212595][ T41] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 70.235139][ T41] usb 7-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 70.240086][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.254832][ T6165] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 70.260022][ T41] opticon 7-1:1.0: opticon converter detected [ 70.269656][ T5559] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.270135][ T41] usb 7-1: opticon converter now attached to ttyUSB0 [ 70.275719][ T5559] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.290059][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.300715][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.329986][ T6073] veth0_vlan: entered promiscuous mode [ 70.337225][ T6073] veth1_vlan: entered promiscuous mode [ 70.355464][ T6073] veth0_macvtap: entered promiscuous mode [ 70.360919][ T6073] veth1_macvtap: entered promiscuous mode [ 70.369312][ T6073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.376145][ T6073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.402296][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.405704][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.409139][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.428673][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.435090][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.448694][ T294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.451625][ T294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.459785][ T5559] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.550725][ T6202] Bluetooth: MGMT ver 1.23 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 70.856119][ T5842] usb 5-1: USB disconnect, device number 2 [ 70.983763][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.984514][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.151652][ T6213] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 71.153780][ T6213] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 71.156847][ T6213] vhci_hcd vhci_hcd.0: Device attached [ 71.169535][ T5827] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 71.234971][ T6213] rdma_rxe: rxe_newlink: failed to add wg2 [ 71.305415][ T42] audit: type=1326 audit(1785954293.555:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.4.52" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 71.321287][ T42] audit: type=1326 audit(1785954293.555:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.4.52" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 71.338669][ T42] audit: type=1326 audit(1785954293.555:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.4.52" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 71.349593][ T42] audit: type=1326 audit(1785954293.555:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.4.52" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 71.356545][ T42] audit: type=1326 audit(1785954293.555:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.4.52" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 71.357814][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 71.363502][ T42] audit: type=1326 audit(1785954293.555:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.4.52" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 71.371389][ T6209] unsupported nla_type 1871 [ 71.423398][ T6209] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 71.425978][ T6209] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 71.429600][ T6209] vhci_hcd vhci_hcd.0: Device attached [ 71.431425][ T34] usb 38-1: SetAddress Request (2) to port 0 [ 71.434871][ T34] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 71.441676][ T6221] vhci_hcd: connection closed [ 71.441944][ T5559] vhci_hcd vhci_hcd.3: stop threads [ 71.445686][ T5559] vhci_hcd vhci_hcd.3: release socket [ 71.447494][ T5559] vhci_hcd vhci_hcd.3: disconnect device [ 71.449884][ T5827] usb 8-1: unable to get BOS descriptor or descriptor too short [ 71.455653][ T5827] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 71.458175][ T5827] usb 8-1: can't read configurations, error -71 [ 71.609639][ T5761] Bluetooth: hci0: command tx timeout [ 71.716643][ T42] audit: type=1326 audit(1785954293.965:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.4.52" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 71.725734][ T42] audit: type=1326 audit(1785954293.975:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.4.52" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 71.792605][ T6214] vhci_hcd: connection reset by peer [ 71.795211][ T5559] vhci_hcd vhci_hcd.0: stop threads [ 71.796885][ T5559] vhci_hcd vhci_hcd.0: release socket [ 71.802945][ T5559] vhci_hcd vhci_hcd.0: disconnect device [ 71.929603][ T5761] Bluetooth: hci3: command 0x0c1a tx timeout [ 71.930825][ T5760] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.931756][ T5750] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.004172][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.54'. [ 72.036242][ T6225] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.221108][ T6225] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.294786][ T6225] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.570922][ T5827] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 72.580270][ T5108] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 72.684299][ T6225] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.249619][ T5559] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.269535][ T5559] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.299592][ T5559] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.309563][ T5559] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.331998][ T5827] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 73.389806][ T5827] usb 8-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 73.393166][ T5827] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.415538][ T6229] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 73.432110][ T5827] opticon 8-1:1.0: opticon converter detected [ 73.448207][ T5827] usb 8-1: opticon converter now attached to ttyUSB1 [ 73.464809][ T6237] netlink: 'syz.0.57': attribute type 3 has an invalid length. [ 73.467778][ T6237] netlink: 'syz.0.57': attribute type 1 has an invalid length. [ 73.471346][ T6237] netlink: 224 bytes leftover after parsing attributes in process `syz.0.57'. [ 73.494874][ T294] Bluetooth: (null): Invalid header checksum [ 73.612302][ T40] Bluetooth: (null): Invalid header checksum [ 73.690699][ T5108] Bluetooth: hci0: command 0x040f tx timeout [ 73.705060][ T29] usb 44-1: device descriptor read/8, error -110 [ 73.721144][ T294] Bluetooth: (null): Invalid header checksum [ 73.841732][ T40] Bluetooth: (null): Invalid header checksum [ 73.959806][ T40] Bluetooth: (null): Invalid header checksum [ 74.009709][ T5108] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.080625][ T40] Bluetooth: (null): Invalid header checksum [ 74.120041][ T29] usb usb44-port1: attempt power cycle [ 74.200922][ T167] Bluetooth: (null): Invalid header checksum [ 74.320646][ T40] Bluetooth: (null): Invalid header checksum [ 74.430021][ T294] Bluetooth: (null): Invalid header checksum [ 74.539848][ T294] Bluetooth: (null): Invalid header checksum [ 74.650766][ T40] Bluetooth: (null): Invalid header checksum [ 74.701036][ T29] usb usb44-port1: unable to enumerate USB device [ 74.760030][ T40] Bluetooth: (null): Invalid header checksum [ 74.815332][ T42] audit: type=1326 audit(1785954297.065:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.4.60" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 74.823821][ T42] audit: type=1326 audit(1785954297.075:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.4.60" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 74.869951][ T167] Bluetooth: (null): Invalid header checksum [ 74.980134][ T40] Bluetooth: (null): Invalid header checksum [ 75.089983][ T40] Bluetooth: (null): Invalid header checksum [ 75.184443][ T29] usb 8-1: USB disconnect, device number 4 [ 75.195777][ T29] opticon ttyUSB1: opticon converter now disconnected from ttyUSB1 [ 75.203134][ T29] opticon 8-1:1.0: device disconnected [ 75.204635][ T294] Bluetooth: (null): Invalid header checksum [ 75.309755][ T40] Bluetooth: (null): Invalid header checksum [ 75.420018][ T167] Bluetooth: (null): Invalid header checksum [ 75.530099][ T167] Bluetooth: (null): Invalid header checksum [ 75.599566][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 75.646575][ T167] Bluetooth: (null): Invalid header checksum [ 75.656769][ T1483] usb 7-1: USB disconnect, device number 4 [ 75.681595][ T1483] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 75.697872][ T1483] opticon 7-1:1.0: device disconnected [ 75.749912][ T167] Bluetooth: (null): Invalid header checksum [ 75.769961][ T5108] Bluetooth: hci0: command 0x040f tx timeout [ 76.085170][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.105590][ T167] Bluetooth: (null): Invalid header checksum [ 76.108517][ T167] Bluetooth: (null): Invalid header checksum [ 76.233229][ T6267] syz.4.64 (6267): drop_caches: 2 [ 76.312323][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.329616][ T167] Bluetooth: (null): Invalid header checksum [ 76.330120][ T29] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 76.331802][ T167] Bluetooth: (null): Invalid header checksum [ 76.336716][ T167] Bluetooth: (null): Invalid header checksum [ 76.350971][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.358223][ T6270] overlayfs: failed to resolve './file0': -2 [ 76.410108][ T36] Bluetooth: (null): Invalid header checksum [ 76.489610][ T34] usb 38-1: device descriptor read/8, error -110 [ 76.510270][ T29] usb 8-1: config 0 descriptor?? [ 76.516761][ T29] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 76.520817][ T294] Bluetooth: (null): Invalid header checksum [ 76.625182][ T6278] 9p: Bad value for 'rfdno' [ 76.680020][ T6282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.714961][ T5842] usb 8-1: USB disconnect, device number 5 [ 76.882972][ T34] usb usb38-port1: attempt power cycle [ 77.159544][ T29] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 77.365806][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.369527][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 77.373717][ T29] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 