last executing test programs: 7.121028831s ago: executing program 2 (id=303): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x8000000, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xfc) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0xa0000001}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x2}, {0x3, 0x0, 0x1, 0x1}}, {{0x4}, {0x0, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x4}}], 0x28) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x400) setsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000000)=0x641, 0x4) 6.171510273s ago: executing program 2 (id=306): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000000)={0x98f902, 0x8}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x8080) r4 = openat$bsg(0xffffff9c, &(0x7f0000000240), 0x280000, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000c40)='\x9b\x00', &(0x7f0000000c80)='./file0\x00', 0xffffffffffffffff) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x0, 0x0) r7 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r7, &(0x7f0000002180)={0x2020}, 0x2020) preadv2(r7, &(0x7f0000000100)=[{&(0x7f00000041c0)=""/4096, 0x1000}], 0x1, 0x6, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.170921567s ago: executing program 0 (id=307): openat$vimc0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x69a7, &(0x7f0000000600)={0x0, 0xae22, 0x50e83aaeac7bb425, 0x2, 0x177}, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x67fd, &(0x7f0000000100)={0x0, 0x203400, 0x412, 0x2, 0x0, 0x0, r3}, 0x0, 0x0) r4 = io_uring_setup(0x4d63, &(0x7f0000000080)={0x0, 0xd974, 0x0, 0x2, 0x2d6, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000008000a00040e00000800090000a800000800070000000000080008"], 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0xb, 0x0, 0x1, 0xcf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x48) 5.335607636s ago: executing program 2 (id=309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001300128009000100626f6e64000000001400028008001c001f000000050001"], 0x44}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x6, 0x6, 0x80, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$rxrpc(0x21, 0x2, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000540)=""/252, 0xfc}, {&(0x7f0000000640)=""/72, 0x48}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000780)=""/149, 0x95}, {&(0x7f0000000840)=""/147, 0x93}], 0x5) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYRESHEX=r1, @ANYRES32=r7, @ANYBLOB="080005000200"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002e00390008000300", @ANYRES32=r10, @ANYBLOB="0a00340002020202020200000a0006000802110000000000080026006c090000"], 0x3c}}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) socketpair(0x29, 0x2, 0x0, &(0x7f0000000a40)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000040)=ANY=[@ANYRES16=r3], 0x28) r11 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r11, &(0x7f0000000300)="e229fc04553d512e813124f99b80d5326782df004e2e54705982f0cb77cbbd52fceda2a7fedf3595e4ab7737f1e7fde3c3892bf4f107e2131e94fd9810ed68f7c9c22efc8c8cfa17fe00336361fee07d9d50c4c13b5e5bfba541a8d0ce278affdcd0625e649d17829a2d5a63131de996e92909871f6b01ec1b1a04375b96e2ce5b9100f6ff0000000000000000000000000087941817a3496c400d95b24a55f53551c1699ec7868f36f10fa2c68a03592e3c4a48f8a21715120bf6f4126e3747d1359e39cf6e095718ef36e2f61dbad20f8b3d4ee9cf4b55a1487835021d520ab85ef59b60580b4ed75e727bd76f47ab6bb2e631e1a1a45ab2d0db275cc3633f12aa7ce126c318616bb54f9bae2e2311daad7b254448e552bda71cdc3aa6fe18537822d6fc30114d83bfd5d6aa027f0a146206ceead6d5b347619419d5881ee325672b7476afcdfade51b9ae568b40c2fc91a52d29c7e5e596610cb36edc8116000dd8a93a9551f7d7d2d62a56939938a171c1ed960f59a6e013e557fad71b3b8986d14dbaf649f5340f75ffa296eec9d8b788623901aca301c07124efee955f1a7cde6c8931b13b3eb3ec", 0xffffff6d, 0x4048041, 0x0, 0x0) socket(0x21, 0x2, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e4001020303090224002af62300000904000002ca744d0009053f034d00ff99090805848f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x6) 5.278268117s ago: executing program 3 (id=310): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x1c, r2, 0x73bf44d8d76863a9, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) ioprio_set$pid(0x3, 0x0, 0x0) r6 = syz_clone3(&(0x7f0000000900)={0x100000, &(0x7f00000003c0), &(0x7f00000005c0), &(0x7f0000000600)=0x0, {0xc}, &(0x7f0000000640)=""/66, 0x42, &(0x7f0000000800)=""/210, &(0x7f00000006c0)=[r0, r0], 0x2, {r3}}, 0x58) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r10, 0x0) syz_clone3(&(0x7f0000000980)={0x22000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000380), {0x20}, &(0x7f0000000480)=""/154, 0x9a, &(0x7f0000000540)=""/105, &(0x7f0000000700)=[r0, r0, r0, r0, r0, r0, r7, r8, r0, r0], 0xa, {r10}}, 0x58) process_vm_readv(r6, &(0x7f0000000780)=[{&(0x7f0000000a00)=""/248, 0xf8}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/87, 0x57}], 0x4, &(0x7f0000003b80)=[{0x0}], 0x1, 0x0) ioprio_get$pid(0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r11, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x1, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xc8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x801) r12 = syz_open_dev$vcsn(&(0x7f0000000040), 0x204, 0x2e4100) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r12, 0xc0245720, &(0x7f00000000c0)={0x1}) 4.420929048s ago: executing program 1 (id=312): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720aacff0000000071101d00000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$audion(&(0x7f0000000100), 0x80000001, 0x181400) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000007c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f0000000280)='J', 0x1, 0x8040, 0x0, 0x0) recvfrom(r3, &(0x7f0000001a80)=""/4096, 0x1000, 0x3, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) listen(r3, 0x0) close(r2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x1e, 0x1d, 0x199, &(0x7f00000003c0)}) write$apparmor_current(r1, 0x0, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) sendfile(r0, r3, 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x116, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x3f70, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 4.2859371s ago: executing program 3 (id=313): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x351140, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x8) r1 = epoll_create(0x803) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000100)=[{0xa, 0x8, 0x3, 0x1e}]}) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x29, 0x49, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x84300) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB]) ftruncate(0xffffffffffffffff, 0x200000) preadv(0xffffffffffffffff, &(0x7f0000002100)=[{&(0x7f00000007c0)=""/80, 0x50}], 0x2, 0x1fffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) write$apparmor_exec(r4, &(0x7f00000000c0)={'exec ', '\x00'}, 0x6) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0xb, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 4.11006181s ago: executing program 0 (id=314): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@rand_addr, @empty, 0x2, "c8fc5e70b1b5ae627a3c9f580df57e22f2b08c58288b6cb58b74354989fa5393"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000080)={@multicast2, @remote, 0x0, "55feb93af00ae07db091e9cf004b520523112b8f7139c3112ea029186f17ee86", 0x1, 0x6, 0x0, 0x7fffffff}, 0x3c) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000200)={@private=0xa010102, @rand_addr=0x64010101, 0xffffffffffffffff, "199e2dc8deb01f37cb8976e515630b9600cb908db480b86d640bdb5b6ca3120a", 0x80000002, 0xfffffffe, 0xffffffff, 0x1}, 0x3c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000240)=0x9, 0x4) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000380), 0x8) r4 = socket$xdp(0x2c, 0x3, 0x0) dup3(r4, r3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000080)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000200)=0x80, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r4, &(0x7f0000000900)={0x2c, 0x0, r6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@newchain={0x2c, 0x64, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xa, 0x1}, {0xa}, {0xffff, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004004}, 0x1) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000280)={0x0, 0x0, 0xf7, 0xfffff791, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002cc0), 0x101, 0x0) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000100)={@empty, @multicast2, 0x1, "d2d72eeed8fcae8819756dc049358e826635424a9b858017c95cd28c433571eb", 0x2, 0x5, 0x7fc0}, 0x3c) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x7, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth0\x00'}) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@rand_addr, @empty, 0x0, "c8fc5e70b1b5ae627a3c9f580df57e22f2b08c58288b6cb58b74354989fa5393", 0x0, 0x0, 0x0, 0x87}, 0x3c) setsockopt$MRT_DONE(r2, 0x0, 0x5, 0x0, 0x0) 4.00993782s ago: executing program 0 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003140)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rt6_stats\x00') pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 3.540036878s ago: executing program 1 (id=316): openat$vimc0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x69a7, &(0x7f0000000600)={0x0, 0xae22, 0x50e83aaeac7bb425, 0x2, 0x177}, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x67fd, &(0x7f0000000100)={0x0, 0x203400, 0x412, 0x2, 0x0, 0x0, r4}, 0x0, 0x0) r5 = io_uring_setup(0x4d63, &(0x7f0000000080)={0x0, 0xd974, 0x0, 0x2, 0x2d6, 0x0, r4}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000051}, 0x805) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000008000a00040e00000800090000a800000800070000000000080008"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0xb, 0x0, 0x1, 0xcf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x48) 3.060035925s ago: executing program 0 (id=317): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) timer_create(0x3, &(0x7f0000000040)={0x0, 0x2e, 0x6, @thr={&(0x7f0000000300)="c6f670f200c25293c9f397627a68f362e6e00ef17e2b2628627c463f14bd0a0c064e8e649ea7947216642fe4bad5048da6e05baf814c462095a3ebed081f72c906479b399f3b49e45eaa05bbfc07dba4916d1897733dd35dc254a37b3d1146d5fd7eb8b019e9676979", &(0x7f0000000400)="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"}}, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102376, 0x18fe8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) socket$netlink(0x10, 0x3, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb1}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000200)="bdcf5722ba942a31e139d8f8d79984f586440ad354177c8882da6be77b8278", 0x1f}], 0x1, &(0x7f0000000680)=[@rthdr_2292={{0x64, 0x29, 0x39, {0xff, 0xa, 0x0, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @remote, @mcast2, @local]}}}, @dontfrag={{0x10, 0x29, 0x3e, 0x2}}, @rthdrdstopts={{0x8c, 0x29, 0x37, {0x4, 0xe, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @pad1, @generic={0x18, 0x54, "71ea28af473f2d9b1e52e6fb16d7cd2d17a321b6b8b2a7018959dd5a11580da2c963ce2e0adfa391910eced718f8b3a220834028b88a8f5293b9bfbd137c6fe803bcce07416117150d84bf14d30917fc37ed858a"}, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0xf7, 0xbac, [0x9]}}]}}}, @rthdr={{0x94, 0x29, 0x39, {0x87, 0x10, 0x0, 0xf2, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @mcast1, @remote, @mcast2, @empty, @mcast1, @mcast1]}}}, @tclass={{0x10}}, @tclass={{0x10, 0x29, 0x43, 0x1}}, @hopopts={{0x14, 0x29, 0x36, {0x3c}}}, @dstopts={{0x14}}], 0x1dc}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000400)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, 'dont_appraise'}}, 0xfffffee4) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=ANY=[@ANYBLOB="200000005200010000000000000000001c"], 0x20}}, 0x0) 2.809760826s ago: executing program 3 (id=318): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x4, 0x4, 0x10007ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r3}}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r5}, 0x10) r6 = socket(0x2, 0x3, 0x9) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000004780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}}], 0x1, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, 0x0, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r1) 2.619630832s ago: executing program 3 (id=319): openat$vimc0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x69a7, &(0x7f0000000600)={0x0, 0xae22, 0x50e83aaeac7bb425, 0x2, 0x177}, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x67fd, &(0x7f0000000100)={0x0, 0x203400, 0x412, 0x2, 0x0, 0x0, r4}, 0x0, 0x0) r5 = io_uring_setup(0x4d63, &(0x7f0000000080)={0x0, 0xd974, 0x0, 0x2, 0x2d6, 0x0, r4}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000051}, 0x805) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000008000a00040e00000800090000a800000800070000000000080008"], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0xb, 0x0, 0x1, 0xcf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x48) 2.31011103s ago: executing program 1 (id=320): syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x181480, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000700)={'pimreg1\x00', @local}) r2 = syz_io_uring_setup(0xec5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x18a}, &(0x7f0000000080)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0xde5, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000000)={'ip6gre0\x00', @random="0200"}) readahead(r1, 0x0, 0x0) r6 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000002c0)={"90125830", 0x0, 0x5, 0x9, 0x0, 0x6, "471d855406050000c6a185480039d5", 'W\x00', "214619ed", "41f336e7", ["c81de44b0091fb7ce7442d42", "ed5eb3eecf000c00bd00", "34334e67c300e1a4c49d3300", "e996c9c4d23135876ea2fff7"]}) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2.069180665s ago: executing program 2 (id=321): sched_setaffinity(0x0, 0xfffffffffffffe58, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xec, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) write$binfmt_script(r2, &(0x7f00000019c0)={'#! ', './file0'}, 0xb) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000340)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\f\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f00000007c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', 0x0, &(0x7f00000010c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00', &(0x7f0000001540)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00'], &(0x7f00000001c0)=[&(0x7f0000001e80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t\x92\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\xc9.