last executing test programs: 42.194076141s ago: executing program 3 (id=95): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x1f, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 42.017809711s ago: executing program 3 (id=97): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f040, 0x4}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000400)='romfs\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) 39.862268814s ago: executing program 3 (id=109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f040, 0x4}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000400)='romfs\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) 31.705745767s ago: executing program 3 (id=109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f040, 0x4}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000400)='romfs\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) 22.491605039s ago: executing program 3 (id=109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f040, 0x4}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000400)='romfs\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) 13.682213884s ago: executing program 0 (id=208): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000100)) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0xfd}}, 0x1c) (async) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r3, 0x1) (async) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x1}}, &(0x7f0000000200)=0xb0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) (async) r4 = socket$kcm(0x10, 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, 0x0) (async) connect$nfc_raw(r0, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x3}, 0x10) (async) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7f}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000480)="8705c4da87c5f9943c5360db29e57c6592f971226c666ccca13e4333b155b0b3c4659c247e7fc056bd132cd1", 0x2c}, {&(0x7f00000004c0)="c69c50e9c72fb9e31ce2a5ac6517e53cb1dc6d5b5d6541", 0x17}, {&(0x7f0000000540)="a498a88888a1155933a0ad1fca890eba016281db743a6a50a8307c80c8113a5deedc5c4842c7ed7ba0e3c68439eb514d247e063e5a7d325136e4461db63b8f03125f04973eab64d4d122c43fed4b1c338eeaeacdf13f8884c33b27c74613ac81147e473152364fba4e993bbe95f16f2c3736b0d42cddd418dbfaeb37cfd19c6d15647adf488568dae691131eb7bed59e62915dfda964ef03b26862f35a4fcda78df25ede9d1a8d770ae2c8d3", 0xac}], 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="10000000290000000800000000200000b400000029000000390000008414030c00000000ff020000000000000000000000000001fe8000000000000000000000000000aafc020000000000000000000000000000fc020000000000010000000000000001fe8000000000000000000000000000bbfe8000000000000000000000000000bbff010000000000000000000000000001fe8800000000000000000000000000012001000000002f7500000000000000000002fc01000000000000000000000000000110000000290000003e00000001010000200000002900000032001000fe8000"/240, @ANYRES32=0x0, @ANYBLOB="b400000029000000390000003b1401a500000000fc020000000000000000000000000000ff020000000000000000000000000001fe88000000000000000000000000010100000000000000000000000000000001ff0200000000000000000000000000012001000000000000000000000000000000000000000000000000000000000000fc0000000000000000000000000000000000000000000000000000000000000100"/180], 0xffffffffffffff00}}, {{&(0x7f0000000380)={0xa, 0x4e22, 0x3268, @remote, 0x2}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000880)="f52680db7ccfaaaccfb63d6ad0c06aa0da85e11c548e7f560cbb9795bc2380270c1f6e7b18c6dc2cecf79305", 0x2c}], 0x1}}, {{&(0x7f0000000900)={0xa, 0x4e20, 0xfffffffe, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffe}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000940)="0c3614f04ece2a57820cd6b7654be40a376bb3bf2c38f5d089b7ad3726fc7744c43d6b73aad2c04975e4e46cc653c5f4de34b4c3df8f7b48575648a928fb6c086a41628d9365942f3c0dca12d2f135cb1a546a053579f1c4a9fe42e94bbfde2f15a924448c16dafd1fb8a2048ac8774f892a4bfd6b92be81f1c8f85a047e8b706646b0576479e9497238aa264d74cb23d02c7865c2d8ad204b6cdceeda1cad52c4a74f2b66", 0xa5}, {&(0x7f0000000a00)="3322f089214e76212ea36b72ee13c37fd10f25028d9294f3e3a121bf4253e49721", 0x21}, {&(0x7f0000000a80)="9b74397eb81d43887a400d85d525e8c4ac648e4d9e52d7ac7d1f52b0873291f0c1a5377925110edc859efbf4f0213a3144946972115144d24aefb3a528193f9524a5db34c7f0d3d59e2d10171d72d7caa4f1e082553e978cb368200e13f4d4d5724aea008f57da", 0x67}, {&(0x7f0000000b00)="f5e436a6695ad96579ea7e78b36d3bf432ab5e61741a4fb0bce2aa21a9b9627c572db62c182cb83caa55688a73918a66d568dfd24cc6c92e16450891731a4dcc264cfda305e828629888118769918cec6f0fd4dc72e78dccc47d9710f99ff6c329a6f47907abc025dc078feb7fb1b0afce6400421c58e6323e53513e6befa8aa3a9b9bebbed0be1d1428163b8a6c80fcf5c8f2f13e1972690deffbad91e5962b31682fcb95f14f5fc8fbc02bb03ef612f344aa066f3bf0a28b0e291a2182594dd68f1b57f3fb909b2a1896799f8e3292599389ac45bb5950b4d7ee2a1820ff37e747aaa5e6c28e19d935", 0xea}, {&(0x7f0000000c00)="cecf778122819aedea22a2d5e4c0c7fe21ecf5c31b6952e14d2e1857201580a6a99e666c02baed0bb53ee39ce59e3da5eb620b7ee959958771929375fa4e1dcb7b7aabf23b1223f36cf1ac1ade0a2c69020dd2be2cb088fb4833d19857a89525d9ae7c0834161075f71ef37cedf317bce28250966e51be2731c5bde16ea1db9c1079f3e2e249f904d02210af07538c56126f31a1975d5a469ae357988403a8a3e5d9f1", 0xa3}, {&(0x7f0000000cc0)="c238329ce2ed41a07bfd621aa04762a4e1cb5ac6c42eb53e271302f7d95f5459b8ece368708e6b66331ac40175e40369ac9402cfe4852c30e85d7567f06fdaf0052ff1c0ad", 0x45}], 0x6, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x130}}, {{&(0x7f0000001440)={0xa, 0x4e23, 0x4, @private0, 0xfffffff7}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000001000)="4586047b340e38d66b9bd8051fa28c0ac6aed5ee0ed4d6be3cba039548ba8b20097c97df6a891cbc56a9719e491ce06fddfe8c5ce1ffc359be04bea6310321a75db7a64f3cd9c0198e581bccc918cdc1a241f6d33e1d7e28f7d1b28ebda12ee40969b178a1fe7f44d84e031028c25d5b4de85ab9c6f0a404658ef0c2e12aad44aa9bd3103a33b6f0371bc3a5122d49492401d28d86ea3ee8a8552ca79a30a61c2ce636a832f97d7d380b92e604569e558a57376a0a577ceea85bc610ab7f0c33bd02ce176926ab7044fbc82bb337714a0965f255e0615146363c51726dba34542a8b42c9", 0xe4}, {&(0x7f0000001100)="5d1585ed90dae5f802da65488f1608f9e3a1634840fea903c94dd23186bcb74ccc", 0x21}, {&(0x7f0000001140)="54fc1568373f8c21e8d2cd933c7f0e80b1f63c14d2cdffe171d0fb16773a391d1e35901c3002d5d75ea4983f5ae369ac6878a8703928cae2f4cd706b2a8cd8c9c01c15068b54f1b97634c106f001eccd83bd38f2bec6d133b780e71eaebf0b1d7651ebb96c6377692ca562a797d0e06dee8868d5c7f65a6a92815e83f78516ad009fde81f4af093522c12aa7ec88aa9705e3b878984466a4c5f31867700c05807341f58dca114b37805088a8b36048fc6dfdb5fda0edb5034ed8d29467109bc5709b6e8fba1daa9a2ce99997c812fd193358930891d067d38573b38a01c940701416cff90fd494da9f61330c87049a7ec545d6dac7c8b3dc", 0xf8}, {&(0x7f0000001240)="94892d3662d5101f43122b728f3d5322cfde92c98e72999696d2e1609beae3706ea9b342ff32b134572a1d786176a63afade8247c36da8e5ac5a47cb2efee9e55e0593a9747389f8fc3e9a8c76eb39468fc21071a33d91f6fa4c11596dee846c97728bd9f1ed254943b96d9cc0428c57a55a69c3a16531dd0cc3e8fb56d4b6c11efe40417fb70b68d8b2c683b74c9144b741fc44bdde03c186deac555971fc82433544a477601db1791ada3b39e3e271405e42bf933e14", 0xb7}, {&(0x7f0000001300)="33c3c4d87fcfcc8002645924305b114a89486ec93f7cd7f9f5015ea79a48b23a56f1bbd55f9f89cee4d5a22b60a2dd2c92a2f4596fb19b3356f5e70b45bdeb26f50b3d0c99deb044939681821be32b641e001de7828da53de4f4460d551d520015f98af964ff9314da5bf441a90ae19f38d4b57c4c34b6a5e504b46cece58881b65f42b687c89810646fd79d53a0e787c08f5b4507e3c8", 0x97}], 0x5, &(0x7f0000001400)=ANY=[@ANYBLOB="10000000290000003e00000000000000100000002900000034000000030000001c0000002f0000003600000032000000000000000001000000000000"], 0x3c}}, {{&(0x7f00000003c0)={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1ff}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000400)="710ad8d1945ea01e8c1e32ba1d95de31c259105befe784eb259366ad1d303e571e78868ac91f2543be483b7e7f7ad17aa0f9285760f42439c062b49da0441d5e37a5f9df6948c214d346a9cb6798ceadc61ab52fdd2b3ca3a4f3cb9482", 0x5d}], 0x1}}, {{&(0x7f0000000a40)={0xa, 0x4e24, 0x10001, @empty, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000d40)="8ed9dbf2f93d6904b08457110d96fbb274359072e4ab5902943f7efeef5b84fe7279e8e1b802414bee24a3d92eaf3292a2583db7cd9847b0f70e95dd8963640179e4c96d13bb7843b56d78672c10c878a6a93dc136166b79152b1f3afff6e53fff18ca33dd9015786e4ad1ff2570d6865fa62c2034f48658321383a2d93ee3b2d211d127e8609da8958d23aa2b8359aa9c9d20a1532a43", 0x97}, {&(0x7f0000001500)="9d57cbaff33364773710f8d2d2feaac005b433c03e888d2d8f5cf0eb4230e020145e12d6ba60611b0201b68932a5ade20b644891be50f4f535692862b0de1d63907066493512bf84c1fd44f71026dc1a499dfcf14ccd901e4582586888e05eb2f76f4062f32273f41e1fe885f2be92d7214d495cc23cdaaade8ba54fb32cf30f00089d4c25d63b0628be159543a0d9ace8c10c05b3a36fb3355255beab0b062951ba5b48a217900212a51e", 0xab}], 0x2, &(0x7f00000066c0)=ANY=[@ANYBLOB="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"], 0x12c8}}, {{&(0x7f0000001600)={0xa, 0x4e22, 0x200, @remote, 0x1}, 0x1c, &(0x7f0000002bc0)=[{&(0x7f0000001640)="4213e3922af4357aab9b9b97c6e93f2babf7f78b7869ac14c3199c83906ada4e8edf5f51546e3e86f9941d50563744ce5bd69152ccd856537bfef029a78f3e45db21f22b51f4ffdb423dca264f1b366137d57ba8c1bbdc340be0c7c84b738a13aa0d6d8f446a912fbbc2759c66a64c64fa590635449608546c64", 0x7a}, {&(0x7f00000016c0)="07ac86d4bab7eff8ef1184d653457aa157db75ba693737093122e817e0333e3c75c1af870067e97b179583213c5df17498f16326ece6ea381572821c24f0774b23a804875826d37948cbb2206c80076dc18cc25b5d56098a14feb0aaa66e0436a8185f777787bc332a19a6f23bbe539858214d054849c14f3a7ca97baf5b68d0734ba1e6bb3b000e8ea20f105c5433ab19dc817cd65362911950ba781d1583787eeb81769a1b9b65a719dea66672da3b5d0321fe86eef42fddd2a3877379e7be69f2bd12104309b9f9e91fcb21a72debdda6aabef14d126550eae51b425695592dab4cd9a61f4ca8e62bb3ba6a87", 0xee}, {&(0x7f00000017c0)="68106cdc21f1311ea974e18ed346c34e07ea0c90e62ae06f1962ff090268c54232efb496655446c39e05b83acb7c8a9a29ae7464293cec3df16071a50ec39b2c6104df67207c478eee4fe483575ff32a222408d4cef24f80a730d3111a25e1748559e3a5bcb643df9200c4dff04204b2b99ce93878a0a787054b7d3ac5b486", 0x7f}, {&(0x7f0000001840)="40d52a7f2c738d0cc86530dc7381de130b98206a0f98963ee555593af375c2ffced9ca3b09abdbc7e64b627df2c0af202256833b249d1e035de8d14ad6cd3d978c7cc46d55c0efbcf63668847f59cc18ecf7c9158a29c1f3251350f2f6f54bfd74bc0cc414cd57d13e6f5adc5f1357e8bda28477069bcb9680b6da1c7e99585744d13298b654fbefcd57ee175ec3cdf7f0cb2e756070a4a209ffdf2a7d081d62", 0xa0}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="a31bcd1940f51d6807cf62e906bca0d1d01e02fda461f6f85cd6331247ada44eb8a88e2e4779e74e422fa33113209d1a7078656cbe717454d80bab42f781ac3a0a493ff8f004922cb84c4fcdafde8755c6b9e4558e29fdff880513b3a880630df6a00f9819ec1b3dabaee7e5", 0x6c}, {&(0x7f0000002980)="feb21f0f118f0f5cf3ba75899044ae0b4825f40293a7ed2df2aac4f3b5579bcb1975dd032b933a75553be34fb866b15f29dca11d54b17d85d5b21d79814687f9ba7ab4521c17842a4663635f9d1fad2d4723585a5c0c6e66054d0423a7f7b254a56c76a7258e808df63d021adae25dff63c13ce98677a21eae58cfdd63c4619d30bf60150a869e632968f599a3b0ea3fbc3db377639aa10eba9cad768ed063499d10d4e55ec219e412cfa70e9baf7831f02e972a9fc9e6300296526560c66de478469a88b42053b149eab1837e9fa388", 0xd0}, {&(0x7f0000002a80)="2a87669957883212a32ebe786cf2d489c37307d8c3a624a4ae860d6e70ffc53efa66888634f8d5ab539c56b8c3b88943726a4be609f5cdbf3f52817b71acc89ef1a1bc03ce036610005a39ac78f9b85679acb7b8b76de55fb5bdb0220ad2133ecf5021af450bd97c5de08dd9c4d52f4a709905a8445cc33221a302ebe7dd62f12f32e3c47d27c8ab417bcabc1823a8322bb75bdf80843c6261f8e446209b8c6886921b6f74383c061da9e98764e593ec89b899066ac0c2", 0xb7}, {&(0x7f0000002b40)="6a39362480da527e4f2256dfcdd371ce0b78b165dd043f15fc9f6f0656df6a8426efe0f851bf451ff1b22b9165104d93f6381ee41af6c2c83396052c3dad1f85e8d4cd13e9c327aba8425e4c804170c3e1e32a0bfb1ed4d95a0ab3640bcf203e5b4fe50f0ea2a203682540cb75878eb443ad3f401ec73b9ec87f7f90cf08be", 0x7f}], 0x9, &(0x7f0000002c40)=ANY=[@ANYBLOB="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"], 0x13f8}}], 0x8, 0x4000005) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, &(0x7f00000009c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 13.56000525s ago: executing program 0 (id=209): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x83, &(0x7f0000000640)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x84) 13.50016336s ago: executing program 0 (id=211): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000050000140600fc"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x22, 0xa, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r7, 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000001d000000181100cae6a102c3a4d083db3ac0ddf5ee157178718b2022884611ba0cc839972d84607a1e2c72c9faf357e34952140dcfb18911b0e565a13621e5834387396006f9aef0f6cce24fab8623dac1de6bdc7d5f60", @ANYRES32=r0, @ANYRES8=r5, @ANYRES64, @ANYBLOB="72a55bd8f0de234712a8bf65475d8b692f6b555fb55b2325a6b2ab7fbcb5811283fe62976a7b3fa05d0f2ecbe04c8484c77da902eaa8d870054d29fa4e89a9bbc58d5e55dc14eb00612117c1930d2c225c59c58d0db50acdfe46b882c22f644b81385481bd9fa9cf05ff27078ec76a1166627f50607975f34166b972c6b288cbe446f8f84a47543f1fa1ae8be3a178381c408bdf37", @ANYRES8=r3, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRES64=r1, @ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) truncate(&(0x7f0000000000)='./file1\x00', 0x0) close(r7) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000000e40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffff", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000001000000000000000000000b400", @ANYRES32=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB="0a000100aaaaaaaaaa430000"], 0x64}}, 0x4000800) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x40000000, 0x0) 13.430694739s ago: executing program 0 (id=212): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0xa201, 0x0) sendto$inet6(r3, &(0x7f00000004c0)="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", 0x1000, 0x20000881, &(0x7f0000000240)={0xa, 0x4e21, 0x4, @local, 0xf}, 0x1c) r4 = getpid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000440), 0x3fffffffffffe21, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r5], 0xc63b9e35) sched_setscheduler(0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40184810, 0x0) 13.17048552s ago: executing program 0 (id=214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0xa201, 0x0) sendto$inet6(r3, &(0x7f00000004c0)="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", 0x1000, 0x20000881, &(0x7f0000000240)={0xa, 0x4e21, 0x4, @local, 0xf}, 0x1c) r4 = getpid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000440), 0x3fffffffffffe21, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r5], 0xc63b9e35) sched_setscheduler(0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40184810, 0x0) 11.944709153s ago: executing program 3 (id=109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f040, 0x4}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000400)='romfs\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) 5.689717986s ago: executing program 2 (id=232): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0) r3 = socket$inet(0x2, 0x80000, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="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"/298], 0x130}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r12, @ANYBLOB="18003080140003"], 0x34}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf251c0000000c000600030000000300000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0c00061403000000000000000c000600000000000000000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20004012}, 0x4048855) r13 = socket$netlink(0x10, 0x3, 0x0) writev(r13, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r14 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r14, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r14, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @local}, 