77.376481][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.387258][ T29] usb 8-1: config 0 descriptor?? [ 77.396839][ T29] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 77.441545][ T34] usb usb38-port1: unable to enumerate USB device [ 77.547497][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'. [ 77.602830][ T65] block nbd1: Receive control failed (result -1) [ 77.644699][ T5842] usb 8-1: USB disconnect, device number 6 [ 77.651402][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'. [ 77.660835][ T6290] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 77.841569][ T6290] Set syz1 is full, maxelem 14 reached [ 77.865609][ T5108] Bluetooth: hci0: command 0x040f tx timeout [ 78.052532][ T6299] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 78.053579][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 78.053591][ T42] audit: type=1326 audit(1785954300.305:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.73" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 78.054617][ T6299] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 78.059124][ T42] audit: type=1326 audit(1785954300.305:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.73" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 78.063476][ T6299] vhci_hcd vhci_hcd.0: Device attached [ 78.084236][ T42] audit: type=1326 audit(1785954300.335:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.73" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 78.084262][ T42] audit: type=1326 audit(1785954300.335:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.73" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 78.084282][ T42] audit: type=1326 audit(1785954300.335:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.73" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 78.150136][ T6299] rdma_rxe: rxe_newlink: failed to add wg2 [ 78.154548][ T6303] vhci_hcd: connection closed [ 78.155027][ T5559] vhci_hcd vhci_hcd.0: stop threads [ 78.158297][ T5559] vhci_hcd vhci_hcd.0: release socket [ 78.160055][ T5559] vhci_hcd vhci_hcd.0: disconnect device [ 78.183872][ T6309] input: syz0 as /devices/virtual/input/input6 [ 78.573091][ T6319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.787044][ T6323] netlink: 156 bytes leftover after parsing attributes in process `syz.0.79'. [ 78.894559][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 78.944827][ T65] block nbd2: Receive control failed (result -1) [ 78.965407][ T42] audit: type=1326 audit(2000000000.689:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.73" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 78.977809][ T42] audit: type=1326 audit(2000000000.689:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz.2.73" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 79.194996][ T6329] FAULT_INJECTION: forcing a failure. [ 79.194996][ T6329] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.199088][ T6329] CPU: 3 UID: 0 PID: 6329 Comm: syz.3.81 Not tainted syzkaller #0 PREEMPT(full) [ 79.199103][ T6329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 79.199109][ T6329] Call Trace: [ 79.199127][ T6329] [ 79.199131][ T6329] dump_stack_lvl+0x100/0x190 [ 79.199151][ T6329] should_fail_ex.cold+0x5/0xa [ 79.199164][ T6329] _copy_from_user+0x2e/0xd0 [ 79.199184][ T6329] get_user_ifreq+0x116/0x1c0 [ 79.199205][ T6329] compat_sock_ioctl+0x4c1/0x760 [ 79.199220][ T6329] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 79.199232][ T6329] ? hook_file_ioctl_common+0x140/0x440 [ 79.199251][ T6329] ? __fget_files+0x21f/0x3d0 [ 79.199264][ T6329] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 79.199278][ T6329] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 79.199297][ T6329] __do_fast_syscall_32+0xe7/0x970 [ 79.199315][ T6329] ? lockdep_hardirqs_on+0x78/0x100 [ 79.199330][ T6329] do_fast_syscall_32+0x32/0x70 [ 79.199346][ T6329] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 79.199361][ T6329] RIP: 0023:0xf7f94fec [ 79.199373][ T6329] Code: Unable to access opcode bytes at 0xf7f94fc2. [ 79.199385][ T6329] RSP: 002b:00000000f545650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 79.199396][ T6329] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 79.199403][ T6329] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.199409][ T6329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 79.199415][ T6329] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 79.199434][ T6329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.199448][ T6329] [ 79.534836][ T6344] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484032 (4294968064 ns) > initial count (6 ns). Using initial count to start timer. [ 80.031166][ T6367] process 'syz.0.88' launched './file2' with NULL argv: empty string added [ 80.642407][ T6379] [U] ¥ [ 80.643473][ T6379] [U] [ 80.644369][ T6379] [U] [ 80.645259][ T6379] [U] [ 80.646163][ T6379] [U] [ 80.647059][ T6379] [U] [ 80.647967][ T6379] [U] [ 80.648858][ T6379] [U] [ 80.649781][ T6379] [U] [ 80.652714][ T6379] [U] [ 80.653596][ T6379] [U] [ 80.654459][ T6379] [U] [ 80.655351][ T6379] [U] [ 80.656278][ T6379] [U] [ 80.657176][ T6379] [U] [ 80.658106][ T6379] [U] [ 80.659003][ T6379] [U] [ 80.659953][ T6379] [U] [ 