\x8br\xf9\xde\xd6\xe6\x14O\xc8\xff3ZA\xea\xd4\xa9]7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\xa9\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00']) fsopen(0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)=""/234, 0xea}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x2, &(0x7f0000000280)=""/21, 0x15}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x200000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x646}], [{}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000002340)) process_vm_writev(0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/217, 0xd9}], 0x1, &(0x7f0000000880)=[{&(0x7f0000000700)=""/186, 0xba}], 0x1, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x300, 0x40) madvise(&(0x7f0000161000/0x4000)=nil, 0x4000, 0x1) 1.819055319s ago: executing program 0 (id=322): openat$vimc0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x69a7, &(0x7f0000000600)={0x0, 0xae22, 0x50e83aaeac7bb425, 0x2, 0x177}, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x67fd, &(0x7f0000000100)={0x0, 0x203400, 0x412, 0x2, 0x0, 0x0, r3}, 0x0, 0x0) r4 = io_uring_setup(0x4d63, &(0x7f0000000080)={0x0, 0xd974, 0x0, 0x2, 0x2d6, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000008000a00040e00000800090000a800000800070000000000080008"], 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0xb, 0x0, 0x1, 0xcf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x48) 1.758005255s ago: executing program 1 (id=323): r0 = socket$kcm(0x2, 0x200000000000004, 0x106) syz_open_dev$dri(&(0x7f0000000600), 0x3, 0x30000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000640)='sched_move_numa\x00', r1}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) syz_clone(0x51108000, &(0x7f00000002c0)="0d87bc62db1556a60d223a00", 0xc, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="221bbc0592222431cfbcd0a228d731b039e0ba24ed3007dcf2521577") setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a54049f0c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a1", 0xc7, 0x0, 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00'}, 0x10) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000900, 0x0, &(0x7f0000000580)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 1.132140238s ago: executing program 1 (id=324): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="b7020000000000ffbfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4edcc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0x3, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000), &(0x7f0000000000)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000003c0)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x891c, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000500)=ANY=[], 0x119) writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00', 0x3}], 0x1) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.01013161s ago: executing program 3 (id=325): openat$sysctl(0xffffffffffffff9c, &(0x7f0000001240)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x1, 0x10100, 0x0, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}, @IFLA_MTU={0x8}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r7, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0) socket$kcm(0xa, 0x5, 0x11) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x40040, 0x0) ioctl$TIOCGSID(r9, 0x5429, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x7002, 0x0) 549.248346ms ago: executing program 3 (id=326): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x351140, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x8) r1 = epoll_create(0x803) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000100)=[{0xa, 0x8, 0x3, 0x1e}]}) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x29, 0x49, 0x0, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x84300) r3 = memfd_create(&(0x7f0000002180)='\xa3\xcb\x04=\x827\xe7\x81S\bD\xd8K| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xa5\x9e\x1f`\x05q5\xee\xde\xdf\xba\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) ftruncate(r3, 0x200000) preadv(r3, &(0x7f0000002100)=[{&(0x7f00000007c0)=""/80, 0x50}], 0x2, 0x1fffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) write$apparmor_exec(r4, &(0x7f00000000c0)={'exec ', '\x00'}, 0x6) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0xb, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 548.453146ms ago: executing program 2 (id=327): r0 = socket$netlink(0x10, 0x3, 0x8000000004) setreuid(0xee01, 0xee01) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="01"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000500)={0x4, 0x0, [{0xa, 0x0, 0xd, 0x6, 0x8}, {0x80000001, 0xfffffffd, 0x6, 0xffffffff}, {0xd, 0xda, 0x1, 0x8000, 0x6}, {0x7, 0x80000000, 0xb70, 0x9, 0x9}]}) r5 = syz_io_uring_setup(0x129, &(0x7f0000000340)={0x0, 0xa89, 0x1, 0x200, 0x314}, &(0x7f0000000100), &(0x7f0000000280)) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000440)={&(0x7f0000000400)=[0x0, 0x0, 0x0], 0x3}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) ftruncate(r7, 0x6000000) pread64(r7, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYBLOB="01000002000000000022230000000a0001007770616e30000000"], 0x20}}, 0x0) getpeername$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272dfdffff7f00f0fffeffe809000000ffd9dd000000100001000a0808004149004006040800000000000000000000298c814acba8c5cb51e203eef2acdc5ad04e5413decbbb3ecfdf1e8a49dc39d4fc55a5b1813a5da1b7285f2d961d69f337827d770caf5456f60af0e0a5ba9f1b65d77a97e695bdc6000b1620f130f16cd9c59766f495da2fc06346bd1b79791a3b98079db59b49", 0xbf}], 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000088}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="080027bd7000fbdbdf255c0000000c009900000001007d00000008006b006801000008006b006801000008006b00b400000008006b007800000008016b0028000000"], 0x48}, 0x1, 0x0, 0x0, 0x24000010}, 0x1) openat$null(0xffffff9c, &(0x7f0000000480), 0x14040, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000003c0)={0x3, 0x9, "9179ce717cfe2c9c3b"}) 445.867152ms ago: executing program 2 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2010000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000900)='net/packet\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) copy_file_range(r0, &(0x7f00000008c0)=0x1000, r1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x8a5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x48) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x7ffff000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={0x0, 0x0, 0x18}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00008556800000000000000004", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) open(&(0x7f00000002c0)='./file0\x00', 0x1c1042, 0x0) memfd_create(&(0x7f0000002180)='\xa3\xcb\x04=\x827\xe7\x81S\bD\xd8K| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xa5\x9e\x1f`\x05q5\xee\xde\xdf\xba\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4) r4 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_G_FMT(r4, 0xc0cc5604, &(0x7f0000000000)={0x5, @raw_data="de916bbb89e8c8236a8e798bae77d64282d92a51a7f421676a8f5ea6c01dc13e32ef8a3b9517685a28ee5990649f7c57464f8f3ec9672f7a8f7fafa865baf4d12f32b3049eca2ce0361356722c9c2d564970d7c45e89c79a6828ce0008bcd6cc63378a710a3d87402e1a27e55f4814ba165c6d44dc3f1982bf37f651b1a30774880b18caf352c623065980638c4f744eedc9f82cc084616c91ea3812db3abd6d3bb5cbb9328b78991ced727fbb37f91868e4b80beee121e83185163630a9850c3b6fcc0faf07dc96"}) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 430.340141ms ago: executing program 1 (id=329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_setup(0x5af4, &(0x7f0000000100)={0x0, 0x0, 0x13580}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r6}) io_uring_enter(r3, 0x6256, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) utimes(0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r7 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xc0}}, 0x0) 0s ago: executing program 0 (id=330): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) io_uring_setup(0x1783, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) r5 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x82) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRESOCT=r3, @ANYRESOCT=r5, @ANYRES8=r5, @ANYRES8=r0, @ANYRESOCT, @ANYRESHEX=r3], 0xc8) write$binfmt_script(r4, 0x0, 0x0) r6 = io_uring_setup(0x177f, &(0x7f0000000340)) r7 = socket(0x1d, 0x2, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x102}, 0x18) io_uring_enter(r6, 0x5624, 0xa2ba, 0x8, &(0x7f00000003c0)={[0x4, 0xfffffff9]}, 0x8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r9, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x27}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "6b66a7ddefa0e763382314f4baf07292"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4004800) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:46884' (ED25519) to the list of known hosts. [ 42.879978][ T5333] cgroup: Unknown subsys name 'net' [ 43.050321][ T5333] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 44.230453][ T5333] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.375753][ T5351] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.377420][ T5353] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.379304][ T5351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.383936][ T5353] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.385571][ T5354] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.388605][ T5354] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.391279][ T5358] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.393254][ T5358] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.395610][ T5354] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.397432][ T5353] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.398644][ T5353] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.401459][ T5354] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 48.401702][ T5353] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.403502][ T5354] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.409461][ T5353] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.409520][ T5354] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 48.412717][ T5364] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.414037][ T5354] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.417493][ T5364] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.422217][ T5363] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.428922][ T5363] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 48.431160][ T5364] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.434280][ T5364] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 48.436543][ T5358] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.752648][ T5359] chnl_net:caif_netlink_parms(): no params data found [ 48.770106][ T5347] chnl_net:caif_netlink_parms(): no params data found [ 48.774694][ T5348] chnl_net:caif_netlink_parms(): no params data found [ 48.816753][ T5355] chnl_net:caif_netlink_parms(): no params data found [ 48.978979][ T5348] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.981704][ T5348] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.984661][ T5348] bridge_slave_0: entered allmulticast mode [ 48.989076][ T5348] bridge_slave_0: entered promiscuous mode [ 49.059406][ T5348] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.062947][ T5348] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.065831][ T5348] bridge_slave_1: entered allmulticast mode [ 49.069548][ T5348] bridge_slave_1: entered promiscuous mode [ 49.141779][ T5359] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.144255][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.146704][ T5359] bridge_slave_0: entered allmulticast mode [ 49.150801][ T5359] bridge_slave_0: entered promiscuous mode [ 49.196879][ T5348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.228106][ T5359] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.230188][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.232512][ T5359] bridge_slave_1: entered allmulticast mode [ 49.235061][ T5359] bridge_slave_1: entered promiscuous mode [ 49.238993][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.241681][ T5347] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.243897][ T5347] bridge_slave_0: entered allmulticast mode [ 49.246232][ T5347] bridge_slave_0: entered promiscuous mode [ 49.250321][ T5348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.289813][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.291805][ T5347] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.293810][ T5347] bridge_slave_1: entered allmulticast mode [ 49.296273][ T5347] bridge_slave_1: entered promiscuous mode [ 49.333432][ T5355] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.335448][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.337762][ T5355] bridge_slave_0: entered allmulticast mode [ 49.340227][ T5355] bridge_slave_0: entered promiscuous mode [ 49.381023][ T5347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.385394][ T5347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.410842][ T5355] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.412934][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.414843][ T5355] bridge_slave_1: entered allmulticast mode [ 49.417206][ T5355] bridge_slave_1: entered promiscuous mode [ 49.421347][ T5359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.461924][ T5348] team0: Port device team_slave_0 added [ 49.483702][ T5359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.489062][ T5347] team0: Port device team_slave_0 added [ 49.492072][ T5348] team0: Port device team_slave_1 added [ 49.532294][ T5347] team0: Port device team_slave_1 added [ 49.552268][ T5355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.614416][ T5355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.618988][ T5359] team0: Port device team_slave_0 added [ 49.640064][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.642397][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.651085][ T5348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.680183][ T5359] team0: Port device team_slave_1 added [ 49.682760][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.684612][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.693844][ T5347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.697475][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.699346][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.707664][ T5348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.744231][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.746105][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.753834][ T5347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.779670][ T5355] team0: Port device team_slave_0 added [ 49.803643][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.805844][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.813820][ T5359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.818557][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.820983][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.829916][ T5359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.836327][ T5355] team0: Port device team_slave_1 added [ 49.925469][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.927593][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.934304][ T5355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.981483][ T5347] hsr_slave_0: entered promiscuous mode [ 49.983755][ T5347] hsr_slave_1: entered promiscuous mode [ 49.988040][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.990004][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.996570][ T5355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.004026][ T5348] hsr_slave_0: entered promiscuous mode [ 50.006846][ T5348] hsr_slave_1: entered promiscuous mode [ 50.013989][ T5348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.016171][ T5348] Cannot create hsr debugfs directory [ 50.143356][ T5359] hsr_slave_0: entered promiscuous mode [ 50.145563][ T5359] hsr_slave_1: entered promiscuous mode [ 50.147735][ T5359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.149717][ T5359] Cannot create hsr debugfs directory [ 50.226584][ T5355] hsr_slave_0: entered promiscuous mode [ 50.230978][ T5355] hsr_slave_1: entered promiscuous mode [ 50.232979][ T5355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.234975][ T5355] Cannot create hsr debugfs directory [ 50.428561][ T4777] Bluetooth: hci0: command tx timeout [ 50.430774][ T5358] Bluetooth: hci2: command tx timeout [ 50.507512][ T5358] Bluetooth: hci1: command tx timeout [ 50.507607][ T4777] Bluetooth: hci3: command tx timeout [ 50.580734][ T5347] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.591137][ T5347] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.605958][ T5347] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.618845][ T5347] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.640396][ T5348] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.649621][ T5348] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.654532][ T5348] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.663840][ T5348] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.718250][ T5355] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.730495][ T5355] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.742854][ T5355] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.749444][ T5355] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.795874][ T5359] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 50.801831][ T5359] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 50.812161][ T5359] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 50.817798][ T5359] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 50.905284][ T5347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.946504][ T5347] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.962986][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.964930][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.974685][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.976584][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.981767][ T5348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.985941][ T5355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.043147][ T5355] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.056302][ T5348] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.075954][ T5359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.083987][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.086708][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.092092][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.094494][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.100235][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.102352][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.105731][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.108188][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.168016][ T5359] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.191484][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.193763][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.215539][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.217518][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.306981][ T5347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.345009][ T5347] veth0_vlan: entered promiscuous mode [ 51.351740][ T5355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.364393][ T5347] veth1_vlan: entered promiscuous mode [ 51.383258][ T5348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.407593][ T5347] veth0_macvtap: entered promiscuous mode [ 51.419950][ T5359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.424303][ T5347] veth1_macvtap: entered promiscuous mode [ 51.458490][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.464869][ T5355] veth0_vlan: entered promiscuous mode [ 51.469729][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.473066][ T5348] veth0_vlan: entered promiscuous mode [ 51.480811][ T5347] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.483250][ T5347] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.485684][ T5347] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.489345][ T5347] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.501660][ T5355] veth1_vlan: entered promiscuous mode [ 51.530012][ T5348] veth1_vlan: entered promiscuous mode [ 51.546567][ T5359] veth0_vlan: entered promiscuous mode [ 51.577157][ T5359] veth1_vlan: entered promiscuous mode [ 51.581886][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.584135][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.588106][ T5355] veth0_macvtap: entered promiscuous mode [ 51.610436][ T5355] veth1_macvtap: entered promiscuous mode [ 51.616666][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.620399][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.636840][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.642804][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.646499][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.660070][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.662786][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.666425][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.670833][ T5359] veth0_macvtap: entered promiscuous mode [ 51.681013][ T5355] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.683305][ T5355] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.685575][ T5355] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.688793][ T5355] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.693564][ T5359] veth1_macvtap: entered promiscuous mode [ 51.697207][ T5348] veth0_macvtap: entered promiscuous mode [ 51.710619][ T5348] veth1_macvtap: entered promiscuous mode [ 51.741836][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.744593][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.747085][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.751838][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.755454][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.773280][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.776151][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.779433][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.782163][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.786301][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.792572][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.795302][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.798628][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.801731][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.804436][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.807115][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.811482][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.825650][ T5359] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.828281][ T5359] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.830636][ T5359] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.833014][ T5359] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.854796][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.855444][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.860502][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.860641][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.863102][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.869236][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.871841][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.874559][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.878558][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.900116][ T1212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.902204][ T1212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.909096][ T5348] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.911476][ T5348] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.913747][ T5348] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.916024][ T5348] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.972139][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.974967][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.003433][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.014689][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.048780][ T1212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.050893][ T1212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.057765][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.059863][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.302642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 52.373638][ T5427] netlink: 'syz.3.5': attribute type 4 has an invalid length. [ 52.398318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.417653][ T5361] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.517597][ T4777] Bluetooth: hci2: command tx timeout [ 52.518736][ T5358] Bluetooth: hci0: command tx timeout [ 52.587474][ T5358] Bluetooth: hci1: command tx timeout [ 52.588597][ T4777] Bluetooth: hci3: command tx timeout [ 52.630597][ T5361] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 52.634343][ T5361] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.637434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 52.637949][ T5361] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.643492][ T5361] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 52.650045][ T5361] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 52.653047][ T5361] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 52.682429][ T5361] usb 6-1: Manufacturer: syz [ 52.699926][ T5361] usb 6-1: config 0 descriptor?? [ 53.077395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 53.107380][ T56] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 53.137030][ T5361] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 53.143459][ T5361] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 53.152703][ T5361] appleir 0003:05AC:8243.0002: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 53.237497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.297504][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 53.300276][ T56] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 53.307781][ T56] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 53.314538][ T56] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 53.317152][ T56] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 53.322843][ T56] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.326483][ T56] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 53.329565][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.562831][ T56] usb 7-1: usb_control_msg returned -32 [ 53.564439][ T56] usbtmc 7-1:16.0: can't read capabilities [ 53.567481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.647541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.689007][ T5393] usb 6-1: USB disconnect, device number 2 [ 53.767575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.788503][ T5395] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.977455][ T5395] usb 8-1: Using ep0 maxpacket: 8 [ 53.981066][ T5395] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 53.983207][ T5395] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 53.985700][ T5395] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 53.988581][ T5395] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 53.991350][ T5395] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.994703][ T5395] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 53.997204][ T5395] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.242868][ T5395] usb 8-1: GET_CAPABILITIES returned 0 [ 54.244375][ T5395] usbtmc 8-1:16.0: can't read capabilities [ 54.265840][ T5459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 54.367447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 54.377448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 54.513484][ T5464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 54.557112][ T5460] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 54.574757][ T5414] usb 8-1: USB disconnect, device number 2 [ 54.588355][ T4777] Bluetooth: hci2: command tx timeout [ 54.588379][ T5358] Bluetooth: hci0: command tx timeout [ 54.667599][ T5358] Bluetooth: hci1: command tx timeout [ 54.677437][ T5358] Bluetooth: hci3: command tx timeout [ 54.950369][ T5475] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 54.952914][ T5475] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 54.972932][ T5475] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 54.975169][ T5475] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 54.987057][ T5475] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 54.992376][ T5475] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 55.004405][ T5475] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 55.007448][ T5475] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 55.192970][ T5484] netlink: 1160 bytes leftover after parsing attributes in process `syz.3.23'. [ 55.823203][ T5394] usb 7-1: USB disconnect, device number 2 [ 55.925135][ T5491] syzkaller0: entered allmulticast mode [ 55.950362][ T5491] syzkaller0 (unregistering): left allmulticast mode [ 56.055344][ T5493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'. [ 56.141266][ T39] audit: type=1326 audit(1726549504.761:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.3.27" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 56.146777][ T39] audit: type=1326 audit(1726549504.761:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.3.27" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 56.152673][ T39] audit: type=1326 audit(1726549504.761:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.3.27" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 56.158136][ T39] audit: type=1326 audit(1726549504.771:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.3.27" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 56.163572][ T39] audit: type=1326 audit(1726549504.771:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.3.27" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 56.170475][ T39] audit: type=1326 audit(1726549504.791:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.3.27" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 56.175935][ T39] audit: type=1326 audit(1726549504.791:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.3.27" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 56.181628][ T39] audit: type=1326 audit(1726549504.791:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.3.27" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 56.187614][ T39] audit: type=1326 audit(1726549504.791:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.3.27" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 56.193083][ T39] audit: type=1326 audit(1726549504.791:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5494 comm="syz.3.27" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 56.297698][ T5394] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 56.502368][ T5394] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 56.505763][ T5394] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.517510][ T5394] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.520271][ T5394] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 56.525995][ T5394] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 56.529071][ T5394] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 56.531797][ T5394] usb 7-1: Manufacturer: syz [ 56.540145][ T5394] usb 7-1: config 0 descriptor?? [ 56.621991][ T5512] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.707430][ T56] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.927386][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 56.930214][ T56] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 56.932416][ T56] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 56.935093][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 56.938657][ T56] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 56.941978][ T56] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.946053][ T56] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 56.949491][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.985541][ T5394] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 56.992239][ T5394] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 57.007276][ T5394] appleir 0003:05AC:8243.0003: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 57.194290][ T56] usb 5-1: GET_CAPABILITIES returned 0 [ 57.196434][ T56] usbtmc 5-1:16.0: can't read capabilities [ 57.526635][ T5361] usb 7-1: USB disconnect, device number 3 [ 57.725516][ T5501] syz.1.29 (5501) used greatest stack depth: 20896 bytes left [ 59.073566][ T5537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 59.424066][ T981] usb 5-1: USB disconnect, device number 2 [ 60.282586][ T56] libceph: connect (1)[c::]:6789 error -101 [ 60.285192][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 60.288830][ T56] libceph: connect (1)[c::]:6789 error -101 [ 60.290766][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 60.548621][ T56] libceph: connect (1)[c::]:6789 error -101 [ 60.550309][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 61.047750][ T5581] ceph: No mds server is up or the cluster is laggy [ 61.057848][ T56] libceph: connect (1)[c::]:6789 error -101 [ 61.060216][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 61.182322][ T5605] block nbd3: shutting down sockets [ 61.803707][ T5609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 61.972112][ T71] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 61.984199][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.987201][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.264264][ T5618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.270841][ T5618] batadv_slave_0: entered promiscuous mode [ 62.296617][ T5620] syz.1.59 uses obsolete (PF_INET,SOCK_PACKET) [ 62.537724][ T5626] mac80211_hwsim hwsim8 ÿÿÿÿÿÿ: renamed from wlan1 (while UP) [ 62.641612][ T5630] usb usb8: usbfs: process 5630 (syz.3.63) did not claim interface 0 before use [ 63.014662][ T5627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'. [ 63.797555][ T5393] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 63.993912][ T5393] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 64.000869][ T5393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.005021][ T5393] usb 6-1: Product: syz [ 64.006598][ T5393] usb 6-1: Manufacturer: syz [ 64.008366][ T5393] usb 6-1: SerialNumber: syz [ 64.015226][ T5393] usb 6-1: config 0 descriptor?? [ 64.224826][ T5393] hso 6-1:0.0: Can't find BULK IN endpoint [ 64.226831][ T5393] usb-storage 6-1:0.0: USB Mass Storage device detected [ 64.489868][ T5669] mac80211_hwsim hwsim9 ÿÿÿÿÿÿ: renamed from wlan1 (while UP) [ 64.878291][ T5673] netlink: 'syz.1.67': attribute type 39 has an invalid length. [ 65.347887][ T981] usb 6-1: USB disconnect, device number 3 [ 65.791863][ T5680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 66.375068][ T39] kauditd_printk_skb: 48 callbacks suppressed [ 66.375080][ T39] audit: type=1326 audit(1726549514.991:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.3.82" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 66.387765][ T39] audit: type=1326 audit(1726549514.991:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.3.82" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 66.403239][ T39] audit: type=1326 audit(1726549515.001:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.3.82" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 66.410177][ T39] audit: type=1326 audit(1726549515.001:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.3.82" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 66.415703][ T39] audit: type=1326 audit(1726549515.011:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.3.82" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 66.461059][ T39] audit: type=1326 audit(1726549515.011:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.3.82" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 66.487813][ T39] audit: type=1326 audit(1726549515.011:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.3.82" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 66.495128][ T39] audit: type=1326 audit(1726549515.011:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.3.82" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 66.512838][ T39] audit: type=1326 audit(1726549515.011:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.3.82" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 66.523486][ T39] audit: type=1326 audit(1726549515.011:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5692 comm="syz.3.82" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 67.148005][ T5711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 67.307135][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'. [ 67.650121][ T5731] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 67.654662][ T5731] Bluetooth: MGMT ver 1.23 [ 68.120906][ T5749] binder: 5747:5749 ioctl c0306201 20000680 returned -14 [ 68.196845][ T5751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 68.215894][ T5751] team1: Mode changed to "random" [ 68.218249][ T5751] team1: Unable to change to the same mode the team is in [ 68.748443][ T5764] usb usb8: usbfs: process 5764 (syz.1.103) did not claim interface 0 before use [ 69.707361][ T5358] Bluetooth: hci0: command tx timeout [ 70.308957][ T5784] netlink: 'syz.2.109': attribute type 1 has an invalid length. [ 70.361458][ T5784] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 70.370059][ T5784] bridge0: port 3(bond1) entered blocking state [ 70.372014][ T5784] bridge0: port 3(bond1) entered disabled state [ 70.374217][ T5784] bond1: entered allmulticast mode [ 70.375785][ T5784] bridge1: entered allmulticast mode [ 70.379265][ T5784] bond1: entered promiscuous mode [ 70.380731][ T5784] bridge1: entered promiscuous mode [ 70.382105][ T5775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 70.912243][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.914403][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.944108][ T5793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'. [ 71.026756][ T5800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 71.205399][ T5805] netlink: 3 bytes leftover after parsing attributes in process `syz.1.116'. [ 71.627155][ T5809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 71.628680][ T5808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.987497][ T5393] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 