0x1c) sendto$inet6(r14, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r14, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) writev(r13, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1}, 0xc) 4.860585284s ago: executing program 2 (id=233): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0xa201, 0x0) sendto$inet6(r3, &(0x7f00000004c0)="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", 0x1000, 0x20000881, &(0x7f0000000240)={0xa, 0x4e21, 0x4, @local, 0xf}, 0x1c) r4 = getpid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000440), 0x3fffffffffffe21, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r5], 0xc63b9e35) sched_setscheduler(0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40184810, 0x0) 3.607778854s ago: executing program 2 (id=235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f040, 0x4}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000400)='romfs\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) 2.682977357s ago: executing program 2 (id=239): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) semctl$GETPID(0x0, 0x0, 0x10, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x1}) sendmsg$ETHTOOL_MSG_RINGS_GET(r4, 0x0, 0x48c84) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000300)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) 2.249581269s ago: executing program 1 (id=241): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x24b9, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x353, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x40406300, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0}) (fail_nth: 5) 2.066696877s ago: executing program 1 (id=242): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket(0xa, 0x3, 0x4) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002280)=""/4103, 0x1007}, {&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f0000000140)=""/70, 0x2b}], 0x3}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f0000001840)=ANY=[@ANYBLOB="70b924222dca18f13f3a25ad0da86229dedb9ee690dc5355fa9bb4ebc4a4ff703267613f94446b1b6004b5e1a6c3a1a59b8ecbf6e8dd06aba601265532426546b694fa2f803e15ee63c7f2f27f8a0088ed69cc60f7ad8a3c1984f576f6d9c55a4d02012c7cf8b179f5f3c254215a6aff06397b0daf382a2269be0dac783a7aa17ffbba4adb6d0ff27be4308cc7b9277cc9166b5598294efab10ad30a6120b4bd57199c7d58637ae83ff54c59fec88b685a60", @ANYRES16, @ANYRES16=0x0, @ANYRES64=0x0, @ANYRESDEC, @ANYRES16], 0x5) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES8], 0x17) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0x0, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2000000000000271, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x0, 0x80000000, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff01}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYRES64=r2, @ANYRES64=r4, @ANYBLOB="b8f4bae2595e9538f3211d682b0b35ffbf8263c64972bd9d1c4b15bb86b5f0b2b88a17eb0a7106091916225f4075ffb6b79ab17563b1c7f1302f546f109b8c821a2dfdb47f61b792bfea47facbd942f928da478be8ed219734ea2d3abe34bf", @ANYBLOB="a04c472db21c4c7d1097e1c5657c46cd05698ba91965cd4bfaffc36d2c23189e9f22a59c7c258bf25782bc5394ef5ce8c4", @ANYRESOCT=r1, @ANYBLOB="d82636fad9394813b62a5771fd1571722b1381e3a241123ff67970d9130ee9c4cef405b5963ffa81e4ebe9313ac36156c76771880eeecee5cde7ccbd87b737d7349d75ac5756c1dda6f15e409b635c0d2d1330b11cf6ea6a3128864b86c9365389f95de34c202ddbfd60fbb6710ce06c4de850597bf1f4287ea5d85167e57df2a133b120eafcf8e683107e21fd335dda14c3fc4264e35057faed1e2bf2b269fa81d3ac4fe4c8e4af9b2054e4f9883e3395e92c5deeb719075e5e2613791024a807b19fd9b6520b9cb221c7bbd3a79d0878598506e7e1454af73349a90adece3129e97f5f230b4f593181e2cae22ed554736dcf9fa8778d0fa98335b11c1c93bde31c622fc8c736bfda2e9878eb468c8dbd69f62ebfccb4186761c4aac57136a771911c65c4b35ce76f23d3fcb209e407c032bcc171cdc9c91a1668c1fbbd6a4d31c5c66ebf706c962bd81111090a832308f4e1faee8426dfcba3cf556361c08415eece458f36a1bdbabda9392127b01f20123e06fdaa3ac4edeca29fd12a5b7ca413eb553e52a44e81a09050875a82e6e47425e799863f0c6306d42cea7acf84d58a0c0de2c71b8c747eb452784218a6a8d73d50855619a8de0496dc202d8d73179b8094bc4d700dc240b884a9b10346c670dcab0eb6118d00796b3a7871c4e81d33df3af79a9acf62e33ebbaf14f8e4538929f45fd9c2ea0ba6e49492d35f04a8e27e6a2c2a92ba0d5e039768afdc7e04dde83c72c1ef100665178699827a77baf8282aedf79ae6b9b3a8f25de2bdb3b70972e2cb41f929edd9af7d1617d72f02bff629ed94e568683cbc053e20485ca5b4811a03afcd555bc3a80f7907b15b493eeebb333797dd092314cd6ad5d4eb9897d17087a27697372a96bc480beb7e1425c7d445f72c1eafd61edd62328023e3169cfa440d3772364e5e1707bf32b7845a207c3d5a63e5fec1466f8f4787fd98063c2803cd324cb5fac93a1caf95a19f05ba8a71b2311708daba08e9019adb5b68f4fb86b175eeb39b92206927a4a5797790c7a8079d959d7e9a686ed54cd8ac1a75441e47f194bd810f316e190e7ab7ffd80ebd44895e0b5f8bde1cd007f4edd43f6c224532f01933717ca78d57e32fa4b69e8e7d5ea232ce21eb2d378af2d040fe0f0c3242921a035db2d02b13e69d366895ed1a9a2aabcfa391aceb6b4a9dd15f9ea17aa38eeb9eedd921d2dd2b7908e449e1396fa784f33c935506946fc43f6cad87e850ff3ecdceda3ea07c467cb5fc9623e389e5bb0a2748c62c13abb0d1e639a10fc1463518981a9bcd80b2e8aa845b6ab1a3624a485f67218be23aab65550f0164392f88cd16aad14fcc9deb664bcb5fa58aec0a5f34eb61cccfb5b4dd0cb834ac761f03ab798b32447d3fef47be334e2afff78f43eb1a7aeb0d88199f5f294de714009b71aa85e33d5a2263b827570c39d3661271d3877387bfb751f5505d64d7ec6862a13bab0caa431f906e69fcba9253f431d1b71b2eabd41e530b4fc555a00a5e1b9d09995cf21fa825b07bf5a9a602a47559be0dc6c8106670c72bc76fb004a5d1906335650bef142d1c3b8bc93335b1ecef355588fd50e2086144560bd049750d9b7ad515d07d4f67ec6a59a522cf09b3e7bf2cbcfb53334fef97c7d71d0d77be6a883d609d5c156ba6fad3cd87782a82f21dd63be32a26676ac4870b3806fe26f257d96ed3e62c7999218946984243539d9b8180a63b6534bdd6d26ed53dc117a01b7df64d4ae4db7cb252b060ca26f62289dcbeb36861558c410340859c3545ed5af3d9aca291e33a1b9c84b1cc13c1e2e13acd6b3af2289fe12b243e868960dcacf03709295fbd0c7fc21096eef5421daa24aca6869f87856aefad30810690c4f12042d2504d96e4d2f8cdf235a7ddb606776fa9cacbc29bf4993c9b3abf25848a2c26d543c86648d5e80bf80e0f045c6e80066d00dde96d885ed1fb244ee45e6bdde3e0e18086bf00d3d469737c442e86a80da0c34d8f66fc768ce7b5e90c10999057cfe2f16ab78585e27247b84762fb3429cbe8f9e7ca459c4e711664c870cb3fa8190fa32e4bb3a5c07ae08bf26285addf0242ab6be547a971979880102277d921fcecb81a3153fab6f8bbf8cc3fe9e2aa0af9fbb5c2b5536171a6003e8e3c24aa3f65510bdae8acb4e3e8e77da5547c7ebce74ef7384a1c00bee055e0d88db38999082558746b40d0af2b91e895c70ebc06bedd3dc9c5b46e86b5f2a1bca8dd692ae576e746b8b81aac2710497cde6c0c4f5b69ecf50e20dfe2f2d119873ce9b5c9cb2d84e9f301d310014d31f90cfdb3e68c94bdb6a639c0f86071b140077b2b4a8c904b526943f024f055209c799988b7fe348bd6855573dec88e194ec8e39a2c48e9fe0a5ba61c8e8c2a43cb1d6059683553b8957ff436e7171949ab97613f18e0151522550ecf83230353fec6533df9fb170573a2bf750af0ed266c389b7e5d52a998d53feccb41a04b67d04e33d575303ba7b2f92b17c46f7962547c497f061f64a2b09583dbda9b29f25c657708d465ccbbd061f3e4bbe20fdad57fc34f65e860e818c191b5430134f27c590e59c5fe3de32f47d9150d7143320413be5b07eb9a59ef1b751439adab152a996790d28c3b022949f83db7e26dfda46fb719afe13ea4089192d1acf5b4b4fbc20955efbbf4cd651417405a99622adde94406dc4549a13d78b7cfaeeea38e5b65b421b1ea1415b5421673712b801a11bcbb6cd80594195ece5348a986a5451fc6378c64f80a84f2a49841574eb1afcdf744359c309c9c8d7e8bed44f71c75b72b9ece3ff5c9829e80260af4d10761bedba9331e7981d706467628e986341cac14453c41abe110944bccd4802bad5b0161a603b8669bf32d38db9d5f7cb6dc5e88a5156700062ee74ce3f4f13e6499bd9c0d90177894186f75226dc546d4715f835fc5921053462fc133284ec312566a557b0a457d196e372afdd1d0063d821be6bdc85502a05c0f437de7bb39eb3a514f43a6f5239815ead6fedb269f60135221ee7400fdd977ee259250b202d68d42af4ca35e15146838a5e5c76beb82f8f1eba64bc5ba831266f2e63e85a18f5f3739cfdf0728d15acd6d5cc29b8275fcf87ec90bc742f28a277eae353b7ba02d81097b0158927cf377f377a942a57fabbccaab2ac231ee5242c73e844eb6a85d7d3257e85acf401bebe2714bfb4af2a4db586360325304575c5cba55f077a083e490ae72842aa9ec6b3a685a60ab6e787961ba0e390b1f3073226ec3b578c56174c0c7bef67d162984f61c6718f591625f11d9078b2f7e07bb2eeb2d5db26d40aafb01bc183ca829861c8d75c8992be2a49e2bf03b8125cb686241c1414a6892ff6565c4e8baa550f2921f5783e42c489fc957170bc2df6877debbb9be357935931571535c61e5f2397fdbd551e6f452e7500811a19bf844b011bbf338af1d860bb047ad365f14722edb061feb31b6b9f99ec9a16b422afba4c6ab14a5097f1a6cb09778ed05e7fa1bb9505b2bf0309cef8b5e6bbc4c5fe2088f33d143a4cf5d9500d1886f0bd22ccbfa97ed72f14504c2325408d26fe5f65e0155e3777b64036096c43c65c76c6326afa464db96bdc04a1c1c136a8faf9c90047cc0a8125a3b70bd97563ed5a7adafff0fb3bad1ed7d8d128e07b4bfffb4aaab0110391f56503d0845f8800d06844e3157d4b492cf1a55ef374368f94c3d7452f00da076f52d434aa1e357d67452034300a13ef727c71aa57acdc4efe88c9dd5871095e77de9e4ad596e909fdb4fdd994b800092a7d9b9f2db0364afa815b46da72999633c5fa8625b4e8eba0a306eade38cf97632386cc9789db0d7bb23b6abc3c259d76b08083c44bfc5045815d1a2a2d1b3051dd13b5a249876c67dd520ae0a025d017d724b3b2ebc80d1b59888ed579fbcc59cc0493b4c9643f21e381eb2381c8f01517c3d92115c31a4c9b363bbc4f165ec785d812aa28c7f575194e2d5e5dfe07cc33ec9c51d75a5e783279007aebe6528bd17061ce759872d28ea74ee835e69632e6bb0e4fae9d7f5dbea961cf7fc5b2bc332a8a168784c856562e00987474c5416b3aa0461bc6e11e5b878ddad50b90eee6f8ffe58dbef7607e7757207b51904599b87e264714ada186d83b93d9f062649ddfbbeb4e59d0ea7967dc8c7a9326dd351d4baaff33f0cd82e3141e270c3c546e1fdd45397d0b4867292b06f24d76208319ed28d61575527adb5d50246a7851f0bd160545082a56ccff38c5b60072c3ab0e6acae80fa5cb8b655fb845ce8525465c3544dcf58791565aa43e08f4fda4ba87091e882f557654d1425d2234d46bb4a1b07337d9f5b9f6d790ecf69fae406e50e19a38f9267526d4d323010cf1018b3c92831dac105c98bb7c3d9f26334855218d7a557655a59f4e40bdbf550af67f19d05edcd58bdeb39ececff6e78bf2e24c96ddece3fb9e98b12856e62de091460d0c617cc4b1dad76bdf49d5663144a5e2c265497b19623b6e68525c1870782e7ad16ea18304a8fc31884ca76bf5c7687e541b735f2a392f6c8d49d7b3b018729400cfe18ec8b4a4d81224f82e6b8f28a2c9fb8aa6d44078ab69351ae1cfe2923d7199f515040e2c5833de6982d256f04b82acfe4ef5df44a693e0c5cf2ae05f3a3c1b01230a2716d24fd251ebf25b1fdc81fa3dc8a62aa84138dd0da068113b871e92e9959b17b1bf8d7e72cfab94ec3875fc6f981f770700f1be0836e17b6424033b219560f3d721c58348d124d8363eff8e5b2ab779d52790e6395b700f5ce8e646de84a849277a61c286bf7a12ba583ae611e7122704ff4b0dd645bf01db04f6bfa5e25904dcb60f8654edfa148de26ed3cbdb4ce453d7d6bb2027e202b507b1480dcc4d98198a46ae38f24b67232cca8ffc10d0b3425df108125a1838f1f284eb903ba580673ff4f1ce9d052b5312da2c86c29d244c22b2f730891d5288288857ba721752c7cfcbd496ab3769ab1063b8aea2c69ad657ec0dcecbe77026bc36d106cf397f3711230e83fc9c6ffdaae52b4ef1f09d1a3ae066de8e40607afd11bb6739011d43c3483b2a73c0fb3b18afe4b85ee815f30f1fb1e8fb11ac41f23dbaf489eeec763fc6b7ce7afa9c89defeeb4ac760ec6926ea1b41de067b246b83cc73d2bc1dd4895599eb27003a8665f76e76340b0d1a79c794075b1b2ec46acb72c007a1090ea5dc419d84961d62bcaf2fb8cc577fe9bfd9109355ff755120757c7fec37e59fc01575d163603734327206ce5361ecd66a48060333e8ba80f37b976587ff9452112de7ef9e5d0a8588d061cf9bda4e319f86eb2faf2e5b285f8456f138ad74801b7c885d61cdb3454a8dd1c2c3e442b1301227ed071355d47c7f053ba34bb2dc6ea49369b4935fee8ac7aa30310868dbb46b0ac244151ef40e6ac6aa17b695653c6fe8954a1d791334f89c623b8979c8bd08632cea666328aca2a509bc6d046e36dd7934bb4211e7d4af2bf9fa6933830a209c86e95b59c6b5f9f00e44fe87bea8f93bf744392647a655b18529fd546f1d56534a53483bb1a4f8e104015bbccc97f84a53b2eff7674a673b1aef7ea80a0063e4787f0ffa3165e7c0c519c02ea1af3311f1b82e25b440aec09737561d0d20b65ec15162bd201a89508b769c9957483cceb57d56a312bbe99d8e77aef483ad1ef43d9ea0280f7c3886442890a6f44115dbd919c3bc3d873340324e1cf15c66c69cb03f7482caf6928bae105bfddd07ee5b2a287e46829f0c6b261c669e1", @ANYRES64=0x0], 0xa) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043d0e10000000aa10823a061a2aaf5919"], 0x11) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="0430433bc900"], 0x6) write$tun(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x0, 'client1\x00', 0x0, "d62e9879cf00", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f", 0x5fdc68b1}) getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x36}, 0xfffffffffffffc43) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) 1.937030703s ago: executing program 0 (id=214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0xa201, 0x0) sendto$inet6(r3, &(0x7f00000004c0)="d51c12c708c891ba5f578d69807e1cbc8e2765dbe57e48babd30bcdd5c793bb91f0434520dcb13844a93efd943564273d5cbe132352cf26abbfaa6424786f8a2cab2cc634ee891ab4914d99e8cfcee6181f6343709bcc4cc5a2a84c32763a17cd1f8cca12e4f7067fb55873df8616d94a8307cedd28317d85ac0badf6baec266cb2ea58b42983234eba0e02520aa4a102a95725c389e713863270c2a3f56bbd73cf007a9f71dd24cd72ad00d3550650d07f0ab9a6e9928fd4be2f94db65e4a2dd49d6b29dc592e796d1b1b63e2e8fbac5c48038ab3f20826a25b43ae6ec4cd1ce62a4eb36c4e4aabd1fac8ec628ddd3d8bc117abe3ae27d5ed0d277619a5bce6d6184b24ff92233dc89f6078859c56a3f9605b09c8bd89b2c576af91344fe8bd2761ffee8d8e2ebece1936c7e78756f37be3c190fd43afcc8ca45ba500dddcf4d48f6e93822b30fbaaa02ff6bbbfc5ef9e5b9a3a249985e9f617bf13f65584b711d68891e4f34a51e57ce36885881c20a6c4339f98a83d61515050bb686e43813e31ca9dcdce8a8deaf8afef67690b49fef6473d708f185934d9937ec057c77d50a166309f494ba32e38a346cb63abd78b5e60e59a47ac9651c52298fc381a97fe1a8a27e4ad918e394225e2d73992cf7ed90717700a215f13c46ba84af9b0f61db1b92caa8979086772a212bcd40dd2a1d5000c1dc8c3af0f71d8618648ff9b8d5f0f25a15e3214ee257dca10af4f3cbd8236486c2a61c18bccc63bedc9faed489d197004dab894525d851980693dea52d34ca0ccd10d41ca89bacfa91131c99165b25b917bb8a33721a7e37c6ce8b50b2bc7717f3619c2a59e23894b9bcf9b0bb122a202b554e54083803f92131213df77b16d0f2cad0782a15940e2c1423b25da16406bab2d88f4402a9312aae1184d2064ffcabf384687913af7755f0cd6fbcb5a9525023b626d0e781f7aaeb8497384d86fec6415a6cdb2fccaaa6de07dcf58ff8f340aafa8ecd8031af96accc2c87b085caafc85ec4ef422909199a05efd24644aafa23e0c00f3e98c52950adb8b900df1cb1cc2dd30749ce26878ac49c2a97ef829f0149adadf7f0db2ec55078b39fa7dbec95c7df6e77233295add24da28ab12a29aa4cedda630a923e97656354b28cc630c015aef950cf3de4e852314a186b8ef177cde3b92751c5d864ebd8ba9109509b850a6b15e98c1893953bfcd564fc703a374e1620616a825a13ec9fb67baeb608c67195bef14b58f7ad13a74df663ffb3deb7b21b86841c839b4be1ee66b14841a78b92c50e52a71ee9fb5a7bcb3e72afabbe2e6b687f6b63a4faa3195067e2fabeb31792c226f75ff66ca1ffc15bd6337b5fb22b11b8153c68d864103f79737716b00f83c946b893deb0bf49218d52a358970e4fee38afa9de39f554561d5d9c8fb72e69371aae419125a7cf2c0ad3a16bff015d3bb6845144f37a8238e183fd6866660fd777b46cc8454211660de2b505795c01bca496dbc295bfde2401b1dc3fab793494e7ba2d4df9407ee78d356dd1568cd92a8c9c8eb2027f915ada481b2c78c5013f4fc645c21dc1c9aceb1f43bcd3fcb2e29a970d9751042039fbbf26464ffae294104711f8e866615d8bec51820ba77e109951ecc64230dc1803310097fb604dc881252fa024623d042fd8f3dbdafdbd434629659a4aae16f2d331d43bd60800a40d29185d55a5c5438093484902cb4f96cb48288124542d16925ea103f379c7bf1fe439601b2615844624365f9604122cfa6156a55392b5891e295627b11011ef559ea0773de6aafdb86d7142a69805eb3ec599c6386df5462ad1150bd8da3129d65d525911e90a8b2c223ef7e733f631771e6128e4ccf29720bdbb03ca68ae3ac5be30d1a277f622cefbe5bd0faab7cd6a110adaf6a2415e043ef19bb45dc6a7411417435e3d0770dd694964da26bcf21a6e8ba63ad1516188c7a50b9c3263e6253034efd5038ed164155963342a5dfd265ede775c4d28fe23bcbc673104f84d4e7e3a3f079c494796f4a8ce8ba497af8e698a0b78eef33664cb6e0e36e0e7495bd9bea197101313630d691251f6797b26574d04ed1c1163f99959b9eec1bc8aefb2e53c28725a8106563d58c61f005bdb937f8542099cd6cc87dbb1e26b1274d4195b520fdf5de3fbbdc504562c88914ab9439b1a574702d0b32c246a395a2cd29ebbf678282f412c5e5c74cdf3fbf94f12b63acd3228840ea348ff077afd3cfa0aed21e83dee8ff9c41652020a46d6da7f9c6ac6f6de13706b8b9cdb68e1d27babb23082c5de5c21b5aaf09d11897d2ba2590acde075f904dad1bfcae9fe34b68736c0e85c376f543ddd2e67adff188cf0f2da9fb32790933054f4ec68bf35a7439cd7b7db34a623919e02f40a2f84d9dd304cbe98f7139fb21121938ce3e765d43ba7dd329bee45a87831fae9d381d069611fa5b75a1ed28953a90d448a99c23840257b5e699d505b1b65516cd255ecdc89277d048a5dc216ee28c913d79170fb33a3e78f1dbcafc063b6bfafae58ae39a3a60026c22125dff9ab1c66c085ba6306a930efaad796190c3effa9d025650b1fe05aa54ec1afcd624fee85b30bdd7872d160e2b66ea834f2ef0329