80.660845][ T6379] [U] [ 80.661754][ T6379] [U] [ 80.662655][ T6379] [U] [ 80.663569][ T6379] [U] [ 80.664458][ T6379] [U] [ 80.665347][ T6379] [U] [ 80.666248][ T6379] [U] [ 80.667142][ T6379] [U] [ 80.668068][ T6379] [U] [ 80.668938][ T6379] [U] [ 80.669853][ T6379] [U] [ 80.670800][ T6379] [U] [ 80.671661][ T6379] [U] [ 80.672500][ T6379] [U] [ 80.673356][ T6379] [U] [ 80.674296][ T6379] [U] [ 80.675185][ T6379] [U] [ 80.676069][ T6379] [U] [ 80.676966][ T6379] [U] [ 80.677887][ T6379] [U] [ 80.678779][ T6379] [U] [ 80.679678][ T6379] [U] [ 80.680567][ T6379] [U] [ 80.683922][ T6379] [U] [ 80.684804][ T6379] [U] [ 80.685704][ T6379] [U] [ 80.686647][ T6379] [U] [ 80.694788][ T6379] [U] [ 80.695729][ T6379] [U] [ 80.696593][ T6379] [U] [ 80.697461][ T6379] [U] [ 80.700321][ T6379] [U] [ 80.701260][ T6379] [U] [ 80.702174][ T6379] [U] [ 80.703006][ T6379] [U] [ 80.703932][ T6379] [U] [ 80.704826][ T6379] [U] [ 80.705733][ T6379] [U] [ 80.706634][ T6379] [U] [ 80.709529][ T6379] [U] [ 80.710451][ T6379] [U] [ 80.711334][ T6379] [U] [ 80.712551][ T6379] [U] [ 80.713865][ T6379] [U] [ 80.715025][ T6379] [U] [ 80.715988][ T6379] [U] [ 80.717121][ T6379] [U] [ 80.720338][ T6379] [U] [ 80.721237][ T6379] [U] [ 80.722136][ T6379] [U] [ 80.723032][ T6379] [U] [ 80.728299][ T6379] [U] [ 80.729239][ T6379] [U] [ 80.730148][ T6379] [U] [ 80.731036][ T6379] [U] [ 80.735323][ T6379] [U] [ 80.736350][ T6379] [U] [ 80.737244][ T6379] [U] [ 80.738279][ T6379] [U] [ 80.748273][ T6379] [U] [ 80.749385][ T6379] [U] [ 80.750482][ T6379] [U] [ 80.751634][ T6379] [U] [ 80.765265][ T6379] [U] [ 80.766421][ T6379] [U] [ 80.767511][ T6379] [U] [ 80.768598][ T6379] [U] [ 80.769675][ T6379] [U] [ 80.780132][ T6379] [U] [ 80.781067][ T6379] [U] [ 80.782000][ T6379] [U] [ 80.782896][ T6379] [U] [ 80.783890][ T6379] [U] [ 80.784780][ T6379] [U] [ 80.785679][ T6379] [U] [ 80.786604][ T6379] [U] [ 80.787560][ T6379] [U] [ 80.788444][ T6379] [U] [ 80.789324][ T6379] [U] [ 80.790291][ T6379] [U] [ 80.791322][ T6379] [U] [ 80.792236][ T6379] [U] [ 80.793119][ T6379] [U] [ 80.794025][ T6379] [U] [ 80.794952][ T6379] [U] [ 80.795836][ T6379] [U] [ 80.796715][ T6379] [U] [ 80.797631][ T6379] [U] [ 80.798540][ T6379] [U] [ 80.799433][ T6379] [U] [ 80.800312][ T6379] [U] [ 80.801191][ T6379] [U] [ 80.803046][ T6379] [U] [ 80.804036][ T6379] [U] [ 80.804918][ T6379] [U] [ 80.805818][ T6379] [U] [ 80.808053][ T6379] [U] [ 80.808991][ T6379] [U] [ 80.809904][ T6379] [U] [ 80.810778][ T6379] [U] [ 80.811790][ T6379] [U] [ 80.812671][ T6379] [U] [ 80.813544][ T6379] [U] [ 80.814425][ T6379] [U] [ 80.815300][ T6379] [U] [ 80.816177][ T6379] [U] [ 80.817053][ T6379] [U] [ 80.817970][ T6379] [U] [ 80.818854][ T6379] [U] [ 80.819739][ T6379] [U] [ 80.820620][ T6379] [U] [ 80.843063][ T6378] [U] [ 80.861534][ T6393] FAULT_INJECTION: forcing a failure. [ 80.861534][ T6393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.866670][ T6393] CPU: 2 UID: 0 PID: 6393 Comm: syz.2.95 Not tainted syzkaller #0 PREEMPT(full) [ 80.866685][ T6393] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.866691][ T6393] Call Trace: [ 80.866697][ T6393] [ 80.866701][ T6393] dump_stack_lvl+0x100/0x190 [ 80.866719][ T6393] should_fail_ex.cold+0x5/0xa [ 80.866734][ T6393] _copy_to_user+0x32/0xd0 [ 80.866752][ T6393] simple_read_from_buffer+0xcb/0x170 [ 80.866772][ T6393] proc_fail_nth_read+0x1af/0x230 [ 80.866788][ T6393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.866804][ T6393] ? rw_verify_area+0xce/0x6d0 [ 80.866821][ T6393] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.866836][ T6393] vfs_read+0x1e4/0xb40 [ 80.866847][ T6393] ? __pfx_vfs_read+0x10/0x10 [ 80.866856][ T6393] ? find_held_lock+0x2b/0x80 [ 80.866872][ T6393] ? __fget_files+0x215/0x3d0 [ 80.866884][ T6393] ? __fget_files+0x21f/0x3d0 [ 80.866898][ T6393] ksys_read+0x12a/0x250 [ 80.866907][ T6393] ? __pfx_ksys_read+0x10/0x10 [ 80.866921][ T6393] do_int80_emulation+0x14b/0x720 [ 80.866939][ T6393] asm_int80_emulation+0x1a/0x20 [ 80.866951][ T6393] RIP: 0023:0xf71274eb [ 80.866960][ T6393] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 80.866970][ T6393] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 80.866981][ T6393] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53dd5d0 [ 80.866988][ T6393] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 80.866994][ T6393] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 80.867000][ T6393] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 80.867006][ T6393] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 80.867018][ T6393] [ 80.971600][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.96'. [ 81.062876][ T65] block nbd3: Receive control failed (result -1) [ 81.114605][ T6399] Set syz1 is full, maxelem 14 reached [ 81.250925][ T2154] cfg80211: failed to load regulatory.db [ 81.353535][ T42] audit: type=1326 audit(2000000003.079:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.4.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 81.363231][ T42] audit: type=1326 audit(2000000003.079:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.4.