72.178090][ T5393] usb 6-1: Using ep0 maxpacket: 8 [ 72.183115][ T5393] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 72.187827][ T5393] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 72.190264][ T5393] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 72.194519][ T5393] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 72.199100][ T5393] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 72.202906][ T5393] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 72.206710][ T5393] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 72.237869][ T5393] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 72.240483][ T5393] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 72.242545][ T5393] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 72.245008][ T5393] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 72.267400][ T5393] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 72.271799][ T5393] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 72.275359][ T5393] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 72.305768][ T5393] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 72.316045][ T5393] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 72.318745][ T5393] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 72.321493][ T5393] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 72.324534][ T5393] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 72.327595][ T5393] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 72.330498][ T5393] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 72.344579][ T5393] usb 6-1: string descriptor 0 read error: -22 [ 72.346389][ T5393] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 72.351335][ T5393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.368413][ T5393] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 72.741575][ T5823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 72.844809][ T5825] block nbd3: shutting down sockets [ 73.322498][ T5837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.124'. [ 73.869480][ T5853] syzkaller0: entered promiscuous mode [ 73.959852][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 74.378971][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 74.678631][ T1950] usb 6-1: USB disconnect, device number 4 [ 75.402138][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 75.551526][ T5863] block nbd3: shutting down sockets [ 76.489122][ T5887] mac80211_hwsim hwsim5 ÿÿÿÿÿÿ: renamed from wlan1 (while UP) [ 76.561612][ T5871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 76.720408][ T5890] netlink: 3 bytes leftover after parsing attributes in process `syz.0.138'. [ 77.276314][ T5896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.345304][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 77.557756][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 77.617638][ T5394] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.807483][ T5394] usb 5-1: Using ep0 maxpacket: 8 [ 77.823659][ T5394] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 77.826780][ T5394] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 77.839707][ T5394] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 77.843846][ T5394] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 77.851406][ T5394] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 77.856335][ T5394] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 77.861265][ T5394] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 77.881308][ T5394] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 77.884587][ T5394] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 77.887251][ T5394] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 77.903004][ T5394] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 77.906106][ T5394] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 77.909998][ T5394] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 77.913387][ T5394] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 78.016997][ T39] kauditd_printk_skb: 52 callbacks suppressed [ 78.017009][ T39] audit: type=1326 audit(1726549526.631:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.2.141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 78.018138][ T5394] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 78.018761][ T39] audit: type=1326 audit(1726549526.631:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.2.141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 78.035981][ T39] audit: type=1326 audit(1726549526.651:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.2.141" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 78.038560][ T5394] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 78.044176][ T39] audit: type=1326 audit(1726549526.651:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.2.141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 78.052757][ T39] audit: type=1326 audit(1726549526.651:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.2.141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 78.060152][ T39] audit: type=1326 audit(1726549526.661:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.2.141" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 78.060550][ T5394] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 78.067998][ T39] audit: type=1326 audit(1726549526.671:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.2.141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 78.076861][ T5394] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 78.079339][ T39] audit: type=1326 audit(1726549526.671:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.2.141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 78.086547][ T5394] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 78.088942][ T39] audit: type=1326 audit(1726549526.671:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.2.141" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 78.091463][ T5394] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 78.099281][ T39] audit: type=1326 audit(1726549526.671:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.2.141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 78.119245][ T5394] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 78.141879][ T5394] usb 5-1: string descriptor 0 read error: -22 [ 78.143639][ T5394] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 78.145945][ T5394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.158474][ T5394] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 79.005972][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'. [ 79.015262][ T5923] fuse: Bad value for 'fd' [ 79.483505][ T5927] block nbd2: shutting down sockets [ 79.757825][ T981] usb 5-1: USB disconnect, device number 3 [ 79.897895][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 80.555365][ T5971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 81.150399][ T831] cfg80211: failed to load regulatory.db [ 81.419376][ T5975] netlink: 3 bytes leftover after parsing attributes in process `syz.2.157'. [ 81.487619][ T5977] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 81.754811][ T5981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.178613][ T981] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 82.367593][ T981] usb 7-1: Using ep0 maxpacket: 8 [ 82.413031][ T5999] netlink: 17 bytes leftover after parsing attributes in process `syz.3.165'. [ 82.416557][ T981] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 82.422442][ T981] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 82.427932][ T981] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 82.431728][ T981] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 82.437141][ T981] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 82.457560][ T981] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 82.460617][ T981] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 82.481239][ T981] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 82.483570][ T981] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 82.486034][ T981] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 82.495846][ T981] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 82.507936][ T981] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 82.511421][ T981] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 82.514424][ T981] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 82.518277][ T981] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 82.520554][ T981] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 82.522746][ T981] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 82.525128][ T981] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 82.537576][ T981] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 82.540463][ T981] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 82.543382][ T981] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 82.551018][ T981] usb 7-1: string descriptor 0 read error: -22 [ 82.552745][ T981] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 82.555070][ T981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.567528][ T981] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 83.114005][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 83.139661][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 83.507479][ T831] libceph: connect (1)[c::]:6789 error -101 [ 83.511385][ T831] libceph: mon0 (1)[c::]:6789 connect error [ 83.548284][ T4777] Bluetooth: hci0: command tx timeout [ 83.626673][ T6027] sit0: entered allmulticast mode [ 83.778921][ T831] libceph: connect (1)[c::]:6789 error -101 [ 83.780621][ T831] libceph: mon0 (1)[c::]:6789 connect error [ 84.297879][ T5393] libceph: connect (1)[c::]:6789 error -101 [ 84.300182][ T5393] libceph: mon0 (1)[c::]:6789 connect error [ 84.321744][ T6016] ceph: No mds server is up or the cluster is laggy [ 84.397750][ T1950] usb 7-1: USB disconnect, device number 4 [ 84.450062][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 84.513178][ T6044] syz.2.176 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 85.408666][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 85.408678][ T39] audit: type=1326 audit(1726549534.021:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.0.180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 85.424009][ T39] audit: type=1326 audit(1726549534.031:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.0.180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 85.441724][ T39] audit: type=1326 audit(1726549534.031:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.0.180" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 85.454476][ T39] audit: type=1326 audit(1726549534.031:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.0.180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 85.462604][ T39] audit: type=1326 audit(1726549534.041:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.0.180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 85.477492][ T39] audit: type=1326 audit(1726549534.041:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.0.180" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 85.487562][ T39] audit: type=1326 audit(1726549534.041:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.0.180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 85.497399][ T39] audit: type=1326 audit(1726549534.041:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.0.180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 85.508007][ T39] audit: type=1326 audit(1726549534.041:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.0.180" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 85.523373][ T39] audit: type=1326 audit(1726549534.041:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.0.180" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 85.765199][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'. [ 86.264549][ T6072] block nbd0: shutting down sockets [ 86.393314][ T6078] netlink: 'syz.3.183': attribute type 4 has an invalid length. [ 86.679194][ T6090] netlink: 3 bytes leftover after parsing attributes in process `syz.1.184'. [ 87.014403][ T6094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.457552][ T981] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 87.625825][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 87.647439][ T981] usb 6-1: Using ep0 maxpacket: 8 [ 87.651295][ T981] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 87.653601][ T981] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 87.655611][ T981] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 87.658727][ T981] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 87.662608][ T981] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 87.665569][ T981] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 87.702679][ T981] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 87.711320][ T981] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 87.713736][ T981] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 87.715769][ T981] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 87.718850][ T981] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 87.722486][ T981] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 87.725393][ T981] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 87.729802][ T981] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 