a7f7ae40b040b49db70cb94ffbc76223f99c758ae6ca5171e48680f1be2224e15420980571ea9e781bf93d46c173dade3b5fda8dfb7af3c86ba22b43d2b8e3b11b755327a01b9ddaf3681d0f41978705e8c4d6cdd2954295e5f69c78ed54afa4361946b22e9389f92938d5252d4260cab17098e1109e79c619d48cd916eb48408f0e55e17a66892ea414b5fab414646edff8c2154936133488be343bfc87d36b31a0e8a0bfac72944c8d5a1cc25c6a59aa20d4171b90c3b65c21526ae569cd50b355fb0b06ac92eac572780dce9a97a6f8fa325cdb3ab6233a352e8ee25b9185d1e6ecf777f3b55253a460ffd2eb00bc34cfd85a474862b5265517dd26285efee18eaf5cfdc4db0db982f683f6e54a159e7c0109a2c0200281b2ba8e5441f3fab54445b9160111a874c549ad26186b8f1e26bf440bea02cdc9384789bb8f77c6c77a6280c8c8ad1c4c6a457432da33e0fe0580404998597c6aed3c23514391ddecc3446338999c10a966521815c8cd9176b1c508e2a15958554afe7025ca53ea37dd12f1ebee7effbf2eaf5e98d1d5468545858cb252c2c09df85283191bc263876ce9c4efe8f93ac52bfe8920d8f082a0e8f485786777a73a701ef82fb66699ee740e0453ca39bad9ebd3639c78f6b138193a26a2d3ef2ec91b2af04fc9846b38c963937c80e210320cbe7237ff901c1fa42f2d2ce3522effa3ff8c553447d302119c6181b44cfd02e86bf5f5ef3c36905289e300d543e8ba69535a3aa694e87e3cb5b4afb2e6f223a782b42960a8b4806fa75c5256e0cc801aee45dc15c24ba48321df34668f518f68f5b9c9aa052ad294e2e56229ab638af4af485345f3ebd89c5630910e260079142d27fac3678b6a624e2b3d9a1b70a72a58104a3aba11b20eb736e3811965418281bff3f0988f4a126b1e6cefa6da91ea7282177c92e0bbd86d35a8403db628bb07941aa021ab385e2abc5a228edf215194ebedd07d36abf7ab1328f26090e01f954c3a8071181a77551e92dd80438f66c4ea5ee4c975bf8e0aa49d2c0283337f05df14a4285463fadebcd98fb57ace6638bb0a0b6ad1cd0854dec99f87aeac59c0c1d8cf9de203d628a7f2457aa91e5553515fc33fff9c9b5d808f93c0096b326711e4d25d8de2a09990ff65d611275226751fbae68aab6d672f5017a93460e10ac130dcc1f70b8cdd7917971bb5b697361bd22898f6a971f1e0aa3d2754f67178963dad6b9267e9a608f0b110a7b333927179eebe1ccfb02b543c5f329035f0d77e28b5c9c8386152c320f65ed29d990c3d3f6bb75009bc9323d719fbf344e75eb55c5b5d80f63c28b6cdf1cc989364ee58d7bc7e1e7e7cc16355e64338358369aaa4ab61f3e870f08dc4725ac5ebde9fbb069e6ab8e52d79410d01cd4f723eb55dcc242b4ebb350acd076fec908b95f21efae717afb14dbfce95c2ca8aa6ccff6983fa9e0bbab19dcd464146b21ecb41e0783f697c6611ea8c622bf05484f1c8ffca46746808c6c200647ec289148632a6eb694d865756440611e176182de5c45e64afd7062eca8a9402a236a8e8607d6ff578bfc41897fe5f2d64841eae129d3bfb1e5f2949335502c5ee25e1ce49dbb34cc295d9cf2d9e45bbd7b3345f35f7bbe212a33e8c771c8dab2d1bb2ab1436b383faf17e5b6a308729b047ee4b9342d5e7448689f4fc91f54d828d76f7e42fa1fb4037362d5c7cb9b4e3f245bcc08cd92c4f37d870bc97fefd7166fa629d93b3e56ebd13f2afa7d41edde79c487d8e83bb9f2da4cb503be620b3ec6f29e4b0dcda5f14d727287aa31d3516154b832a1cbf1c92400dec0a19f124a1fbdc3ba8dd4a012149f355d4b6cfb6e226d1b4078c60f95773f3cb207d59f27f8fbb49ec27d483cc33f6136b6f2c670205f81a55575b03cda17136031d95d75c447e56a0ce69df81940e73a954238a40e2f2a922463f936ac3aa414fe0a4a80da2740173fcff3b0debc4a6b3e49685f79124356bb0859a50888a68be8dbb91f8ea9675bb0766c8ad4e9be3966c9554517ca3b5e5679045f1fd0b28d3582e35660e7581af24fe703b300be6dd3c3274e773f8708a6d5f56d2af1fc3656d6ac59bb5894f4206c7ea6c07989c00d44e3001aceb3a0bcc69bf36f5855562c8ca7db0853554babdff62ef27616e7412f02ca72146789a0d2837e01b034fdf38a4e9ddb97a29ec01c92d2b00bcdf4f6000345ce77f45e65d88abf519bae3e399391a7ccdf5617f0e1acbb24ca16d1c3d8f2731e1be70a7b85bffd2876900e072cf19078d9bfa39503e72b38eff30f498e0505203017dc024c8f7db4c55ac40ffa56a4c6fae4489aa85990fc0d584cda21ca4fc82a44d013e4373a316b286a71853690f0c1756ec4729c320a7dece7ed06f21aa16d06ad42fb74ddedc192677a91ecc0d49ed1125dae0501a0a94f98800bca254141112bdaa435da9847350e9a32a6866a5cdc423c72fe530a1ccae1921451e09fafb70fb24296b18e88ea519bbf169f2acc121fd9fb75b2d826fc5ec9c79125c0c18882a91f285fcd423f363c1958d939f05762a955d6f7e0d778009942ca72f8a8a070308410105abbd54ce3cd1673ebf8512f9dbbc45cff7b952b8027710b6b54b73f52aad48708d9ced434ce17b966bd67f4d820770d6f9afe3a3fda7e53e4300b606f86cc0c2c16af94ae5cd924c3e3eaa5b0a35fa31cea22a5310a687912e13b5c0ea93dd0d039c060227a48c24a7dc9074d5b20fa7993a2de5d38f656f07267cae375af76491edd1ec04a7cb66287d71393dff38d1ed5fc28aab335fbeffe30f67557e4b23b44bd4ea3ca8ba54d825950fbce551496e2b2745803911f98adb2984a961806dbb1a7b3bc4b34df8a060a67861fcc6b9b4dc2511af1052e69662a6898de5a95828bb331e0ad1ef10d18dc7ad29123db5f8cb013fa6467d018c0f9fd379ec300e8dd0eced6469c85cb8d9cc0ddae2ad08ae37ce391c7cd30419f980df638af34b554d2c1b82702795ec19f631e49d8c7fe1ec00f04369989cdcd4707c65b9e78bda498f1c58d785aeb87cecb7d02597c18f90ba695b2a1a89cb7424f7d3a63b03ecb295b38c2b1355868f82c3ebb65629be60a843815ed67de3188448c0d59497109a1a90a4fc86e2f", 0x1000, 0x20000881, &(0x7f0000000240)={0xa, 0x4e21, 0x4, @local, 0xf}, 0x1c) r4 = getpid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000440), 0x3fffffffffffe21, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r5], 0xc63b9e35) sched_setscheduler(0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40184810, 0x0) 1.760071426s ago: executing program 1 (id=243): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0xffe, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (fail_nth: 11) 1.157782857s ago: executing program 2 (id=244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f040, 0x4}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000400)='romfs\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) 1.070686802s ago: executing program 1 (id=245): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0xffffffff, 0x0, 0x54}, 0x9c) 919.180076ms ago: executing program 1 (id=246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$nmem0(0xffffff9c, &(0x7f0000000040), 0xa201, 0x0) sendto$inet6(r3, &(0x7f00000004c0)="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", 0x1000, 0x20000881, &(0x7f0000000240)={0xa, 0x4e21, 0x4, @local, 0xf}, 0x1c) getpid() r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000440), 0x3fffffffffffe21, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r4], 0xc63b9e35) sched_setscheduler(0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x40184810, 0x0) 74.420001ms ago: executing program 2 (id=247): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, 0x0) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000340)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x181001, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) io_submit(r2, 0x3, &(0x7f0000001400)=[&(0x7f0000000080)={0xf4, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="01", 0x1}, 0x0, 0x0]) 0s ago: executing program 1 (id=248): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="80340700ffffffffffff08021100000187272bc59a224900ffffffffffffff7f06002280000453ec897a040600f7f00e05002503000b040f0105720603030303030371070101ffffffd2037606018012000080ddab9a0e39463b2ba80935bf1b37a54e546794b021745027b18373942fd1d14cda4c9d44cbf31fea475a58fd92213d713d1be12280926891587c7665c5886726003876b5a8c6095cd4e599d4b58ac6049a000f90ad5b755f5011374ddbbe7a82fe24c484c7fddcb5ec48abf0d512b3d7e5dd651219d5dec918e6f0e8c2fdc68115bd8747df18666ad832976d8e1b7bed77e6a26127a51a95df98b778a3107e1b0edd49e6fd50b5", @ANYRES32=r0, @ANYBLOB="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"], 0x404) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}], 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08010000", @ANYRES16=r8, @ANYBLOB="05000000450000000000000600070000000300", @ANYRES32=r9, @ANYBLOB="080005000c000000080005000900000005005300000000001c00e700af9c63e5a52435bed416ac96cac0a5dc4069b7c27b0fe09614001780040001000400020004000400040003001c00e7000c64c06d5b9afe9364ab56818174c962f4264724d7b571df0a00e800ffffffffffff00000a00e80008021100000000001c00e700f6cabdd2272d231c614a31a454e7372e68d5b134e0f7ac8820001780040001000400040004000100040005000400050004000500040005000a00e80008021100000100001c00e7007b6605cd55008c10a6ecfdeae7df4f4c69f4ce0f2715ca660a00e8000802110000000000"], 0x108}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r9, @ANYBLOB="11002a00dd0b6162636465666768696aff6d000010002d800a0000000202020202020000"], 0x40}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="7490e8b2f1b948675d4a0700be000000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf257f00000008000300", @ANYRES32=r9, @ANYBLOB="0c009900001000001d0000000a00f50050505050505000000a00340002020202020200000a00f50008021100000100000a003400010101010101000014005500790f797105ff193ad50b1b230198aebe060048002b000000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r8, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7b29, 0x18}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x58}, 0x1, 0x0, 0x0, 0x24040040}, 0x40001) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r11, @ANYBLOB="04490280b812e58223ed2c179363926efd1afd19c86e628bebc9e86813ec188b1f312cf8b0f3fa935c21b8cf7628b18c57f02df3c9261aead4af0f70ac052c93451774"], 0x20}}, 0x0) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="08002cbd7000fbdbdf2504000000ec44020003000000080002000700000030000680060005004e2100000800030000000000060005004e22000014000400fe8000000020000000000000000000aa080002000800000005000500810000000800020003000000"], 0x6c}}, 0x8180) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r12, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x4041810) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r13, 0x84, 0x4, &(0x7f0000000400), 0x4) mount$9p_virtio(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=virtio,cache=none,noextend,nodevmap,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="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"]) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:45902' (ED25519) to the list of known hosts. [ 50.877959][ T5196] cgroup: Unknown subsys name 'net' [ 50.985466][ T5196] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.242996][ T5196] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.669348][ T4648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.673958][ T5214] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.679130][ T4648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.684580][ T4648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.688311][ T4648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.693792][ T4648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.697296][ T4648] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.700641][ T4648] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.703840][ T5212] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.704573][ T4648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.710939][ T4648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.712040][ T5216] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.719301][ T5216] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.720983][ T4648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.725052][ T66] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.728742][ T4648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.729236][ T5216] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.732622][ T4648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.735158][ T66] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.742119][ T5216] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.745249][ T5209] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.748917][ T5216] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.750487][ T5209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.751920][ T5216] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.166011][ T5207] chnl_net:caif_netlink_parms(): no params data found [ 58.199566][ T5206] chnl_net:caif_netlink_parms(): no params data found [ 58.270803][ T5208] chnl_net:caif_netlink_parms(): no params data found [ 58.373314][ T5218] chnl_net:caif_netlink_parms(): no params data found [ 58.459890][ T5206] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.463153][ T5206] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.467784][ T5206] bridge_slave_0: entered allmulticast mode [ 58.471987][ T5206] bridge_slave_0: entered promiscuous mode [ 58.544040][ T5207] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.547622][ T5207] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.550825][ T5207] bridge_slave_0: entered allmulticast mode [ 58.554809][ T5207] bridge_slave_0: entered promiscuous mode [ 58.559441][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.562733][ T5206] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.566220][ T5206] bridge_slave_1: entered allmulticast mode [ 58.570114][ T5206] bridge_slave_1: entered promiscuous mode [ 58.660332][ T5207] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.663551][ T5207] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.668897][ T5207] bridge_slave_1: entered allmulticast mode [ 58.675806][ T5207] bridge_slave_1: entered promiscuous mode [ 58.736464][ T5208] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.739672][ T5208] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.742910][ T5208] bridge_slave_0: entered allmulticast mode [ 58.747324][ T5208] bridge_slave_0: entered promiscuous mode [ 58.825104][ T5206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.828987][ T5208] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.831575][ T5208] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.834382][ T5208] bridge_slave_1: entered allmulticast mode [ 58.838024][ T5208] bridge_slave_1: entered promiscuous mode [ 58.880132][ T5207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.886507][ T5206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.925187][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.927651][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.930029][ T5218] bridge_slave_0: entered allmulticast mode [ 58.933120][ T5218] bridge_slave_0: entered promiscuous mode [ 58.940302][ T5207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.990170][ T5208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.993979][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.997087][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.999861][ T5218] bridge_slave_1: entered allmulticast mode [ 59.003059][ T5218] bridge_slave_1: entered promiscuous mode [ 59.048936][ T5206] team0: Port device team_slave_0 added [ 59.053361][ T5208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.104845][ T5207] team0: Port device team_slave_0 added [ 59.110713][ T5207] team0: Port device team_slave_1 added [ 59.115824][ T5206] team0: Port device team_slave_1 added [ 59.247556][ T5208] team0: Port device team_slave_0 added [ 59.252296][ T5218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.281056][ T5207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.283703][ T5207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.293004][ T5207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.299059][ T5206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.301847][ T5206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.311199][ T5206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.317831][ T5206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.320259][ T5206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.330278][ T5206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.338491][ T5208] team0: Port device team_slave_1 added [ 59.342663][ T5218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.347204][ T5207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.350034][ T5207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.361246][ T5207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.466270][ T5208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.469028][ T5208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.480092][ T5208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.490407][ T5218] team0: Port device team_slave_0 added [ 59.495896][ T5218] team0: Port device team_slave_1 added [ 59.518873][ T5208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.521643][ T5208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.532325][ T5208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.618483][ T5207] hsr_slave_0: entered promiscuous mode [ 59.622147][ T5207] hsr_slave_1: entered promiscuous mode [ 59.693931][ T5206] hsr_slave_0: entered promiscuous mode [ 59.697782][ T5206] hsr_slave_1: entered promiscuous mode [ 59.700847][ T5206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.704473][ T5206] Cannot create hsr debugfs directory [ 59.747170][ T5212] Bluetooth: hci0: command tx timeout [ 59.767288][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.769952][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.780813][ T5218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.788091][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.791115][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.801875][ T5218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.824768][ T5212] Bluetooth: hci1: command tx timeout [ 59.834651][ T5212] Bluetooth: hci3: command tx timeout [ 59.834670][ T5214] Bluetooth: hci2: command tx timeout [ 59.935476][ T5208] hsr_slave_0: entered promiscuous mode [ 59.938121][ T5208] hsr_slave_1: entered promiscuous mode [ 59.940479][ T5208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.943343][ T5208] Cannot create hsr debugfs directory [ 60.018595][ T5218] hsr_slave_0: entered promiscuous mode [ 60.021918][ T5218] hsr_slave_1: entered promiscuous mode [ 60.027417][ T5218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.030599][ T5218] Cannot create hsr debugfs directory [ 60.417988][ T5207] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.431493][ T5207] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.442732][ T5207] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.458651][ T5207] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.525654][ T5206] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.531300][ T5206] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.538487][ T5206] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.552794][ T5206] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.626020][ T5208] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.636351][ T5208] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.656325][ T5208] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.662526][ T5208] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.696122][ T5207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.707430][ T5218] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.716905][ T5218] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.723990][ T5218] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.729923][ T5218] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.770522][ T5207] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.802349][ T1749] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.805723][ T1749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.827007][ T1749] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.830012][ T1749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.846783][ T5206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.874079][ T5206] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.897131][ T825] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.900056][ T825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.918010][ T1749] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.920466][ T1749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.976423][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.998325][ T5218] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.020416][ T5208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.029443][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.032548][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.048648][ T825] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.051298][ T825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.072117][ T5208] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.096442][ T1749] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.099604][ T1749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.118780][ T825] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.122003][ T825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.140892][ T5207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.219724][ T5207] veth0_vlan: entered promiscuous mode [ 61.231828][ T5207] veth1_vlan: entered promiscuous mode [ 61.254562][ T5206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.299634][ T5206] veth0_vlan: entered promiscuous mode [ 61.312691][ T5207] veth0_macvtap: entered promiscuous mode [ 61.319179][ T5207] veth1_macvtap: entered promiscuous mode [ 61.328703][ T5206] veth1_vlan: entered promiscuous mode [ 61.352400][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.366058][ T5207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.373517][ T5206] veth0_macvtap: entered promiscuous mode [ 61.383031][ T5206] veth1_macvtap: entered promiscuous mode [ 61.391045][ T5207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.397372][ T5207] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.401185][ T5207] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.406319][ T5207] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.410207][ T5207] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.445753][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.450895][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.458175][ T5206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.477742][ T5208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.482855][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.487611][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.491993][ T5206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.498479][ T5206] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.502173][ T5206] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.505883][ T5206] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.509611][ T5206] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.550151][ T5218] veth0_vlan: entered promiscuous mode [ 61.589525][ T5218] veth1_vlan: entered promiscuous mode [ 61.595407][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.598745][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.634728][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.638143][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.658129][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.661372][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.689454][ T5218] veth0_macvtap: entered promiscuous mode [ 61.693638][ T5208] veth0_vlan: entered promiscuous mode [ 61.698364][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.701393][ T5218] veth1_macvtap: entered promiscuous mode [ 61.702083][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.712456][ T5208] veth1_vlan: entered promiscuous mode [ 61.731325][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.739708][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.743858][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.749769][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.757216][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.767192][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.771674][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.777080][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.781492][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.787333][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.824719][ T5212] Bluetooth: hci0: command tx timeout [ 61.840361][ T5208] veth0_macvtap: entered promiscuous mode [ 61.846755][ T5218] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.854536][ T5218] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.858266][ T5218] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.861774][ T5218] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.872640][ T5208] veth1_macvtap: entered promiscuous mode [ 61.905062][ T5212] Bluetooth: hci2: command tx timeout [ 61.910116][ T5208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.915037][ T5212] Bluetooth: hci3: command tx timeout [ 61.916639][ T5208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.917276][ T5212] Bluetooth: hci1: command tx timeout [ 61.921315][ T5208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.931488][ T5208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.935801][ T5208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.940184][ T5208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.949428][ T5208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.986581][ T5208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.991097][ T5208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.999012][ T5208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.005355][ T5208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.009117][ T5208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.013346][ T5208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.022042][ T5208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.030232][ T5208] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.033951][ T5208] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.039298][ T5208] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.042851][ T5208] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.044552][ T5274] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 62.157569][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.163892][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.230831][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.234372][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.244183][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.253612][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.330852][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.339492][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.655092][ T5287] MTD: Couldn't look up '/dev/sg0': -15 [ 62.684562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.251622][ T5301] FAULT_INJECTION: forcing a failure. [ 63.251622][ T5301] name failslab, interval 1, probability 0, space 0, times 1 [ 63.256500][ T5301] CPU: 0 PID: 5301 Comm: syz.3.6 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 63.260489][ T5301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.264826][ T5301] Call Trace: [ 63.266232][ T5301] [ 63.267473][ T5301] dump_stack_lvl+0x16c/0x1f0 [ 63.269345][ T5301] should_fail_ex+0x497/0x5b0 [ 63.271250][ T5301] should_failslab+0x9/0x20 [ 63.273157][ T5301] __kmalloc_noprof+0xcb/0x410 [ 63.275175][ T5301] ? hlock_class+0x4e/0x130 [ 63.276750][ T5301] offload_action_alloc+0x29/0xf0 [ 63.278584][ T5301] tcf_action_offload_add_ex+0x1b7/0x670 [ 63.281034][ T5301] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 63.283229][ T5301] ? __pfx___lock_acquire+0x10/0x10 [ 63.285444][ T5301] tcf_action_init+0x590/0x810 [ 63.287469][ T5301] ? __pfx_tcf_action_init+0x10/0x10 [ 63.289932][ T5301] ? __pfx_mark_lock+0x10/0x10 [ 63.291910][ T5301] ? finish_task_switch.isra.0+0x212/0xcc0 [ 63.294370][ T5301] ? __pfx_lock_release+0x10/0x10 [ 63.296634][ T5301] ? find_held_lock+0x2d/0x110 [ 63.298732][ T5301] tcf_action_add+0xfd/0x5d0 [ 63.300700][ T5301] ? __pfx_tcf_action_add+0x10/0x10 [ 63.302611][ T5301] ? __nla_parse+0x40/0x60 [ 63.304387][ T5301] tc_ctl_action+0x35d/0x470 [ 63.306321][ T5301] ? __pfx_tc_ctl_action+0x10/0x10 [ 63.308538][ T5301] ? rtnetlink_rcv_msg+0x35a/0xea0 [ 63.310768][ T5301] ? __pfx_tc_ctl_action+0x10/0x10 [ 63.312972][ T5301] rtnetlink_rcv_msg+0x3c7/0xea0 [ 63.315128][ T5301] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 63.317534][ T5301] ? __pfx___dev_queue_xmit+0x10/0x10 [ 63.319817][ T5301] netlink_rcv_skb+0x165/0x410 [ 63.321889][ T5301] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 63.324102][ T5301] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 63.326353][ T5301] ? netlink_deliver_tap+0x1ae/0xcf0 [ 63.328637][ T5301] netlink_unicast+0x544/0x830 [ 63.330728][ T5301] ? __pfx_netlink_unicast+0x10/0x10 [ 63.332993][ T5301] ? __phys_addr_symbol+0x30/0x80 [ 63.334753][ T5301] ? __check_object_size+0x48e/0x720 [ 63.336943][ T5301] netlink_sendmsg+0x8b8/0xd70 [ 63.339014][ T5301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.341306][ T5301] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 63.343538][ T5301] ____sys_sendmsg+0x9b4/0xb50 [ 63.345533][ T5301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.347825][ T5301] ? get_compat_msghdr+0x11b/0x170 [ 63.349968][ T5301] ? __pfx___lock_acquire+0x10/0x10 [ 63.352220][ T5301] ___sys_sendmsg+0x135/0x1e0 [ 63.354299][ T5301] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.356562][ T5301] ? ksys_write+0x21c/0x260 [ 63.358557][ T5301] ? __fget_light+0x173/0x210 [ 63.360631][ T5301] __sys_sendmsg+0x117/0x1f0 [ 63.362623][ T5301] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.364759][ T5301] __do_fast_syscall_32+0x73/0x120 [ 63.366997][ T5301] do_fast_syscall_32+0x32/0x80 [ 63.369124][ T5301] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 63.371794][ T5301] RIP: 0023:0xf73ee579 [ 63.373584][ T5301] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 63.381153][ T5301] RSP: 002b:00000000f5d0656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 63.384667][ T5301] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 63.387556][ T5301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.390964][ T5301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 63.393816][ T5301] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 63.397233][ T5301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.400668][ T5301] [ 63.554354][ T5260] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.651739][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 63.716116][ T5311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 63.729640][ T5312] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9'. [ 63.754645][ T5260] usb 6-1: Using ep0 maxpacket: 32 [ 63.762316][ T5260] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 63.770661][ T5260] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 63.776184][ T5260] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 63.779894][ T5260] usb 6-1: Product: syz [ 63.781626][ T5260] usb 6-1: Manufacturer: syz [ 63.783190][ T5260] usb 6-1: SerialNumber: syz [ 63.796303][ T5308] netlink: 'syz.3.9': attribute type 4 has an invalid length. [ 63.797597][ T5260] usb 6-1: config 0 descriptor?? [ 63.809956][ T5303] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 63.822480][ T5311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10'. [ 63.833146][ T5308] netlink: 'syz.3.9': attribute type 4 has an invalid length. [ 63.905869][ T5214] Bluetooth: hci0: command tx timeout [ 63.907503][ T5325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 63.911130][ T5318] netlink: 'syz.0.10': attribute type 4 has an invalid length. [ 63.958379][ T5311] netlink: 'syz.0.10': attribute type 4 has an invalid length. [ 63.984993][ T5214] Bluetooth: hci1: command tx timeout [ 63.987230][ T5214] Bluetooth: hci3: command tx timeout [ 63.989285][ T5214] Bluetooth: hci2: command tx timeout [ 64.025153][ T5325] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12'. [ 64.040908][ T5250] usb 6-1: USB disconnect, device number 2 [ 64.101952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 64.150106][ T5329] netlink: 'syz.3.12': attribute type 4 has an invalid length. [ 64.201190][ T5329] netlink: 'syz.3.12': attribute type 4 has an invalid