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 81.377570][ T42] audit: type=1326 audit(2000000003.099:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.4.99" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdefec code=0x7ffc0000 [ 81.428210][ T6405] e1000e 0000:00:02.0 eth1: removed PHC [ 81.552865][ T6405] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 81.671198][ T6408] vmxnet3 0000:00:03.0: Incompatible h/w version (0x0) for adapter [ 81.726368][ T6408] vmxnet3 0000:00:03.0: probe with driver vmxnet3 failed with error -16 [ 82.148914][ T6439] cgroup: Need name or subsystem set [ 82.574354][ T6464] overlayfs: failed to resolve './file0': -2 [ 82.753402][ T6478] ntfs3(nullb0): Primary boot signature is not NTFS. [ 82.756913][ T6478] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 82.778550][ T6474] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 82.780646][ T6474] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 82.786611][ T6474] vhci_hcd vhci_hcd.0: Device attached [ 82.839174][ T6474] rdma_rxe: rxe_newlink: failed to add wg2 [ 82.904869][ T6487] netlink: 'syz.0.111': attribute type 39 has an invalid length. [ 83.063798][ T42] kauditd_printk_skb: 298 callbacks suppressed [ 83.063809][ T42] audit: type=1326 audit(2000000004.789:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 83.074140][ T5950] usb 46-1: SetAddress Request (2) to port 0 [ 83.076112][ T5950] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 83.079625][ T42] audit: type=1326 audit(2000000004.799:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.105" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 83.086790][ T42] audit: type=1326 audit(2000000004.799:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.105" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf6fef017 code=0x7ffc0000 [ 83.094459][ T42] audit: type=1326 audit(2000000004.799:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.105" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 83.104421][ T42] audit: type=1326 audit(2000000004.799:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.105" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf6fef017 code=0x7ffc0000 [ 83.111362][ T42] audit: type=1326 audit(2000000004.799:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 83.122374][ T42] audit: type=1326 audit(2000000004.829:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.105" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 83.134818][ T42] audit: type=1326 audit(2000000004.829:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.105" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf6fef017 code=0x7ffc0000 [ 83.145592][ T42] audit: type=1326 audit(2000000004.829:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 83.153211][ T42] audit: type=1326 audit(2000000004.839:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6446 comm="syz.2.105" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 83.420267][ T6480] vhci_hcd: connection reset by peer [ 83.422246][ T5559] vhci_hcd vhci_hcd.4: stop threads [ 83.423866][ T5559] vhci_hcd vhci_hcd.4: release socket [ 83.426664][ T5559] vhci_hcd vhci_hcd.4: disconnect device [ 83.618902][ T6514] jffs2: notice: (6514) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.078673][ T6522] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 84.080760][ T6522] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 84.084994][ T6522] vhci_hcd vhci_hcd.0: Device attached [ 84.093230][ T6522] tipc: Started in network mode [ 84.095267][ T6522] tipc: Node identity 4, cluster identity 4711 [ 84.097314][ T6522] tipc: Node number set to 4 [ 84.101801][ T6522] netlink: 40 bytes leftover after parsing attributes in process `syz.4.121'. [ 84.104248][ T6525] overlayfs: failed to resolve './file0': -2 [ 84.110940][ T6523] vhci_hcd: connection closed [ 84.112155][ T5559] vhci_hcd vhci_hcd.4: stop threads [ 84.118328][ T5559] vhci_hcd vhci_hcd.4: release socket [ 84.120831][ T5559] vhci_hcd vhci_hcd.4: disconnect device [ 84.238572][ T6528] Zero length message leads to an empty skb [ 84.855910][ T6550] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 84.858632][ T6550] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 84.862812][ T6550] vhci_hcd vhci_hcd.0: Device attached [ 84.876090][ T6550] syz2: rxe_newlink: already configured on wg2 [ 85.130013][ T1483] usb 44-1: SetAddress Request (10) to port 0 [ 85.134204][ T1483] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 85.535343][ T6552] vhci_hcd: connection reset by peer [ 85.540857][ T5559] vhci_hcd vhci_hcd.3: stop threads [ 85.542941][ T5559] vhci_hcd vhci_hcd.3: release socket [ 85.545101][ T5559] vhci_hcd vhci_hcd.3: disconnect device [ 85.944859][ T6572] netlink: 'syz.2.135': attribute type 1 has an invalid length. [ 85.966392][ T6572] bond1: option mode: invalid value (9) [ 85.970809][ T6572] bond1 (unregistering): Released all slaves [ 85.997346][ T6571] vhci_hcd vhci_hcd.0: remove, state 4 [ 85.999397][ T6571] usb usb38: USB disconnect, device number 1 [ 86.039329][ T5559] vhci_hcd vhci_hcd.0: stop threads [ 86.041264][ T5559] vhci_hcd vhci_hcd.0: release socket [ 86.048206][ T5559] vhci_hcd vhci_hcd.0: disconnect device [ 86.051754][ T5559] vhci_hcd vhci_hcd.0: stop threads [ 86.056843][ T6571] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 86.058069][ T5559] vhci_hcd vhci_hcd.0: release socket [ 86.068639][ T5559] vhci_hcd vhci_hcd.0: disconnect device [ 86.096760][ T6571] vhci_hcd vhci_hcd.0: remove, state 4 [ 86.107070][ T5559] ================================================================== [ 86.109470][ T5559] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 86.111831][ T5559] Read of size 1 at addr ffff8880217c86c8 by task kworker/u32:2/5559 [ 86.115436][ T5559] SYZFAIL: failed to recv rpc [ 86.116558][ T5559] CPU: 3 UID: 0 PID: 5559 Comm: kworker/u32:2 Not tainted syzkaller #0 PREEMPT(full) [ 86.116572][ T5559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.116581][ T5559] Workqueue: usbip_event event_handler [ 86.116599][ T5559] Call Trace: [ 86.116604][ T5559] [ 86.116608][ T5559] dump_stack_lvl+0x100/0x190 [ 86.116622][ T5559] print_report+0x13d/0x4b0 [ 86.116639][ T5559] ? __virt_addr_valid+0x239/0x430 [ 86.116653][ T5559] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 86.116665][ T5559] kasan_report+0xdf/0x1c0 [ 86.116681][ T5559] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 86.116694][ T5559] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 86.116706][ T5559] __kasan_check_byte+0x36/0x50 [ 86.116721][ T5559] lock_acquire+0x132/0x370 [ 86.116738][ T5559] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.116751][ T5559] ? _raw_spin_lock_irqsave+0x52/0x60 [ 86.116763][ T5559] _raw_spin_lock_irqsave+0x3a/0x60 [ 86.116778][ T5559] ? event_handler+0x21e/0x570 [ 86.116793][ T5559] event_handler+0x21e/0x570 [ 86.116806][ T5559] process_one_work+0xa23/0x1940 [ 86.116826][ T5559] ? __pfx_process_one_work+0x10/0x10 [ 86.116843][ T5559] ? __pfx_event_handler+0x10/0x10 [ 86.116855][ T5559] worker_thread+0x5ef/0xe50 [ 86.116872][ T5559] ? __pfx_worker_thread+0x10/0x10 [ 86.116887][ T5559] ? kthread+0x13a/0x450 [ 86.116902][ T5559] ? __pfx_worker_thread+0x10/0x10 [ 86.116917][ T5559] kthread+0x370/0x450 [ 86.116930][ T5559] ? __pfx_kthread+0x10/0x10 [ 86.116944][ T5559] ret_from_fork+0x72b/0xd50 [ 86.116959][ T5559] ? __pfx_ret_from_fork+0x10/0x10 [ 86.116972][ T5559] ? __switch_to+0x800/0x10f0 [ 86.116989][ T5559] ? __pfx_kthread+0x10/0x10 [ 86.117003][ T5559] ret_from_fork_asm+0x1a/0x30 [ 86.117021][ T5559] [ 86.117025][ T5559] [ 86.169555][ T5559] Allocated by task 1: [ 86.170808][ T5559] kasan_save_stack+0x30/0x50 [ 86.172273][ T5559] kasan_save_track+0x14/0x30 [ 86.173739][ T5559] __kasan_kmalloc+0xaa/0xb0 [ 86.175160][ T5559] __kmalloc_noprof+0x322/0x820 [ 86.176628][ T5559] __usb_create_hcd+0x5e/0xac0 [ 86.178082][ T5559] vhci_hcd_probe+0x1a5/0x4e0 [ 86.179472][ T5559] platform_probe+0x106/0x1d0 [ 86.180896][ T5559] really_probe+0x241/0xa60 [ 86.182285][ T5559] __driver_probe_device+0x20e/0x450 [ 86.183887][ T5559] driver_probe_device+0x4a/0x140 [ 86.185398][ T5559] __device_attach_driver+0x1df/0x320 [ 86.187054][ T5559] bus_for_each_drv+0x159/0x1e0 [ 86.188567][ T5559] __device_attach+0x1e4/0x4d0 [ 86.190020][ T5559] device_initial_probe+0xaf/0xd0 [ 86.191528][ T5559] bus_probe_device+0x64/0x160 [ 86.193001][ T5559] device_add+0x121d/0x1970 [ 86.194395][ T5559] platform_device_add+0x35a/0x800 [ 86.195960][ T5559] platform_device_register_full+0x5cf/0x830 [ 86.197802][ T5559] vhci_hcd_init+0x1a1/0x2f0 [ 86.199197][ T5559] do_one_initcall+0x11d/0x700 [ 86.200670][ T5559] kernel_init_freeable+0x6ea/0x7b0 [ 86.202242][ T5559] kernel_init+0x1f/0x1e0 [ 86.203558][ T5559] ret_from_fork+0x72b/0xd50 [ 86.204966][ T5559] ret_from_fork_asm+0x1a/0x30 [ 86.206443][ T5559] [ 86.207192][ T5559] Freed by task 6571: [ 86.208443][ T5559] kasan_save_stack+0x30/0x50 [ 86.209899][ T5559] kasan_save_track+0x14/0x30 [ 86.211325][ T5559] kasan_save_free_info+0x3b/0x70 [ 86.212852][ T5559] __kasan_slab_free+0x5f/0x80 [ 86.214289][ T5559] kfree+0x22b/0x6c0 [ 86.215478][ T5559] usb_put_hcd+0x149/0x1f0 [ 86.216844][ T5559] vhci_hcd_remove+0xb5/0x1b0 [ 86.218260][ T5559] platform_remove+0x5f/0x80 [ 86.219682][ T5559] device_remove+0xcb/0x180 [ 86.221093][ T5559] device_release_driver_internal+0x44e/0x620 [ 86.222945][ T5559] unbind_store+0xf8/0x110 [ 86.224321][ T5559] drv_attr_store+0x74/0xb0 [ 86.225723][ T5559] sysfs_kf_write+0xf2/0x150 [ 86.227147][ T5559] kernfs_fop_write_iter+0x3e0/0x5f0 [ 86.228750][ T5559] vfs_write+0x6ac/0x1050 [ 86.230099][ T5559] ksys_write+0x12a/0x250 [ 86.231401][ T5559] __do_fast_syscall_32+0xe7/0x970 [ 86.232948][ T5559] do_fast_syscall_32+0x32/0x70 [ 86.234404][ T5559] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 86.236294][ T5559] [ 86.237032][ T5559] Last potentially related work creation: [ 86.238751][ T5559] kasan_save_stack+0x30/0x50 [ 86.240171][ T5559] kasan_record_aux_stack+0xa7/0xc0 [ 86.241742][ T5559] insert_work+0x36/0x230 [ 86.243035][ T5559] __queue_work+0x9bc/0x12b0 [ 86.244446][ T5559] queue_work_on+0x1a9/0x1e0 [ 86.245876][ T5559] usb_hcd_giveback_urb+0x330/0x4a0 [ 86.247465][ T5559] unlink1+0x418/0x510 [ 86.248705][ T5559] usb_hcd_unlink_urb+0x131/0x210 [ 86.250220][ T5559] usb_kill_urb+0x121/0x320 [ 86.251600][ T5559] hub_quiesce+0x1e9/0x320 [ 86.252942][ T5559] hub_suspend+0x4ab/0x9e0 [ 86.254312][ T5559] usb_suspend_both+0x288/0x950 [ 86.255759][ T5559] usb_runtime_suspend+0x49/0x120 [ 86.257270][ T5559] __rpm_callback+0xc8/0x620 [ 86.258675][ T5559] rpm_callback+0x16a/0x1b0 [ 86.260044][ T5559] rpm_suspend+0x2f4/0x11a0 [ 86.261411][ T5559] __pm_runtime_suspend+0xba/0x1a0 [ 86.262968][ T5559] usb_runtime_idle+0x7e/0x90 [ 86.264428][ T5559] rpm_idle+0x322/0x790 [ 86.265742][ T5559] pm_runtime_work+0x120/0x150 [ 86.267214][ T5559] process_one_work+0xa23/0x1940 [ 86.268728][ T5559] worker_thread+0x5ef/0xe50 [ 86.270126][ T5559] kthread+0x370/0x450 [ 86.271389][ T5559] ret_from_fork+0x72b/0xd50 [ 86.272787][ T5559] ret_from_fork_asm+0x1a/0x30 [ 86.274251][ T5559] [ 86.274995][ T5559] Second to last potentially related work creation: [ 86.277001][ T5559] kasan_save_stack+0x30/0x50 [ 86.278475][ T5559] kasan_record_aux_stack+0xa7/0xc0 [ 86.280065][ T5559] insert_work+0x36/0x230 [ 86.281401][ T5559] __queue_work+0x9bc/0x12b0 [ 86.282866][ T5559] queue_work_on+0x1a9/0x1e0 [ 86.284286][ T5559] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 86.285856][ T5559] usb_hcd_submit_urb+0xab7/0x2150 [ 86.287457][ T5559] usb_submit_urb+0x827/0x19b0 [ 86.288918][ T5559] usb_start_wait_urb+0x10e/0x580 [ 86.290473][ T5559] usb_control_msg+0x328/0x4b0 [ 86.291945][ T5559] hub_suspend+0x826/0x9e0 [ 86.293341][ T5559] usb_suspend_both+0x288/0x950 [ 86.294830][ T5559] usb_runtime_suspend+0x49/0x120 [ 86.296342][ T5559] __rpm_callback+0xc8/0x620 [ 86.297785][ T5559] rpm_callback+0x16a/0x1b0 [ 86.299193][ T5559] rpm_suspend+0x2f4/0x11a0 [ 86.300566][ T5559] __pm_runtime_suspend+0xba/0x1a0 [ 86.302148][ T5559] usb_runtime_idle+0x7e/0x90 [ 86.303627][ T5559] rpm_idle+0x322/0x790 [ 86.304945][ T5559] pm_runtime_work+0x120/0x150 [ 86.306411][ T5559] process_one_work+0xa23/0x1940 [ 86.307960][ T5559] worker_thread+0x5ef/0xe50 [ 86.309363][ T5559] kthread+0x370/0x450 [ 86.310611][ T5559] ret_from_fork+0x72b/0xd50 [ 86.312020][ T5559] ret_from_fork_asm+0x1a/0x30 [ 86.313464][ T5559] [ 86.314216][ T5559] The buggy address belongs to the object at ffff8880217c8000 [ 86.314216][ T5559] which belongs to the cache kmalloc-8k of size 8192 [ 86.318250][ T5559] The buggy address is located 1736 bytes inside of [ 86.318250][ T5559] freed 8192-byte region [ffff8880217c8000, ffff8880217ca000) [ 86.322326][ T5559] [ 86.323076][ T5559] The buggy address belongs to the physical page: [ 86.325016][ T5559] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x217c8 [ 86.327569][ T5559] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 86.330113][ T5559] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 86.332364][ T5559] page_type: f5(slab) [ 86.333610][ T5559] raw: 00fff00000000040 ffff88801bc43180 dead000000000100 dead000000000122 [ 86.336152][ T5559] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 86.338808][ T5559] head: 00fff00000000040 ffff88801bc43180 dead000000000100 dead000000000122 [ 86.341473][ T5559] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 86.344139][ T5559] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 86.346808][ T5559] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 86.349482][ T5559] page dumped because: kasan: bad access detected [ 86.351474][ T5559] page_owner tracks the page as allocated [ 86.353244][ T5559] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 4233540027, free_ts 0 [ 86.359170][ T5559] post_alloc_hook+0xfd/0x120 [ 86.360643][ T5559] get_page_from_freelist+0xf48/0x3530 [ 86.362392][ T5559] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 86.364291][ T5559] new_slab+0xa2/0x640 [ 86.365572][ T5559] refill_objects+0xe3/0x410 [ 86.367046][ T5559] __pcs_replace_empty_main+0x376/0x680 [ 86.368765][ T5559] __kmalloc_noprof+0x66d/0x820 [ 86.370298][ T5559] acpi_ut_initialize_buffer+0x144/0x220 [ 86.372065][ T5559] acpi_rs_create_pci_routing_table+0x135/0xe00 [ 86.374010][ T5559] acpi_rs_get_prt_method_data+0xc1/0x150 [ 86.375790][ T5559] acpi_get_irq_routing_table+0xb8/0x140 [ 86.377556][ T5559] acpi_pci_irq_find_prt_entry+0x179/0xdd0 [ 86.379395][ T5559] acpi_pci_irq_lookup+0x8e/0x6b0 [ 86.380979][ T5559] acpi_pci_irq_disable+0x1a8/0x360 [ 86.382622][ T5559] pcibios_disable_device+0x89/0xb0 [ 86.384250][ T5559] do_pci_disable_device+0x9f/0x100 [ 86.385889][ T5559] page_owner free stack trace missing [ 86.387573][ T5559] [ 86.388336][ T5559] Memory state around the buggy address: [ 86.390083][ T5559] ffff8880217c8580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.392562][ T5559] ffff8880217c8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.395042][ T5559] >ffff8880217c8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.397496][ T5559] ^ [ 86.399471][ T5559] ffff8880217c8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.401949][ T5559] ffff8880217c8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.404412][ T5559] ================================================================== [ 86.406889][ T5559] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.409135][ T5559] CPU: 3 UID: 0 PID: 5559 Comm: kworker/u32:2 Not tainted syzkaller #0 PREEMPT(full) [ 86.412065][ T5559] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.415173][ T5559] Workqueue: usbip_event event_handler [ 86.416877][ T5559] Call Trace: [ 86.417954][ T5559] [ 86.418894][ T5559] dump_stack_lvl+0x100/0x190 [ 86.420374][ T5559] vpanic+0x552/0x970 [ 86.421637][ T5559] ? __pfx_vpanic+0x10/0x10 [ 86.423094][ T5559] ? __pfx_vprintk_emit+0x10/0x10 [ 86.424680][ T5559] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 86.426368][ T5559] panic+0xd1/0xe0 [ 86.427558][ T5559] ? __pfx_panic+0x10/0x10 [ 86.428959][ T5559] ? end_report.part.0+0x23/0x90 [ 86.430524][ T5559] ? rcu_is_watching+0x12/0xc0 [ 86.432045][ T5559] ? end_report.part.0+0x23/0x90 [ 86.433602][ T5559] ? check_panic_on_warn+0x1f/0x90 [ 86.435220][ T5559] check_panic_on_warn.cold+0x19/0x34 [ 86.436848][ T5559] end_report.part.0+0x3a/0x90 [ 86.438370][ T5559] kasan_report.cold+0xe/0x18 [ 86.439851][ T5559] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 86.441524][ T5559] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 86.443238][ T5559] __kasan_check_byte+0x36/0x50 [ 86.444778][ T5559] lock_acquire+0x132/0x370 [ 86.446220][ T5559] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.448033][ T5559] ? _raw_spin_lock_irqsave+0x52/0x60 [ 86.449712][ T5559] _raw_spin_lock_irqsave+0x3a/0x60 [ 86.451321][ T5559] ? event_handler+0x21e/0x570 [ 86.452830][ T5559] event_handler+0x21e/0x570 [ 86.454292][ T5559] process_one_work+0xa23/0x1940 [ 86.455807][ T5559] ? __pfx_process_one_work+0x10/0x10 [ 86.457516][ T5559] ? __pfx_event_handler+0x10/0x10 [ 86.459125][ T5559] worker_thread+0x5ef/0xe50 [ 86.460582][ T5559] ? __pfx_worker_thread+0x10/0x10 [ 86.462198][ T5559] ? kthread+0x13a/0x450 [ 86.463537][ T5559] ? __pfx_worker_thread+0x10/0x10 [ 86.465144][ T5559] kthread+0x370/0x450 [ 86.466439][ T5559] ? __pfx_kthread+0x10/0x10 [ 86.467900][ T5559] ret_from_fork+0x72b/0xd50 [ 86.469351][ T5559] ? __pfx_ret_from_fork+0x10/0x10 [ 86.470957][ T5559] ? __switch_to+0x800/0x10f0 [ 86.472445][ T5559] ? __pfx_kthread+0x10/0x10 [ 86.473910][ T5559] ret_from_fork_asm+0x1a/0x30 [ 86.475417][ T5559] [ 86.477034][ T5559] Kernel Offset: disabled [ 86.478397][ T5559] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:25:08 Registers: info registers vcpu 0 CPU#0 RAX=00000000ffffffff RBX=ffff88802984a540 RCX=0000000000000001 RDX=0000000000000000 RSI=00000000ffffffff RDI=ffff88802b23b660 RBP=ffffffff8e891480 RSP=ffffc90000007d48 R8 =0000000000000001 R9 =fffffbfff1d5a2f5 R10=ffffffff8ead17af R11=0000000000000001 R12=ffff88802b33b600 R13=0000000000000000 R14=0000000000000000 R15=ffff88802b33b600 RIP=ffffffff8bb88122 RFL=00000096 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7198b50 CR3=000000004ad75000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a800000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000001000008fd RBX=ffff88801c2d8480 RCX=0000000000000830 RDX=0000000000000001 RSI=00000000000000fd RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc90003c076c8 R8 =0000000000000000 R9 =fffffbfff22455fa R10=ffffffff9122afd7 R11=0000000000000000 R12=0000000000000004 R13=1ffff92000780edd R14=ffffc90003c07708 R15=0000000000000010 RIP=ffffffff81b69c1a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096cdf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080021000 CR3=000000004ad75000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=00000000079fea53 RCX=ffffffff851c06d4 RDX=00000000000006e2 RSI=0000000000000000 RDI=ffff8880293cca80 RBP=ffff88807efaf91e RSP=ffffc90003d17168 R8 =0000000000000007 R9 =0000000000000000 R10=00000000000006e2 R11=0000000000000000 R12=dffffc0000000000 R13=00000000000006e1 R14=00000000000006e1 R15=0000000000000000 RIP=ffffffff851c0660 RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096ddf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f74064c4 CR3=00000000247ac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0a535 RDI=ffffffff9b9f74e0 RBP=ffffffff9b9f74a0 RSP=ffffc90003747570 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000035353554 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b6f71e2 R15=ffffffff85a0a4d0 RIP=ffffffff85a0a55f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096edf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffb178dff8 CR3=0000000066936000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 40527e5ae9d0dfdb 9addfe8654fdeee2 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 26c02aeda86c966d 8deba64e34124b5c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f68803b0fb109ee 9a6a91f7e7728b9c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2d5973144af302b7 07eff5f285df33ae ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004bc0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 356378bc35638952 0000000035639907 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8800800140008001 3a00800135639a83 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000de008001 3563872400000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5200800100000000 0000000060008001 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8eccf85788e27f1f 52d92be4634571d8 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 92a5dc9789cd3bc5 d4a88e427e556cf8 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000