87.737488][ T981] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 87.740893][ T981] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 87.743203][ T981] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 87.747514][ T981] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 87.752971][ T981] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 87.760757][ T981] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 87.764844][ T981] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 87.788548][ T981] usb 6-1: string descriptor 0 read error: -22 [ 87.791088][ T981] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 87.794411][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.818002][ T981] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 88.341267][ T6118] Zero length message leads to an empty skb [ 89.636177][ T6135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.054503][ T1950] usb 6-1: USB disconnect, device number 5 [ 90.133095][ T6142] can0: slcan on ttyprintk. [ 90.657430][ T1950] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 90.847557][ T1950] usb 6-1: Using ep0 maxpacket: 8 [ 90.853062][ T1950] usb 6-1: config 0 has no interfaces? [ 90.855073][ T1950] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 90.859784][ T1950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.867832][ T1950] usb 6-1: config 0 descriptor?? [ 90.963851][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 91.149115][ T5361] usb 6-1: USB disconnect, device number 6 [ 91.249127][ T6141] can0 (unregistered): slcan off ttyprintk. [ 92.003973][ T6182] overlayfs: failed to resolve './file1': -2 [ 92.437437][ T5361] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 92.627359][ T5361] usb 7-1: Using ep0 maxpacket: 16 [ 92.630262][ T5361] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.632766][ T5361] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 92.635866][ T5361] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 92.638294][ T5361] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.642011][ T5361] usb 7-1: config 0 descriptor?? [ 92.645067][ T5361] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 93.323992][ T6199] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 93.466094][ T6208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.209'. [ 93.730804][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 94.865491][ T6236] netlink: 'syz.1.217': attribute type 10 has an invalid length. [ 94.899488][ T6236] team0: Port device ÿÿÿÿÿÿ added [ 95.252654][ T39] kauditd_printk_skb: 51 callbacks suppressed [ 95.252671][ T39] audit: type=1326 audit(1726549543.871:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 95.287693][ T39] audit: type=1326 audit(1726549543.871:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 95.294934][ T39] audit: type=1326 audit(1726549543.901:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.220" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 95.312911][ T39] audit: type=1326 audit(1726549543.901:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 95.327574][ T39] audit: type=1326 audit(1726549543.901:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 95.337412][ T39] audit: type=1326 audit(1726549543.901:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.220" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 95.345029][ T981] usb 7-1: USB disconnect, device number 5 [ 95.355071][ T39] audit: type=1326 audit(1726549543.901:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 95.366965][ T39] audit: type=1326 audit(1726549543.901:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.220" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 95.377400][ T39] audit: type=1326 audit(1726549543.901:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 95.405733][ T39] audit: type=1326 audit(1726549543.901:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.0.220" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 96.250156][ T6256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.223'. [ 96.436883][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 97.037605][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 97.920237][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 98.390174][ T6282] syzkaller0: entered promiscuous mode [ 98.393094][ T6282] syzkaller0: entered allmulticast mode [ 99.638305][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 101.033026][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 101.046635][ T6298] bond_slave_0: entered promiscuous mode [ 101.049057][ T6298] bond_slave_1: entered promiscuous mode [ 101.056161][ T6298] macvtap1: entered promiscuous mode [ 101.058808][ T6298] bond0: entered promiscuous mode [ 101.061847][ T6298] macvtap1: entered allmulticast mode [ 101.063897][ T6298] bond0: entered allmulticast mode [ 101.065903][ T6298] bond_slave_0: entered allmulticast mode [ 101.068183][ T6298] bond_slave_1: entered allmulticast mode [ 101.074293][ T6298] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 101.079691][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 101.083286][ T6299] macvtap1: left promiscuous mode [ 101.085236][ T6299] bond0: left promiscuous mode [ 101.089195][ T6299] macvtap1: left allmulticast mode [ 101.090912][ T6299] bond0: left allmulticast mode [ 101.092709][ T6299] bond_slave_0: left allmulticast mode [ 101.094963][ T6299] bond_slave_1: left allmulticast mode [ 101.242244][ T6307] netlink: 3 bytes leftover after parsing attributes in process `syz.2.237'. [ 101.620854][ T6307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.997437][ T981] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 102.197427][ T981] usb 7-1: Using ep0 maxpacket: 8 [ 102.251323][ T981] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 102.253745][ T981] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 102.255817][ T981] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 102.267413][ T981] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 102.277920][ T981] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 102.290789][ T981] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 102.296604][ T981] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 102.312367][ T981] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 102.314578][ T981] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 102.316517][ T981] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 102.332012][ T981] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 102.334969][ T981] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 102.353686][ T981] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 102.356489][ T981] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 102.379809][ T981] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 102.386103][ T981] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 102.390788][ T981] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 102.393420][ T981] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 102.396429][ T981] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 102.409635][ T981] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 102.412434][ T981] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 102.456193][ T981] usb 7-1: string descriptor 0 read error: -22 [ 102.458002][ T981] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 102.460365][ T981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.506957][ T981] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 102.595520][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 103.440277][ T6330] netlink: 3 bytes leftover after parsing attributes in process `syz.1.243'. [ 103.517415][ T5361] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 103.719417][ T5361] usb 5-1: config 0 has no interfaces? [ 103.719827][ T6331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.721323][ T5361] usb 5-1: New USB device found, idVendor=1a7d, idProduct=30d4, bcdDevice= 0.00 [ 103.721342][ T5361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.722731][ T5361] usb 5-1: config 0 descriptor?? [ 103.940903][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 104.077714][ T5414] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 104.209253][ T1950] usb 7-1: USB disconnect, device number 6 [ 104.309559][ T5414] usb 6-1: Using ep0 maxpacket: 8 [ 104.327482][ T5414] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 104.330486][ T5414] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 104.333020][ T5414] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 104.335970][ T5414] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 104.340540][ T5414] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 104.343837][ T5414] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 104.346769][ T5414] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 104.371339][ T5414] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 104.373923][ T5414] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 104.376490][ T5414] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 104.382545][ T5414] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 104.386250][ T5414] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 104.390017][ T5414] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 104.393330][ T5414] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 104.400146][ T5414] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 104.403058][ T5414] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 104.405204][ T5414] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 104.408513][ T5414] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 104.413913][ T5414] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 104.417142][ T5414] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 104.422599][ T5414] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 104.438680][ T5414] usb 6-1: string descriptor 0 read error: -22 [ 104.441134][ T5414] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 104.441993][ T6344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.443628][ T5414] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.468688][ T6344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.470641][ T5414] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 105.427499][ T981] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 105.640041][ T981] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.646000][ T981] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 105.652297][ T981] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.659753][ T981] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.668992][ T6346] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 105.682076][ T981] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 105.783258][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 106.136811][ T63] usb 8-1: USB disconnect, device number 3 [ 106.276475][ T5389] usb 5-1: USB disconnect, device number 4 [ 106.447715][ T1950] usb 6-1: USB disconnect, device number 7 [ 106.511384][ T6353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.248'. [ 106.942844][ T6373] netlink: 3 bytes leftover after parsing attributes in process `syz.0.253'. [ 107.224125][ T6379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.421653][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.254'. [ 107.456386][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 107.757644][ T63] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 107.967433][ T63] usb 5-1: Using ep0 maxpacket: 8 [ 107.976696][ T63] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 107.979693][ T63] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 107.982318][ T63] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 107.985385][ T63] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 107.989625][ T63] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 107.994265][ T63] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 107.998212][ T63] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 108.019568][ T63] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 108.023088][ T63] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 108.025316][ T63] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 108.028327][ T63] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 108.031633][ T63] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 108.034546][ T63] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 108.037422][ T63] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 108.049396][ T63] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 108.051990][ T63] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 108.054076][ T63] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 108.056532][ T63] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 108.059616][ T63] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 108.062586][ T63] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 108.065475][ T63] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 108.094224][ T63] usb 5-1: string descriptor 0 read error: -22 [ 108.096590][ T63] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 108.099646][ T63] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.126891][ T63] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 109.115415][ T6391] netlink: 3 bytes leftover after parsing attributes in process `syz.2.257'. [ 109.374359][ T6392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.657450][ T5361] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 109.837477][ T5361] usb 7-1: Using ep0 maxpacket: 8 [ 109.841262][ T5361] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 109.844248][ T5361] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 109.846755][ T5361] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 109.854546][ T5361] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 109.858509][ T5361] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 109.862277][ T5361] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 109.865239][ T5361] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 109.875437][ T5361] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 109.878764][ T5361] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 109.881302][ T5361] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 109.884252][ T5361] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 109.888554][ T5361] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 109.892313][ T5361] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 109.895302][ T5414] usb 5-1: USB disconnect, device number 5 [ 109.895601][ T5361] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 109.927418][ T5361] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 109.930512][ T5361] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 109.938432][ T5361] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 109.940784][ T5361] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 109.954133][ T5361] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 109.959269][ T5361] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 109.962900][ T5361] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 110.025025][ T5361] usb 7-1: string descriptor 0 read error: -22 [ 110.027243][ T5361] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 110.037770][ T5361] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.046455][ T5361] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 110.271172][ T6396] block nbd0: shutting down sockets [ 111.139999][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 111.738006][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'. [ 111.907390][ T5361] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 112.065651][ T831] usb 7-1: USB disconnect, device number 7 [ 112.098041][ T5361] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 112.101183][ T5361] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.103574][ T5361] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.106922][ T5361] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.128861][ T5361] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.132059][ T5361] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.135829][ T5361] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.144279][ T5361] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.167421][ T5361] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.171068][ T5361] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.175663][ T5361] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.178754][ T5361] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.181960][ T5361] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.185857][ T5361] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.189006][ T5361] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.192516][ T5361] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.195903][ T5361] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.198616][ T6434] mac80211_hwsim hwsim3 ÿÿÿÿÿÿ: renamed from wlan1 (while UP) [ 112.201266][ T5361] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.205038][ T5361] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.217430][ T5361] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.220690][ T5361] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.224303][ T5361] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.227228][ T5361] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 112.231288][ T5361] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 112.234256][ T5361] usb 6-1: config 0 interface 0 has no altsetting 0 [ 112.238870][ T5361] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 112.242065][ T5361] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 112.244986][ T5361] usb 6-1: Product: syz [ 112.246461][ T5361] usb 6-1: Manufacturer: syz [ 112.248506][ T5361] usb 6-1: SerialNumber: syz [ 112.258668][ T5361] usb 6-1: config 0 descriptor?? [ 112.269823][ T5361] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 112.550928][ T6440] overlayfs: missing 'workdir' [ 112.650071][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.681317][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.714890][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.725428][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.742982][ C2] usb 6-1: yurex_control_callback - control failed: -71 [ 112.747738][ T5361] usb 6-1: USB disconnect, device number 8 [ 112.756218][ T5361] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 112.851252][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 114.047612][ T6459] block nbd1: shutting down sockets [ 114.338576][ T6457] syz.2.271 (6457): drop_caches: 2 [ 114.499052][ T6457] syz.2.271 (6457): drop_caches: 2 [ 115.565005][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'. [ 116.439992][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'. [ 116.769590][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 117.301647][ T5358] Bluetooth: hci4: sending frame failed (-49) [ 117.304583][ T4777] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 117.339417][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 117.811117][ T6521] block nbd0: shutting down sockets [ 119.759596][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 120.417641][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 120.867456][ T5361] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 121.057431][ T5361] usb 6-1: Using ep0 maxpacket: 8 [ 121.061454][ T5361] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 121.063501][ T5361] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.066579][ T5361] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.072255][ T5361] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.075483][ T5361] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.081213][ T5361] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 121.083857][ T5361] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.087071][ T5361] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.093458][ T5361] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.097035][ T5361] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.111807][ T5361] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 121.114403][ T5361] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.125359][ T5361] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.129000][ T5361] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.132466][ T5361] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.138487][ T5361] usb 6-1: string descriptor 0 read error: -22 [ 121.141362][ T5361] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 121.144403][ T5361] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.151486][ T5361] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 121.528131][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 121.543717][ T5361] usb 6-1: USB disconnect, device number 9 [ 122.458573][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 122.458585][ T39] audit: type=1326 audit(1726549571.081:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 122.492823][ T39] audit: type=1326 audit(1726549571.091:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 122.509407][ T39] audit: type=1326 audit(1726549571.091:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 122.527543][ T39] audit: type=1326 audit(1726549571.091:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 122.534877][ T39] audit: type=1326 audit(1726549571.091:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 122.567375][ T39] audit: type=1326 audit(1726549571.091:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 122.587442][ T39] audit: type=1326 audit(1726549571.101:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 122.597668][ T39] audit: type=1326 audit(1726549571.101:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 122.615418][ T39] audit: type=1326 audit(1726549571.101:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 122.640041][ T39] audit: type=1326 audit(1726549571.101:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6576 comm="syz.1.296" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 122.813457][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 123.110970][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 124.047515][ T6597] ======================================================= [ 124.047515][ T6597] WARNING: The mand mount option has been deprecated and [ 124.047515][ T6597] and is ignored by this kernel. Remove the mand [ 124.047515][ T6597] option from the mount to silence this warning. [ 124.047515][ T6597] ======================================================= [ 124.602354][ T6610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.302'. [ 124.618610][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 126.002435][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 126.097669][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 126.907949][ T6643] netlink: 3 bytes leftover after parsing attributes in process `syz.2.309'. [ 127.126771][ T6646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.130457][ T6645] process 'syz.1.311' launched './file0' with NULL argv: empty string added [ 127.470033][ T5393] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 127.518028][ T6652] lo speed is unknown, defaulting to 1000 [ 127.520275][ T6652] lo speed is unknown, defaulting to 1000 [ 127.539087][ T6652] lo speed is unknown, defaulting to 1000 [ 127.547144][ T6652] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 127.558709][ T6652] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 127.612130][ T6652] lo speed is unknown, defaulting to 1000 [ 127.614874][ T6652] lo speed is unknown, defaulting to 1000 [ 127.618064][ T6652] lo speed is unknown, defaulting to 1000 [ 127.624442][ T6652] lo speed is unknown, defaulting to 1000 [ 127.647446][ T5393] usb 7-1: Using ep0 maxpacket: 8 [ 127.650532][ T5393] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 127.652902][ T5393] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 127.654718][ T5393] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 127.657025][ T5393] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 127.670987][ T5393] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 127.673963][ T5393] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 127.676773][ T5393] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 127.686651][ T5393] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 127.689516][ T5393] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 127.691491][ T5393] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 127.693944][ T5393] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 127.698473][ T5393] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 127.701564][ T5393] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 127.704408][ T5393] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 127.712072][ T5393] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 127.714648][ T5393] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 127.716701][ T5393] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 127.721474][ T5393] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 127.724478][ T5393] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 127.731386][ T5393] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 127.734531][ T5393] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 127.750753][ T5393] usb 7-1: string descriptor 0 read error: -22 [ 127.753031][ T5393] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 127.756210][ T5393] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.773764][ T5393] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 128.037859][ T6664] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.049571][ T6664] dvmrp1: entered allmulticast mode [ 129.127570][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 129.399253][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 129.848089][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.319'. [ 130.015509][ T8] usb 7-1: USB disconnect, device number 8 [ 130.089437][ T6693] trusted_key: encrypted_key: insufficient parameters specified [ 130.103302][ T6693] trusted_key: encrypted_key: insufficient parameters specified [ 130.569048][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 131.166061][ T6713] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 131.211686][ T6714] iou-wrk-6713 (6714): drop_caches: 2 [ 131.973560][ T6726] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x386 pfn:0x2b74c [ 131.976048][ T6726] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 131.978639][ T6726] raw: 00fff00000000000 ffffea0000add348 ffffea0000ae53c8 0000000000000000 [ 131.987473][ T6726] raw: 0000000000000386 0000000000000000 00000000ffffffff 0000000000000000 [ 131.994976][ T6726] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 132.003832][ T6726] page_owner tracks the page as freed [ 132.005602][ T6726] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 6722, tgid 6720 (syz.3.326), ts 131963894582, free_ts 131967161263 [ 132.014805][ T6726] post_alloc_hook+0x2d1/0x350 [ 132.020197][ T6726] get_page_from_freelist+0x1351/0x2e50 [ 132.040490][ T6726] __alloc_pages_noprof+0x22b/0x2460 [ 132.042548][ T6726] alloc_pages_mpol_noprof+0x275/0x610 [ 132.044562][ T6726] folio_alloc_mpol_noprof+0x36/0xd0 [ 132.046409][ T6726] shmem_alloc_folio+0x135/0x160 [ 132.048619][ T6726] shmem_alloc_and_add_folio+0x19c/0xce0 [ 132.050681][ T6726] shmem_get_folio_gfp+0xa62/0x15e0 [ 132.052690][ T6726] shmem_write_begin+0x15a/0x2f0 [ 132.054950][ T6726] generic_perform_write+0x315/0x970 [ 132.061253][ T6726] shmem_file_write_iter+0x10e/0x140 [ 132.079561][ T6726] vfs_write+0x6b5/0x1140 [ 132.085358][ T6726] ksys_write+0x12f/0x260 [ 132.096576][ T6726] __do_fast_syscall_32+0x73/0x120 [ 132.101935][ T6726] do_fast_syscall_32+0x32/0x80 [ 132.109614][ T6726] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.115305][ T6726] page last free pid 112 tgid 112 stack trace: [ 132.124134][ T6726] free_unref_folios+0x9e9/0x1390 [ 132.129820][ T6726] shrink_folio_list+0x3584/0x41e0 [ 132.135353][ T6726] evict_folios+0x6e0/0x1b30 [ 132.142454][ T6726] try_to_shrink_lruvec+0x612/0x9b0 [ 132.147779][ T6726] shrink_one+0x3e3/0x7b0 [ 132.152178][ T6726] shrink_node+0x2452/0x39d0 [ 132.157233][ T6726] balance_pgdat+0xc19/0x18f0 [ 132.159090][ T6726] kswapd+0x5ea/0xbf0 [ 132.160389][ T6726] kthread+0x2c1/0x3a0 [ 132.161568][ T6726] ret_from_fork+0x45/0x80 [ 132.162881][ T6726] ret_from_fork_asm+0x1a/0x30 [ 132.166023][ T6726] ------------[ cut here ]------------ [ 132.167679][ T6726] kernel BUG at include/linux/mm.h:1460! [ 132.169629][ T6726] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 132.173779][ T6726] CPU: 1 UID: 0 PID: 6726 Comm: syz.2.328 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 132.177168][ T6726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 132.180632][ T6726] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 132.182899][ T6726] Code: b0 8b 48 89 df e8 32 4b 4e fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 f2 db 09 fd 48 c7 c6 20 44 b0 8b 4c 89 e7 e8 13 4b 4e fd 90 <0f> 0b e8 db db 09 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 132.189007][ T6726] RSP: 0018:ffffc9002201eba0 EFLAGS: 00010246 [ 132.191141][ T6726] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90003d29000 [ 132.193990][ T6726] RDX: 0000000000040000 RSI: ffffffff848148dd RDI: ffff888021668444 [ 132.196835][ T6726] RBP: ffffea0000add334 R08: 0000000000000001 R09: fffffbfff2d27910 [ 132.199526][ T6726] R10: ffffffff9693c887 R11: ffff88802b728a40 R12: ffffea0000add300 [ 132.202167][ T6726] R13: ffff88802216f800 R14: 0000000000001000 R15: 0000000000001000 [ 132.204830][ T6726] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f56d6b40 [ 132.207921][ T6726] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 132.210200][ T6726] CR2: 000000002003c000 CR3: 0000000027be4000 CR4: 0000000000350ef0 [ 132.212939][ T6726] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 132.215119][ T6726] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 132.217384][ T6726] Call Trace: [ 132.218832][ T6726] [ 132.220039][ T6726] ? show_regs+0x8c/0xa0 [ 132.221762][ T6726] ? die+0x36/0xa0 [ 132.223016][ T6726] ? do_trap+0x232/0x430 [ 132.224200][ T6726] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 132.225875][ T6726] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 132.227524][ T6726] ? do_error_trap+0xf4/0x230 [ 132.229034][ T6726] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 132.231166][ T6726] ? handle_invalid_op+0x34/0x40 [ 132.232878][ T6726] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 132.235010][ T6726] ? exc_invalid_op+0x2e/0x50 [ 132.236648][ T6726] ? asm_exc_invalid_op+0x1a/0x20 [ 132.238187][ T6726] ? __iov_iter_get_pages_alloc+0x1d1d/0x2240 [ 132.239880][ T6726] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 132.241729][ T6726] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 132.243687][ T6726] ? delete_node+0x207/0x8e0 [ 132.245161][ T6726] iov_iter_get_pages_alloc2+0x53/0xf0 [ 132.246883][ T6726] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 132.248908][ T6726] ? p9pdu_vwritef+0x368/0x21d0 [ 132.250322][ T6726] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 132.252776][ T6726] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 132.254517][ T6726] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 132.256237][ T6726] ? p9_tag_alloc+0x4cc/0x870 [ 132.257842][ T6726] ? __pfx_lock_release+0x4/0x10 [ 132.259574][ T6726] p9_virtio_zc_request+0x991/0x1460 [ 132.261354][ T6726] ? p9pdu_writef+0xc4/0x100 [ 132.262933][ T6726] ? __pfx_p9pdu_writef+0x10/0x10 [ 132.264678][ T6726] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 132.266439][ T6726] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 132.268417][ T6726] ? rcu_is_watching+0x12/0xc0 [ 132.270098][ T6726] ? trace_9p_protocol_dump+0x192/0x220 [ 132.272030][ T6726] ? rcu_is_watching+0x12/0xc0 [ 132.273688][ T6726] ? p9_client_prepare_req+0x111/0x4d0 [ 132.275583][ T6726] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 132.277601][ T6726] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 132.279670][ T6726] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 132.281907][ T6726] ? find_held_lock+0x2d/0x110 [ 132.283597][ T6726] ? netfs_load_buffer_from_ra.isra.0+0x737/0x12f0 [ 132.285849][ T6726] ? __pfx_lock_release+0x10/0x10 [ 132.287530][ T6726] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 132.289068][ T6726] p9_client_read_once+0x443/0x820 [ 132.290721][ T6726] ? __pfx_p9_client_read_once+0x10/0x10 [ 132.292689][ T6726] p9_client_read+0x13f/0x1b0 [ 132.294340][ T6726] v9fs_issue_read+0x115/0x310 [ 132.296015][ T6726] ? __pfx_v9fs_issue_read+0x10/0x10 [ 132.297830][ T6726] netfs_read_to_pagecache+0x5c9/0x9a0 [ 132.299727][ T6726] netfs_readahead+0x7fa/0xaa0 [ 132.301400][ T6726] ? __pfx_netfs_readahead+0x10/0x10 [ 132.303272][ T6726] read_pages+0x1a8/0xd80 [ 132.304781][ T6726] ? __pfx_workingset_refault+0x10/0x10 [ 132.306736][ T6726] ? const_folio_flags+0x71/0x1f0 [ 132.308495][ T6726] ? __pfx_read_pages+0x10/0x10 [ 132.310205][ T6726] page_cache_ra_unbounded+0x2d8/0x5a0 [ 132.312107][ T6726] page_cache_ra_order+0x6b5/0xb80 [ 132.313727][ T6726] page_cache_sync_ra+0x4b4/0x9c0 [ 132.315292][ T6726] filemap_get_pages+0xbfb/0x1830 [ 132.317035][ T6726] ? __pfx_filemap_get_pages+0x10/0x10 [ 132.318699][ T6726] ? __pfx___might_resched+0x10/0x10 [ 132.320354][ T6726] ? mlock_drain_local+0x24c/0x4f0 [ 132.322072][ T6726] filemap_splice_read+0x5cc/0xd00 [ 132.323882][ T6726] ? __pfx_filemap_splice_read+0x10/0x10 [ 132.325757][ T6726] ? __pfx_register_lock_class+0x10/0x10 [ 132.327454][ T6726] ? lockdep_init_map_type+0x16d/0x7d0 [ 132.329176][ T6726] v9fs_file_splice_read+0x95/0xe0 [ 132.330736][ T6726] ? __pfx_v9fs_file_splice_read+0x10/0x10 [ 132.332472][ T6726] do_splice_read+0x282/0x370 [ 132.333950][ T6726] splice_direct_to_actor+0x2a4/0xa40 [ 132.335494][ T6726] ? __pfx_direct_splice_actor+0x10/0x10 [ 132.337111][ T6726] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 132.338735][ T6726] ? __fget_files+0x23a/0x3f0 [ 132.340134][ T6726] ? __pfx_lock_release+0x10/0x10 [ 132.341494][ T6726] do_splice_direct+0x178/0x250 [ 132.342910][ T6726] ? __pfx_do_splice_direct+0x10/0x10 [ 132.344760][ T6726] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 132.346813][ T6726] do_sendfile+0xb0a/0xe40 [ 132.348415][ T6726] ? __pfx_do_sendfile+0x10/0x10 [ 132.350142][ T6726] ? __ia32_sys_futex_time32+0x1da/0x460 [ 132.352103][ T6726] ? __ia32_sys_futex_time32+0x2fd/0x460 [ 132.354037][ T6726] __ia32_compat_sys_sendfile+0x1e7/0x230 [ 132.356023][ T6726] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 132.358188][ T6726] __do_fast_syscall_32+0x73/0x120 [ 132.360008][ T6726] do_fast_syscall_32+0x32/0x80 [ 132.361707][ T6726] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 132.363918][ T6726] RIP: 0023:0xf7f57579 [ 132.365292][ T6726] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 132.371910][ T6726] RSP: 002b:00000000f56d656c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 132.374922][ T6726] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000006 [ 132.377632][ T6726] RDX: 0000000000000000 RSI: 000000007ffff000 RDI: 0000000000000000 [ 132.380366][ T6726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 132.383065][ T6726] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 132.385710][ T6726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 132.388191][ T6726] [ 132.389263][ T6726] Modules linked in: [ 132.396446][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.397828][ T6726] ---[ end trace 0000000000000000 ]--- [ 132.400131][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.400298][ T6726] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 132.404417][ T6726] Code: b0 8b 48 89 df e8 32 4b 4e fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 f2 db 09 fd 48 c7 c6 20 44 b0 8b 4c 89 e7 e8 13 4b 4e fd 90 <0f> 0b e8 db db 09 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 132.410015][ T6726] RSP: 0018:ffffc9002201eba0 EFLAGS: 00010246 [ 132.411935][ T6726] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc90003d29000 [ 132.415214][ T6726] RDX: 0000000000040000 RSI: ffffffff848148dd RDI: ffff888021668444 [ 132.418084][ T6726] RBP: ffffea0000add334 R08: 0000000000000001 R09: fffffbfff2d27910 [ 132.420763][ T6726] R10: ffffffff9693c887 R11: ffff88802b728a40 R12: ffffea0000add300 [ 132.423680][ T6726] R13: ffff88802216f800 R14: 0000000000001000 R15: 0000000000001000 [ 132.426684][ T6726] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f56d6b40 [ 132.430942][ T6726] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 132.434260][ T6726] CR2: 000055d1f36128c8 CR3: 0000000027be4000 CR4: 0000000000350ef0 [ 132.436707][ T6726] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 132.439977][ T6726] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 132.443119][ T6726] Kernel panic - not syncing: Fatal exception [ 132.445595][ T6726] Kernel Offset: disabled [ 132.446999][ T6726] Rebooting in 86400 seconds.. VM DIAGNOSIS: 05:06:20 Registers: info registers vcpu 0 CPU#0 RAX=0000607f81071570 RBX=0000000000000098 RCX=dffffc0000000000 RDX=0000000000000001 RSI=1ffff1100c38da01 RDI=ffff888061c6d008 RBP=ffff888062188000 RSP=ffffc90020def768 R8 =0000000000000000 R9 =fffffbfff2036673 R10=ffffffff901b339f R11=dffffc0000000000 R12=0000000000000001 R13=ffff888061c6d048 R14=0000000000000013 R15=0000000000000010 RIP=ffffffff81f0cb49 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020800000 CR3=0000000064d40000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000052 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fcd3b5 RDI=ffffffff9a5e9460 RBP=ffffffff9a5e9420 RSP=ffffc9002201e580 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=0000000000000052 R14=ffffffff84fcd350 R15=0000000000000000 RIP=ffffffff84fcd3df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002003c000 CR3=0000000027be4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000b56bc RBX=0000000000000002 RCX=ffffffff8b094f29 RDX=ffffed1005706fda RSI=ffffffff8bb09d00 RDI=ffffffff816353dc RBP=ffffed10037e8000 RSP=ffffc90000487e08 R8 =0000000000000000 R9 =ffffed1005706fd9 R10=ffff88802b837ecb R11=0000000000000001 R12=0000000000000002 R13=ffff88801bf40000 R14=ffffffff901b3398 R15=0000000000000000 RIP=ffffffff8b09630f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002000f000 CR3=0000000062352000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000001 Opmask01=0000000010000002 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffea4129b10 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5b3e343c00306133 78302f3163327830 2b6461657268746b 20205d3632373600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5134343600306133 7230253163327230 2164616572627461 2020573632373600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30206f2020333933 3554205b5d202c34 3339302037323120 205b3e2000003234 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020332020333920 3527205b20202632 3334302000000000 2031202000002623 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 333b393b2a797e55 6f6f786c2a263832 3f3e3332393c333b 393b2a797e2a2623 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a2a657e2a6d6463 6d646b62692a264c 39723a2a79796f78 6e6e6b2a0a0a383e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff81655880 RBX=dffffc0000000000 RCX=0000000000000003 RDX=1ffffffff1aff373 RSI=1ffff11005707ebb RDI=ffffffff8d7e99f0 RBP=ffffc90000e97168 RSP=ffffc90000e96fd8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=ffff88802b928a40 R12=0000000000000003 R13=ffffffff8d7e99a0 R14=ffff88802b93eb80 R15=ffff88802b93eb80 RIP=ffffffff8b0a68e4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020dff000 CR3=0000000027be4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000