length. [ 64.212490][ T5334] libceph: resolve '. [ 64.212490][ T5334] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 64.212490][ T5334] ' (ret=-3): failed [ 64.301024][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 64.383602][ T5341] netlink: 'syz.3.14': attribute type 4 has an invalid length. [ 64.422611][ T5338] netlink: 'syz.3.14': attribute type 4 has an invalid length. [ 64.534612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.719357][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 64.831968][ T5351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17'. [ 64.932914][ T5351] netlink: 'syz.1.17': attribute type 4 has an invalid length. [ 65.026088][ T5349] netlink: 'syz.1.17': attribute type 4 has an invalid length. [ 65.115353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.135088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 65.138283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 65.143511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.151125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.284565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.334563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 65.505162][ T5362] MTD: Couldn't look up '/dev/sg0': -15 [ 65.553435][ T5364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 66.011171][ T5212] Bluetooth: hci0: command tx timeout [ 66.074327][ T5212] Bluetooth: hci2: command tx timeout [ 66.076686][ T5212] Bluetooth: hci3: command tx timeout [ 66.079042][ T5212] Bluetooth: hci1: command tx timeout [ 66.824813][ T12] Bluetooth: (null): Invalid header checksum [ 66.830902][ T12] Bluetooth: (null): Invalid header checksum [ 66.929711][ T45] Bluetooth: (null): Invalid header checksum [ 67.452446][ T5414] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 67.495136][ T5414] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 67.498174][ T5414] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 67.524746][ T5414] vhci_hcd vhci_hcd.0: Device attached [ 67.557934][ T5416] usbip_core: unknown command [ 67.566779][ T5416] vhci_hcd: unknown pdu 0 [ 67.578391][ T5416] usbip_core: unknown command [ 67.586019][ T1086] vhci_hcd: stop threads [ 67.587847][ T1086] vhci_hcd: release socket [ 67.589956][ T1086] vhci_hcd: disconnect device [ 67.635812][ T45] Bluetooth: (null): Invalid header checksum [ 67.638547][ T45] Bluetooth: (null): Invalid header checksum [ 67.756775][ T45] Bluetooth: (null): Invalid header checksum [ 67.866479][ T45] Bluetooth: (null): Invalid header checksum [ 68.627001][ T5463] MTD: Couldn't look up '/dev/sg0': -15 [ 68.662706][ T5466] __nla_validate_parse: 10 callbacks suppressed [ 68.662724][ T5466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 68.853000][ T5477] validate_nla: 12 callbacks suppressed [ 68.853011][ T5477] netlink: 'syz.0.36': attribute type 4 has an invalid length. [ 68.979330][ T5466] netlink: 'syz.0.36': attribute type 4 has an invalid length. [ 69.266252][ T5490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 69.365957][ T5490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.40'. [ 69.477360][ T64] Bluetooth: (null): Invalid header checksum [ 69.479992][ T64] Bluetooth: (null): Invalid header checksum [ 69.494784][ T5503] Zero length message leads to an empty skb [ 69.503696][ T5495] netlink: 'syz.0.40': attribute type 4 has an invalid length. [ 69.520173][ T5490] netlink: 'syz.0.40': attribute type 4 has an invalid length. [ 69.754490][ T5512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 69.827639][ T5516] netlink: 20 bytes leftover after parsing attributes in process `syz.0.45'. [ 69.915614][ T5516] netlink: 'syz.0.45': attribute type 4 has an invalid length. [ 69.990489][ T5512] netlink: 'syz.0.45': attribute type 4 has an invalid length. [ 70.047172][ T1086] Bluetooth: (null): Invalid header checksum [ 70.050071][ T45] Bluetooth: (null): Invalid header checksum [ 70.134949][ T5529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 70.156090][ T11] Bluetooth: (null): Invalid header checksum [ 70.234516][ T5533] netlink: 'syz.0.48': attribute type 4 has an invalid length. [ 70.276344][ T5529] netlink: 'syz.0.48': attribute type 4 has an invalid length. [ 70.584528][ T5542] MTD: Couldn't look up '/dev/sg0': -15 [ 70.843571][ T5553] MTD: Couldn't look up '/dev/sg0': -15 [ 70.870877][ T5556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 70.982544][ T5563] netlink: 20 bytes leftover after parsing attributes in process `syz.3.52'. [ 71.051913][ T5556] netlink: 'syz.3.52': attribute type 4 has an invalid length. [ 72.505235][ T5609] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 72.530355][ T5609] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 72.533050][ T5609] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 72.536509][ T5609] vhci_hcd vhci_hcd.0: Device attached [ 72.551005][ T5612] usbip_core: unknown command [ 72.553145][ T5612] vhci_hcd: unknown pdu 0 [ 72.555481][ T5612] usbip_core: unknown command [ 72.557798][ T1086] vhci_hcd: stop threads [ 72.559575][ T1086] vhci_hcd: release socket [ 72.561458][ T1086] vhci_hcd: disconnect device [ 73.121142][ T5623] MTD: Couldn't look up '/dev/sg0': -15 [ 73.306103][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.310286][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.369906][ T5633] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.65' sets config #-1 [ 73.532824][ T5654] IPv6: NLM_F_REPLACE set, but no existing node found! [ 73.731995][ T5665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'. [ 73.828043][ T5671] netlink: 'syz.0.73': attribute type 4 has an invalid length. [ 73.866936][ T5671] netlink: 'syz.0.73': attribute type 4 has an invalid length. [ 74.888118][ T5719] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.903217][ T5721] IPv6: NLM_F_REPLACE set, but no existing node found! [ 74.942698][ T5719] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.968122][ T39] audit: type=1326 audit(1721574897.864:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5720 comm="syz.0.81" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x0 [ 74.986762][ T5725] MTD: Couldn't look up '/dev/sg0': -15 [ 75.289068][ T5212] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 76.044483][ T5785] tc_dump_action: action bad kind [ 76.660866][ T5804] IPv6: NLM_F_REPLACE set, but no existing node found! [ 76.707704][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.710353][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.743192][ T39] audit: type=1326 audit(1721574899.644:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5803 comm="syz.2.98" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x0 [ 77.024380][ T5212] Bluetooth: hci1: command 0x0406 tx timeout [ 77.521072][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 77.596173][ T5818] netlink: 'syz.2.102': attribute type 4 has an invalid length. [ 77.630021][ T5818] netlink: 'syz.2.102': attribute type 4 has an invalid length. [ 78.272839][ T5214] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 78.304365][ T5214] Bluetooth: hci0: command 0x0406 tx timeout [ 78.698250][ T5845] IPv6: NLM_F_REPLACE set, but no existing node found! [ 78.784394][ T39] audit: type=1326 audit(1721574901.684:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5844 comm="syz.2.110" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x0 [ 78.891382][ T5214] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.895227][ T5214] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.898723][ T5214] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.903856][ T5214] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.907920][ T5214] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.910674][ T5214] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.980574][ T5853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'. [ 79.064543][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 79.120102][ T5853] netlink: 'syz.1.111': attribute type 4 has an invalid length. [ 79.178171][ T5853] netlink: 'syz.1.111': attribute type 4 has an invalid length. [ 79.186366][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.191193][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.195372][ T5850] bridge_slave_0: entered allmulticast mode [ 79.199844][ T5850] bridge_slave_0: entered promiscuous mode [ 79.206438][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.209980][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.217361][ T5850] bridge_slave_1: entered allmulticast mode [ 79.227345][ T5850] bridge_slave_1: entered promiscuous mode [ 79.292049][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'. [ 79.302821][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.318441][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.383567][ T45] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.437143][ T5866] netlink: 'syz.1.112': attribute type 4 has an invalid length. [ 79.463775][ T5850] team0: Port device team_slave_0 added [ 79.483693][ T45] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.496032][ T5850] team0: Port device team_slave_1 added [ 79.498460][ T5863] netlink: 'syz.1.112': attribute type 4 has an invalid length. [ 79.596988][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.600357][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.613821][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.621191][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.623905][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.636066][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.650570][ T45] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.729155][ T45] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.741603][ T5850] hsr_slave_0: entered promiscuous mode [ 79.747245][ T5850] hsr_slave_1: entered promiscuous mode [ 79.751099][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.754372][ T5850] Cannot create hsr debugfs directory [ 79.902983][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 79.955385][ T45] bridge_slave_1: left allmulticast mode [ 79.957398][ T45] bridge_slave_1: left promiscuous mode [ 79.959922][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.968862][ T45] bridge_slave_0: left allmulticast mode [ 79.970899][ T45] bridge_slave_0: left promiscuous mode [ 79.973426][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.270704][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.275949][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.282158][ T45] bond0 (unregistering): Released all slaves [ 80.310893][ T5878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.116'. [ 80.314172][ T5886] netlink: 'syz.2.116': attribute type 4 has an invalid length. [ 80.332173][ T5881] netlink: 'syz.2.116': attribute type 4 has an invalid length. [ 80.530967][ T5899] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 80.533716][ T5899] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 80.546082][ T5899] vhci_hcd vhci_hcd.0: Device attached [ 80.557130][ T5899] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 80.559249][ T5899] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 80.561944][ T5899] vhci_hcd vhci_hcd.0: Device attached [ 80.572489][ T5906] vhci_hcd: connection closed [ 80.572723][ T5903] vhci_hcd: connection closed [ 80.573083][ T78] vhci_hcd: stop threads [ 80.578231][ T78] vhci_hcd: release socket [ 80.579732][ T78] vhci_hcd: disconnect device [ 80.583262][ T78] vhci_hcd: stop threads [ 80.586339][ T78] vhci_hcd: release socket [ 80.589010][ T78] vhci_hcd: disconnect device [ 80.756881][ T45] hsr_slave_0: left promiscuous mode [ 80.760279][ T45] hsr_slave_1: left promiscuous mode [ 80.767235][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.770437][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.780079][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.788408][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.820363][ T45] veth1_macvtap: left promiscuous mode [ 80.822455][ T45] veth0_macvtap: left promiscuous mode [ 80.825041][ T45] veth1_vlan: left promiscuous mode [ 80.827815][ T45] veth0_vlan: left promiscuous mode [ 80.944426][ T5214] Bluetooth: hci0: command tx timeout [ 81.696337][ T45] team0 (unregistering): Port device team_slave_1 removed [ 81.754953][ T5214] Bluetooth: hci2: command 0x0406 tx timeout [ 81.757043][ T45] team0 (unregistering): Port device team_slave_0 removed [ 82.455779][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.476889][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.507783][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.517285][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.697015][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.721863][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.732339][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.735292][ T5247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.761106][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.763617][ T5247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.792004][ T5850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.799124][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.035375][ T5216] Bluetooth: hci0: command tx timeout [ 83.267503][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.328256][ T5850] veth0_vlan: entered promiscuous mode [ 83.336297][ T5850] veth1_vlan: entered promiscuous mode [ 83.371118][ T5850] veth0_macvtap: entered promiscuous mode [ 83.378297][ T5850] veth1_macvtap: entered promiscuous mode [ 83.404848][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.411953][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.417429][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.422969][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.426589][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.430809][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.437739][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.446353][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.451241][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.456254][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.464482][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.468792][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.484436][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.495782][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.521908][ T5850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.531584][ T5850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.541747][ T5850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.545861][ T5850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.669161][ T5963] libceph: resolve '. [ 83.669161][ T5963] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 83.669161][ T5963] ' (ret=-3): failed [ 83.695749][ T5964] IPv6: NLM_F_REPLACE set, but no existing node found! [ 83.717134][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.720252][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.744052][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.748394][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.787107][ T39] audit: type=1326 audit(1721574906.694:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.0.129" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3579 code=0x0 [ 83.909380][ T5970] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 83.911987][ T5970] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 83.917441][ T5970] vhci_hcd vhci_hcd.0: Device attached [ 83.931453][ T5970] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 83.934220][ T5970] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 83.938037][ T5970] vhci_hcd vhci_hcd.0: Device attached [ 83.967423][ T5973] vhci_hcd: connection closed [ 83.967565][ T5971] vhci_hcd: connection closed [ 83.967571][ T78] vhci_hcd: stop threads [ 83.967583][ T78] vhci_hcd: release socket [ 83.974618][ T78] vhci_hcd: disconnect device [ 83.979332][ T78] vhci_hcd: stop threads [ 83.980873][ T78] vhci_hcd: release socket [ 83.982386][ T78] vhci_hcd: disconnect device [ 84.314750][ T5214] Bluetooth: hci3: command 0x0406 tx timeout [ 85.248858][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 85.306129][ T5979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.132'. [ 85.391647][ T5983] netlink: 'syz.1.132': attribute type 4 has an invalid length. [ 85.451264][ T5979] netlink: 'syz.1.132': attribute type 4 has an invalid length. [ 85.826144][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 85.854438][ T5214] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 85.918236][ T5997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.136'. [ 85.985894][ T5997] netlink: 'syz.0.136': attribute type 4 has an invalid length. [ 86.019347][ T5993] netlink: 'syz.0.136': attribute type 4 has an invalid length. [ 86.276219][ T6004] IPv6: NLM_F_REPLACE set, but no existing node found! [ 86.326885][ T6002] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 86.362237][ T39] audit: type=1326 audit(1721574909.264:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.2.138" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x0 [ 86.872162][ T6011] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 86.875005][ T6011] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 86.879238][ T6011] vhci_hcd vhci_hcd.0: Device attached [ 86.887181][ T6011] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 86.887980][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.889909][ T6011] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 86.897961][ T6011] vhci_hcd vhci_hcd.0: Device attached [ 86.915767][ T6014] vhci_hcd: connection closed [ 86.915934][ T78] vhci_hcd: stop threads [ 86.915965][ T6012] vhci_hcd: connection closed [ 86.917868][ T78] vhci_hcd: release socket [ 86.917884][ T78] vhci_hcd: disconnect device [ 86.926727][ T78] vhci_hcd: stop threads [ 86.928476][ T78] vhci_hcd: release socket [ 86.930450][ T78] vhci_hcd: disconnect device [ 86.956531][ T56] cfg80211: failed to load regulatory.db [ 87.110454][ T5216] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.114800][ T5216] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.118678][ T5216] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.122628][ T5216] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.129209][ T5216] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.132806][ T5216] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.155278][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 87.191607][ T6023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.141'. [ 87.280095][ T6023] netlink: 'syz.0.141': attribute type 4 has an invalid length. [ 87.313673][ T6023] netlink: 'syz.0.141': attribute type 4 has an invalid length. [ 87.325002][ T6018] chnl_net:caif_netlink_parms(): no params data found [ 87.377676][ T6034] FAULT_INJECTION: forcing a failure. [ 87.377676][ T6034] name failslab, interval 1, probability 0, space 0, times 0 [ 87.382654][ T6034] CPU: 1 PID: 6034 Comm: syz.0.143 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 87.387117][ T6034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.391730][ T6034] Call Trace: [ 87.393213][ T6034] [ 87.394517][ T6034] dump_stack_lvl+0x16c/0x1f0 [ 87.396655][ T6034] should_fail_ex+0x497/0x5b0 [ 87.398709][ T6034] should_failslab+0x9/0x20 [ 87.400671][ T6034] kmem_cache_alloc_node_noprof+0x71/0x310 [ 87.403268][ T6034] ? __alloc_skb+0x2b3/0x380 [ 87.405331][ T6034] __alloc_skb+0x2b3/0x380 [ 87.407275][ T6034] ? __pfx___alloc_skb+0x10/0x10 [ 87.409457][ T6034] ? __pfx___might_resched+0x10/0x10 [ 87.411756][ T6034] netlink_alloc_large_skb+0x69/0x130 [ 87.414059][ T6034] netlink_sendmsg+0x689/0xd70 [ 87.416100][ T6034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.418420][ T6034] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 87.420754][ T6034] ____sys_sendmsg+0x9b4/0xb50 [ 87.422840][ T6034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.425148][ T6034] ? get_compat_msghdr+0x11b/0x170 [ 87.427375][ T6034] ? __pfx___lock_acquire+0x10/0x10 [ 87.429674][ T6034] ___sys_sendmsg+0x135/0x1e0 [ 87.431727][ T6034] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.434003][ T6034] ? ksys_write+0x21c/0x260 [ 87.435990][ T6034] ? __fget_light+0x173/0x210 [ 87.438068][ T6034] __sys_sendmsg+0x117/0x1f0 [ 87.440087][ T6034] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.442358][ T6034] __do_fast_syscall_32+0x73/0x120 [ 87.444656][ T6034] do_fast_syscall_32+0x32/0x80 [ 87.446782][ T6034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 87.449548][ T6034] RIP: 0023:0xf7fa3579 [ 87.451319][ T6034] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 87.459568][ T6034] RSP: 002b:00000000f5d5656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 87.463142][ T6034] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000600 [ 87.466426][ T6034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 87.469853][ T6034] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 87.473256][ T6034] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 87.476610][ T6034] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 87.480016][ T6034] [ 87.522132][ T6018] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.526219][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.529481][ T6018] bridge_slave_0: entered allmulticast mode [ 87.533583][ T6018] bridge_slave_0: entered promiscuous mode [ 87.538964][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.541864][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.544903][ T6018] bridge_slave_1: entered allmulticast mode [ 87.548844][ T6018] bridge_slave_1: entered promiscuous mode [ 87.601454][ T6018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.607083][ T6018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.650849][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 87.687463][ T6018] team0: Port device team_slave_0 added [ 87.693519][ T6018] team0: Port device team_slave_1 added [ 87.724522][ T6047] libceph: resolve '. [ 87.724522][ T6047] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 87.724522][ T6047] ' (ret=-3): failed [ 87.798985][ T6044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.145'. [ 87.806976][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.810069][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.821868][ T6018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.829242][ T6018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.832260][ T6018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.843070][ T6018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.923085][ T6044] netlink: 'syz.0.145': attribute type 4 has an invalid length. [ 87.960409][ T6018] hsr_slave_0: entered promiscuous mode [ 87.965881][ T6018] hsr_slave_1: entered promiscuous mode [ 87.969182][ T6018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.972375][ T6018] Cannot create hsr debugfs directory [ 87.975508][ T6044] netlink: 'syz.0.145': attribute type 4 has an invalid length. [ 88.073009][ T6053] netlink: 204 bytes leftover after parsing attributes in process `syz.0.147'. [ 88.323194][ T6060] MTD: Couldn't look up '/dev/sg0': -15 [ 88.483288][ T6066] libceph: resolve '. [ 88.483288][ T6066] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 88.483288][ T6066] ' (ret=-3): failed [ 89.131543][ T6081] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 89.134392][ T6081] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 89.138733][ T6081] vhci_hcd vhci_hcd.0: Device attached [ 89.149988][ T6081] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 89.152551][ T6081] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 89.157413][ T6081] vhci_hcd vhci_hcd.0: Device attached [ 89.184418][ T5214] Bluetooth: hci0: command tx timeout [ 89.189694][ T6082] vhci_hcd: connection closed [ 89.189776][ T6084] vhci_hcd: connection closed [ 89.192591][ T1086] vhci_hcd: stop threads [ 89.196706][ T1086] vhci_hcd: release socket [ 89.198640][ T1086] vhci_hcd: disconnect device [ 89.202989][ T1086] vhci_hcd: stop threads [ 89.205041][ T1086] vhci_hcd: release socket [ 89.207199][ T1086] vhci_hcd: disconnect device [ 89.440487][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.494703][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 89.535978][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.611716][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.624353][ T6087] netlink: 'syz.1.155': attribute type 4 has an invalid length. [ 89.645890][ T6087] netlink: 'syz.1.155': attribute type 4 has an invalid length. [ 89.741214][ T11] bridge_slave_1: left allmulticast mode [ 89.744402][ T11] bridge_slave_1: left promiscuous mode [ 89.746529][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.758220][ T11] bridge_slave_0: left allmulticast mode [ 89.760239][ T11] bridge_slave_0: left promiscuous mode [ 89.762714][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.916243][ T6101] kAFS: unparsable volume name [ 90.169589][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.203587][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.214892][ T11] bond0 (unregistering): Released all slaves [ 90.248280][ T6095] ip6gretap0 speed is unknown, defaulting to 1000 [ 90.270975][ T6095] ip6gretap0 speed is unknown, defaulting to 1000 [ 90.310953][ T6095] ip6gretap0 speed is unknown, defaulting to 1000 [ 90.396230][ T6095] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.503136][ T6095] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 90.655961][ T6095] ip6gretap0 speed is unknown, defaulting to 1000 [ 90.689780][ T6095] ip6gretap0 speed is unknown, defaulting to 1000 [ 90.699041][ T6095] ip6gretap0 speed is unknown, defaulting to 1000 [ 90.719796][ T6095] ip6gretap0 speed is unknown, defaulting to 1000 [ 90.728196][ T6095] ip6gretap0 speed is unknown, defaulting to 1000 [ 90.769675][ T11] hsr_slave_0: left promiscuous mode [ 90.773394][ T11] hsr_slave_1: left promiscuous mode [ 90.791686][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.795700][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.810455][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.813655][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.895338][ T11] veth1_macvtap: left promiscuous mode [ 90.897302][ T11] veth0_macvtap: left promiscuous mode [ 90.899312][ T11] veth1_vlan: left promiscuous mode [ 90.901047][ T11] veth0_vlan: left promiscuous mode [ 91.160199][ T6121] MTD: Couldn't look up '/dev/sg0': -15 [ 91.274344][ T5214] Bluetooth: hci0: command tx timeout [ 91.693979][ T11] team0 (unregistering): Port device team_slave_1 removed [ 91.784410][ T11] team0 (unregistering): Port device team_slave_0 removed [ 91.828002][ T6126] libceph: resolve '. [ 91.828002][ T6126] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 91.828002][ T6126] ' (ret=-3): failed [ 92.375190][ T6128] __nla_validate_parse: 1 callbacks suppressed [ 92.375206][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 92.418759][ T6018] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.432905][ T6018] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.445838][ T6018] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.455046][ T6018] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.487579][ T6128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.164'. [ 92.565669][ T6132] netlink: 'syz.0.164': attribute type 4 has an invalid length. [ 92.596717][ T6018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.605752][ T6128] netlink: 'syz.0.164': attribute type 4 has an invalid length. [ 92.637249][ T6018] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.648371][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.651503][ T5250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.674485][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.678102][ T5250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.879682][ T6018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.931835][ T6018] veth0_vlan: entered promiscuous mode [ 92.943283][ T6018] veth1_vlan: entered promiscuous mode [ 92.965908][ T6018] veth0_macvtap: entered promiscuous mode [ 92.970132][ T6018] veth1_macvtap: entered promiscuous mode [ 92.986584][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.990387][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.993661][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.999668][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.003155][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.009606][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.014035][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.020926][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.024099][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.030984][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.034766][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.038097][ T6018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.041692][ T6018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.048203][ T6018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.052222][ T6018] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.057985][ T6018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.060591][ T6018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.063307][ T6018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.159406][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.169609][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.226817][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.230010][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.345173][ T5214] Bluetooth: hci0: command tx timeout [ 93.367111][ T6165] binder: 6162:6165 ioctl 4018620d 0 returned -22 [ 93.818079][ T6173] MTD: Couldn't look up '/dev/sg0': -15 [ 94.458236][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.175'. [ 94.513535][ T6190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.175'. [ 94.577993][ T6190] netlink: 'syz.1.175': attribute type 4 has an invalid length. [ 94.599476][ T6190] netlink: 'syz.1.175': attribute type 4 has an invalid length. [ 94.713308][ T6211] libceph: resolve '. [ 94.713308][ T6211] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 94.713308][ T6211] ' (ret=-3): failed [ 96.243148][ T1170] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.615911][ T5216] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.620311][ T5216] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.627041][ T5216] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.632612][ T5216] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.639462][ T5216] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.643094][ T5216] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.791073][ T6243] ip6gretap0 speed is unknown, defaulting to 1000 [ 97.058281][ T6243] chnl_net:caif_netlink_parms(): no params data found [ 97.178619][ T39] audit: type=1804 audit(1721574920.084:7): pid=6249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.185" name="/" dev="pidfs" ino=6550 res=1 errno=0 [ 97.271978][ T6243] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.276089][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.282982][ T6243] bridge_slave_0: entered allmulticast mode [ 97.290394][ T6243] bridge_slave_0: entered promiscuous mode [ 97.298583][ T6243] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.302365][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.309097][ T6243] bridge_slave_1: entered allmulticast mode [ 97.312460][ T6243] bridge_slave_1: entered promiscuous mode [ 97.436648][ T6243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.477952][ T6243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.561056][ T6243] team0: Port device team_slave_0 added [ 97.568171][ T6243] team0: Port device team_slave_1 added [ 97.644424][ T6243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.647484][ T6243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.659065][ T6243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.668953][ T6243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.671827][ T6243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.682745][ T6243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.787680][ T6243] hsr_slave_0: entered promiscuous mode [ 97.793534][ T6243] hsr_slave_1: entered promiscuous mode [ 97.796995][ T6243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.800320][ T6243] Cannot create hsr debugfs directory [ 98.159291][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 98.249231][ T6271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.189'. [ 98.326016][ T6271] netlink: 'syz.1.189': attribute type 4 has an invalid length. [ 98.370435][ T6268] netlink: 'syz.1.189': attribute type 4 has an invalid length. [ 98.704445][ T5214] Bluetooth: hci0: command tx timeout [ 98.727743][ T1170] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.846766][ T1170] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.912635][ T1170] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.115815][ T1170] bridge_slave_1: left allmulticast mode [ 99.118229][ T1170] bridge_slave_1: left promiscuous mode [ 99.120920][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.149490][ T1170] bridge_slave_0: left allmulticast mode [ 99.151668][ T1170] bridge_slave_0: left promiscuous mode [ 99.153903][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.609352][ T6290] libceph: resolve '. [ 99.609352][ T6290] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 99.609352][ T6290] ' (ret=-3): failed [ 99.703719][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.715179][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.738697][ T1170] bond0 (unregistering): Released all slaves [ 99.742800][ T6291] libceph: resolve '. [ 99.742800][ T6291] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 99.742800][ T6291] ' (ret=-3): failed [ 100.254832][ T1170] hsr_slave_0: left promiscuous mode [ 100.268448][ T1170] hsr_slave_1: left promiscuous mode [ 100.288924][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.292126][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.305462][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.308727][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.413337][ T1170] veth1_macvtap: left promiscuous mode [ 100.415580][ T1170] veth0_macvtap: left promiscuous mode [ 100.417537][ T1170] veth1_vlan: left promiscuous mode [ 100.424784][ T1170] veth0_vlan: left promiscuous mode [ 100.794424][ T5214] Bluetooth: hci0: command tx timeout [ 101.842962][ T6314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.916790][ T1170] team0 (unregistering): Port device team_slave_1 removed [ 101.961895][ T6314] netlink: 220 bytes leftover after parsing attributes in process `syz.2.196'. [ 101.966117][ T6314] netlink: 220 bytes leftover after parsing attributes in process `syz.2.196'. [ 102.032915][ T1170] team0 (unregistering): Port device team_slave_0 removed [ 102.783870][ T6311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.196'. [ 102.819303][ T6314] ip6gretap0 speed is unknown, defaulting to 1000 [ 102.864350][ T5214] Bluetooth: hci0: command tx timeout [ 102.871497][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'. [ 102.923560][ T6322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.199'. [ 102.959852][ T6243] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.987103][ T6243] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.007398][ T6243] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.021210][ T6243] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.035463][ T6322] netlink: 'syz.1.199': attribute type 4 has an invalid length. [ 103.079399][ T105] Bluetooth: (null): Invalid header checksum [ 103.082638][ T6322] netlink: 'syz.1.199': attribute type 4 has an invalid length. [ 103.086295][ T105] Bluetooth: (null): Invalid header checksum [ 103.165514][ T6243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.181366][ T6243] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.184828][ T45] Bluetooth: (null): Invalid header checksum [ 103.199497][ T5268] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.202547][ T5268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.208913][ T5268] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.212102][ T5268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.270901][ T6243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.305992][ T11] Bluetooth: (null): Invalid header checksum [ 103.310577][ T6339] IPv6: NLM_F_REPLACE set, but no existing node found! [ 103.415305][ T45] Bluetooth: (null): Invalid header checksum [ 103.457144][ T39] audit: type=1326 audit(1721574926.364:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.2.200" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x0 [ 103.572480][ T6243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.707310][ T6243] veth0_vlan: entered promiscuous mode [ 103.722871][ T6243] veth1_vlan: entered promiscuous mode [ 103.769078][ T6243] veth0_macvtap: entered promiscuous mode [ 103.786187][ T6243] veth1_macvtap: entered promiscuous mode [ 103.800339][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.807061][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.812119][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.816734][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.820431][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.825086][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.829906][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.836541][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.840883][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.844796][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.849267][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.853179][ T6243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.857841][ T6243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.863168][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.901559][ T6243] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.911367][ T6243] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.925544][ T6243] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.929127][ T6243] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.092264][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.098136][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.140753][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.155262][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.026444][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 105.056130][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 105.062036][ T6381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.211'. [ 105.130918][ T6377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.210'. [ 105.199069][ T6377] netlink: 'syz.1.210': attribute type 4 has an invalid length. [ 105.255807][ T6377] netlink: 'syz.1.210': attribute type 4 has an invalid length. [ 105.427809][ T6386] MTD: Couldn't look up '/dev/sg0': -15 [ 105.440447][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.528996][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.653361][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.747449][ T5216] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.748582][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.751237][ T5216] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.760426][ T5216] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.764110][ T5216] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.768434][ T5216] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 105.771604][ T5216] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.805696][ T6394] ip6gretap0 speed is unknown, defaulting to 1000 [ 106.020940][ T11] bridge_slave_1: left allmulticast mode [ 106.025891][ T11] bridge_slave_1: left promiscuous mode [ 106.029660][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.037564][ T11] bridge_slave_0: left allmulticast mode [ 106.044419][ T11] bridge_slave_0: left promiscuous mode [ 106.046222][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'. [ 106.047087][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.335340][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.342398][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.348070][ T11] bond0 (unregistering): Released all slaves [ 106.390537][ T6409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.217'. [ 106.395294][ T6413] netlink: 'syz.2.217': attribute type 4 has an invalid length. [ 106.408397][ T6414] netlink: 'syz.2.217': attribute type 4 has an invalid length. [ 106.464489][ T6394] chnl_net:caif_netlink_parms(): no params data found [ 106.951427][ T6394] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.957198][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.960269][ T6394] bridge_slave_0: entered allmulticast mode [ 106.975696][ T6394] bridge_slave_0: entered promiscuous mode [ 106.994730][ T6394] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.999110][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.008225][ T6394] bridge_slave_1: entered allmulticast mode [ 107.016006][ T6394] bridge_slave_1: entered promiscuous mode [ 107.129309][ T6394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.142779][ T6394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.168835][ T11] hsr_slave_0: left promiscuous mode [ 107.187567][ T11] hsr_slave_1: left promiscuous mode [ 107.190670][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.195393][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.201454][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.210122][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.260976][ T11] veth1_macvtap: left promiscuous mode [ 107.263336][ T11] veth0_macvtap: left promiscuous mode [ 107.271885][ T11] veth1_vlan: left promiscuous mode [ 107.274215][ T11] veth0_vlan: left promiscuous mode [ 107.487327][ T5214] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.491337][ T5214] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.495142][ T5214] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.499078][ T5214] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.502803][ T5214] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 107.508107][ T5214] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.719287][ T6440] MTD: Couldn't look up '/dev/sg0': -15 [ 107.833366][ T5216] Bluetooth: hci0: command tx timeout [ 108.401632][ T11] team0 (unregistering): Port device team_slave_1 removed [ 108.492620][ T11] team0 (unregistering): Port device team_slave_0 removed [ 109.229145][ T6394] team0: Port device team_slave_0 added [ 109.234660][ T6394] team0: Port device team_slave_1 added [ 109.325846][ T6394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.328875][ T6394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.340883][ T6394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.346569][ T6436] ip6gretap0 speed is unknown, defaulting to 1000 [ 109.347863][ T6394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.352470][ T6394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.364037][ T6394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.481455][ T6394] hsr_slave_0: entered promiscuous mode [ 109.485072][ T6394] hsr_slave_1: entered promiscuous mode [ 109.488285][ T6394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.491108][ T6394] Cannot create hsr debugfs directory [ 109.568954][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'. [ 109.585692][ T5216] Bluetooth: hci3: command tx timeout [ 109.645670][ T6455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.222'. [ 109.716167][ T6452] netlink: 'syz.1.222': attribute type 4 has an invalid length. [ 109.792162][ T6452] netlink: 'syz.1.222': attribute type 4 has an invalid length. [ 109.904992][ T5216] Bluetooth: hci0: command tx timeout [ 110.147489][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.324114][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.428158][ T6436] chnl_net:caif_netlink_parms(): no params data found [ 110.474292][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.615621][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.723934][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 110.795054][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.801000][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.817598][ T6436] bridge_slave_0: entered allmulticast mode [ 110.824539][ T6436] bridge_slave_0: entered promiscuous mode [ 110.845417][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.848399][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.851105][ T6436] bridge_slave_1: entered allmulticast mode [ 110.854778][ T6436] bridge_slave_1: entered promiscuous mode [ 110.859154][ T6495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.227'. [ 110.882648][ T6394] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.974656][ T6436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.978738][ T6394] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.985391][ T6394] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.990921][ T6495] netlink: 'syz.2.227': attribute type 4 has an invalid length. [ 111.016537][ T6436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.076289][ T6394] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.110411][ T6494] netlink: 'syz.2.227': attribute type 4 has an invalid length. [ 111.125689][ T6436] team0: Port device team_slave_0 added [ 111.159228][ T6436] team0: Port device team_slave_1 added [ 111.271722][ T11] bridge_slave_1: left allmulticast mode [ 111.273593][ T11] bridge_slave_1: left promiscuous mode [ 111.285900][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.303917][ T11] bridge_slave_0: left allmulticast mode [ 111.311520][ T11] bridge_slave_0: left promiscuous mode [ 111.318173][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.654671][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.663753][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.668574][ T5216] Bluetooth: hci3: command tx timeout [ 111.685899][ T11] bond0 (unregistering): Released all slaves [ 111.719930][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.722927][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.738730][ T6436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.865678][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.868888][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.891926][ T6436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.984650][ T5216] Bluetooth: hci0: command tx timeout [ 112.079389][ T6436] hsr_slave_0: entered promiscuous mode [ 112.088764][ T6436] hsr_slave_1: entered promiscuous mode [ 112.091924][ T6436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.095169][ T6436] Cannot create hsr debugfs directory [ 112.203361][ T6508] netlink: 40 bytes leftover after parsing attributes in process `syz.1.230'. [ 112.213558][ T6510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.267303][ T6508] netlink: 220 bytes leftover after parsing attributes in process `syz.1.230'. [ 112.271196][ T6508] netlink: 220 bytes leftover after parsing attributes in process `syz.1.230'. [ 112.275298][ T11] hsr_slave_0: left promiscuous mode [ 112.283009][ T11] hsr_slave_1: left promiscuous mode [ 112.286796][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.290019][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.294053][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.297588][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.334878][ T11] veth1_macvtap: left promiscuous mode [ 112.337389][ T11] veth0_macvtap: left promiscuous mode [ 112.339952][ T11] veth1_vlan: left promiscuous mode [ 112.342494][ T11] veth0_vlan: left promiscuous mode [ 112.859985][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 113.024536][ T11] team0 (unregistering): Port device team_slave_1 removed [ 113.078874][ T11] team0 (unregistering): Port device team_slave_0 removed [ 113.551677][ T6516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.232'. [ 113.555699][ T6520] netlink: 'syz.2.232': attribute type 4 has an invalid length. [ 113.564414][ T6521] netlink: 'syz.2.232': attribute type 4 has an invalid length. [ 113.603426][ T6508] ip6gretap0 speed is unknown, defaulting to 1000 [ 113.719371][ T6394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.754465][ T5216] Bluetooth: hci3: command tx timeout [ 113.790698][ T6394] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.825962][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.829193][ T5249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.864912][ T825] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.868197][ T825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.065949][ T5216] Bluetooth: hci0: command tx timeout [ 114.252908][ T6436] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 114.262824][ T6436] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 114.282956][ T6394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.322792][ T6436] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 114.332031][ T6436] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 114.582996][ T6552] MTD: Couldn't look up '/dev/sg0': -15 [ 114.638785][ T6394] veth0_vlan: entered promiscuous mode [ 114.673239][ T6394] veth1_vlan: entered promiscuous mode [ 114.705209][ T6436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.732345][ T6436] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.757631][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.761616][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.796216][ T6394] veth0_macvtap: entered promiscuous mode [ 114.807233][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.810595][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.820215][ T6394] veth1_macvtap: entered promiscuous mode [ 114.869178][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.873840][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.878547][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.883181][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.889326][ T6394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.903615][ T6436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.909304][ T6436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.927347][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.946793][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.951474][ T6394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.956448][ T6394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.962406][ T6394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.985513][ T6394] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.994549][ T6394] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.005350][ T6394] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.017680][ T6394] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.096439][ T6558] MTD: Couldn't look up '/dev/sg0': -15 [ 115.138941][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.166633][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.253981][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.263996][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.555350][ T6436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.652397][ T6578] FAULT_INJECTION: forcing a failure. [ 115.652397][ T6578] name failslab, interval 1, probability 0, space 0, times 0 [ 115.658165][ T6578] CPU: 1 PID: 6578 Comm: syz.1.237 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 115.662341][ T6578] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.667124][ T6578] Call Trace: [ 115.668622][ T6578] [ 115.669954][ T6578] dump_stack_lvl+0x16c/0x1f0 [ 115.672163][ T6578] should_fail_ex+0x497/0x5b0 [ 115.674264][ T6578] should_failslab+0x9/0x20 [ 115.676287][ T6578] __kmalloc_node_noprof+0xd1/0x440 [ 115.678583][ T6578] ? __kvmalloc_node_noprof+0x9d/0x1a0 [ 115.681019][ T6578] __kvmalloc_node_noprof+0x9d/0x1a0 [ 115.683359][ T6578] alloc_netdev_mqs+0xc26/0x1290 [ 115.685645][ T6578] rtnl_create_link+0xbed/0xf10 [ 115.687824][ T6578] __rtnl_newlink+0x10b3/0x1960 [ 115.690001][ T6578] ? __pfx___rtnl_newlink+0x10/0x10 [ 115.692371][ T6578] rtnl_newlink+0x67/0xa0 [ 115.694298][ T6578] ? __pfx_rtnl_newlink+0x10/0x10 [ 115.696528][ T6578] rtnetlink_rcv_msg+0x3c7/0xea0 [ 115.698757][ T6578] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 115.701175][ T6578] ? __pfx___dev_queue_xmit+0x10/0x10 [ 115.703611][ T6578] netlink_rcv_skb+0x165/0x410 [ 115.705964][ T6578] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 115.708483][ T6578] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.710910][ T6578] ? netlink_deliver_tap+0x1ae/0xcf0 [ 115.713261][ T6578] netlink_unicast+0x544/0x830 [ 115.715459][ T6578] ? __pfx_netlink_unicast+0x10/0x10 [ 115.717929][ T6578] ? __phys_addr_symbol+0x30/0x80 [ 115.720226][ T6578] ? __check_object_size+0x48e/0x720 [ 115.724094][ T6578] netlink_sendmsg+0x8b8/0xd70 [ 115.726292][ T6578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.728746][ T6578] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 115.731200][ T6578] ____sys_sendmsg+0x9b4/0xb50 [ 115.733386][ T6578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.735951][ T6578] ? get_compat_msghdr+0x11b/0x170 [ 115.738266][ T6578] ? __pfx___lock_acquire+0x10/0x10 [ 115.740410][ T6578] ___sys_sendmsg+0x135/0x1e0 [ 115.742500][ T6578] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.744891][ T6578] ? ksys_write+0x21c/0x260 [ 115.746906][ T6578] ? __fget_light+0x173/0x210 [ 115.749005][ T6578] __sys_sendmsg+0x117/0x1f0 [ 115.751046][ T6578] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.753457][ T6578] __do_fast_syscall_32+0x73/0x120 [ 115.755794][ T6578] do_fast_syscall_32+0x32/0x80 [ 115.758170][ T6578] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.761018][ T6578] RIP: 0023:0xf744e579 [ 115.762907][ T6578] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 115.771574][ T6578] RSP: 002b:00000000f5d6656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 115.775380][ T6578] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 115.778919][ T6578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.782459][ T6578] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.785934][ T6578] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 115.789013][ T6578] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.792137][ T6578] [ 115.827048][ T5216] Bluetooth: hci3: command tx timeout [ 115.840765][ T6582] FAULT_INJECTION: forcing a failure. [ 115.840765][ T6582] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 115.852814][ T6582] CPU: 0 PID: 6582 Comm: syz.1.238 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 115.857374][ T6582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.861950][ T6582] Call Trace: [ 115.863397][ T6582] [ 115.864688][ T6582] dump_stack_lvl+0x16c/0x1f0 [ 115.867595][ T6582] should_fail_ex+0x497/0x5b0 [ 115.875183][ T6436] veth0_vlan: entered promiscuous mode [ 115.880523][ T6582] _copy_from_user+0x30/0xf0 [ 115.880551][ T6582] get_compat_msghdr+0xa8/0x170 [ 115.880570][ T6582] ? __pfx_get_compat_msghdr+0x10/0x10 [ 115.889729][ T6582] ? kfree+0x245/0x3b0 [ 115.891556][ T6582] ___sys_sendmsg+0x1b0/0x1e0 [ 115.893647][ T6582] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.895932][ T6582] ? __pfx_lock_release+0x10/0x10 [ 115.898115][ T6582] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 115.898951][ T6436] veth1_vlan: entered promiscuous mode [ 115.900624][ T6582] ? __pfx___might_resched+0x10/0x10 [ 115.905502][ T6582] ? __fget_light+0x173/0x210 [ 115.907596][ T6582] __sys_sendmmsg+0x2a5/0x450 [ 115.909648][ T6582] ? __pfx___sys_sendmmsg+0x10/0x10 [ 115.911900][ T6582] ? vfs_write+0x14d/0x1140 [ 115.913820][ T6582] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 115.916424][ T6582] ? fput+0x32/0x390 [ 115.918317][ T6582] ? ksys_write+0x1ab/0x260 [ 115.920290][ T6582] ? __pfx_ksys_write+0x10/0x10 [ 115.922222][ T6582] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 115.924463][ T6582] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 115.927257][ T6582] __do_fast_syscall_32+0x73/0x120 [ 115.929474][ T6582] do_fast_syscall_32+0x32/0x80 [ 115.931626][ T6582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.934399][ T6582] RIP: 0023:0xf744e579 [ 115.936134][ T6582] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 115.944177][ T6582] RSP: 002b:00000000f5d6656c EFLAGS: 00000296 ORIG_RAX: 0000000000000159 [ 115.947281][ T6582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200038c0 [ 115.950429][ T6436] veth0_macvtap: entered promiscuous mode [ 115.950657][ T6582] RDX: 00000000ffffff06 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.956837][ T6582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.960297][ T6582] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 115.961198][ T6436] veth1_macvtap: entered promiscuous mode [ 115.963336][ T6582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 115.969141][ T6582] [ 115.982146][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.987636][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.992822][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.997850][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.002151][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.006742][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.013201][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.026354][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.031266][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.039164][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.044084][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.048602][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.053172][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.059604][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.065697][ T6587] netlink: 'syz.1.240': attribute type 10 has an invalid length. [ 116.085854][ T6587] team0: Port device netdevsim0 added [ 116.103387][ T6436] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.107607][ T6436] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.111453][ T6436] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.115901][ T6436] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.138326][ T6587] netlink: 'syz.1.240': attribute type 10 has an invalid length. [ 116.174064][ T6587] team0: Port device netdevsim0 removed [ 116.179898][ T6587] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 116.249115][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.252244][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.276402][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.279597][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.317855][ T6591] FAULT_INJECTION: forcing a failure. [ 116.317855][ T6591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.327183][ T6591] CPU: 1 PID: 6591 Comm: syz.1.241 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 116.332568][ T6591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.338393][ T6591] Call Trace: [ 116.340475][ T6591] [ 116.342119][ T6591] dump_stack_lvl+0x16c/0x1f0 [ 116.343903][ T6591] should_fail_ex+0x497/0x5b0 [ 116.345717][ T6591] _copy_to_user+0x30/0xc0 [ 116.347447][ T6591] binder_ioctl+0x2207/0x6b10 [ 116.349295][ T6591] ? kfree+0x12a/0x3b0 [ 116.350847][ T6591] ? tomoyo_path_number_perm+0x467/0x5b0 [ 116.352985][ T6591] ? tomoyo_path_number_perm+0x190/0x5b0 [ 116.355059][ T6591] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 116.357078][ T6591] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 116.359168][ T6591] ? __pfx_binder_ioctl+0x10/0x10 [ 116.361109][ T6591] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 116.363173][ T6591] ? __pfx_lock_release+0x10/0x10 [ 116.365397][ T6591] ? __fget_files+0x256/0x400 [ 116.367537][ T6591] ? __pfx_binder_ioctl+0x10/0x10 [ 116.369526][ T6591] compat_ptr_ioctl+0x71/0xb0 [ 116.371344][ T6591] ? __pfx_compat_ptr_ioctl+0x10/0x10 [ 116.373415][ T6591] __do_compat_sys_ioctl+0x2c3/0x330 [ 116.375413][ T6591] __do_fast_syscall_32+0x73/0x120 [ 116.377355][ T6591] do_fast_syscall_32+0x32/0x80 [ 116.379208][ T6591] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.381596][ T6591] RIP: 0023:0xf744e579 [ 116.383152][ T6591] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 116.389604][ T6591] RSP: 002b:00000000f5d6656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 116.392439][ T6591] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 116.395877][ T6591] RDX: 0000000020000580 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.398891][ T6591] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.401906][ T6591] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 116.404957][ T6591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.408380][ T6591] [ 116.417466][ T6591] binder: 6590:6591 ioctl c0306201 20000580 returned -14 [ 116.688594][ T45] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.812735][ T6599] FAULT_INJECTION: forcing a failure. [ 116.812735][ T6599] name failslab, interval 1, probability 0, space 0, times 0 [ 116.818705][ T6599] CPU: 3 PID: 6599 Comm: syz.1.243 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 116.823775][ T6599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.829065][ T6599] Call Trace: [ 116.830423][ T6599] [ 116.831734][ T6599] dump_stack_lvl+0x16c/0x1f0 [ 116.833967][ T6599] should_fail_ex+0x497/0x5b0 [ 116.836115][ T6599] should_failslab+0x9/0x20 [ 116.838144][ T6599] __kmalloc_cache_node_noprof+0x6e/0x360 [ 116.840692][ T6599] ? __get_vm_area_node+0xe1/0x2d0 [ 116.843000][ T6599] __get_vm_area_node+0xe1/0x2d0 [ 116.845695][ T6599] __vmalloc_node_range_noprof+0x276/0x1520 [ 116.848490][ T6599] ? bpf_check+0x1fa/0xb3f0 [ 116.850572][ T6599] ? find_held_lock+0x2d/0x110 [ 116.852748][ T6599] ? rcu_read_unlock+0x17/0x60 [ 116.855008][ T6599] ? __pfx_lock_release+0x10/0x10 [ 116.857462][ T6599] ? bpf_check+0x1fa/0xb3f0 [ 116.859518][ T6599] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 116.862325][ T6599] ? ___kmalloc_large_node+0x127/0x1a0 [ 116.864938][ T6599] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.867392][ T6599] ? bpf_check+0x1fa/0xb3f0 [ 116.869460][ T6599] vzalloc_noprof+0x6b/0x90 [ 116.871511][ T6599] ? bpf_check+0x1fa/0xb3f0 [ 116.873786][ T6599] bpf_check+0x1fa/0xb3f0 [ 116.875910][ T6599] ? __pfx___lock_acquire+0x10/0x10 [ 116.878463][ T6599] ? __pfx_bpf_check+0x10/0x10 [ 116.880642][ T6599] ? ktime_get_with_offset+0x13a/0x240 [ 116.883005][ T6599] ? __pfx_lock_release+0x10/0x10 [ 116.885159][ T6599] ? find_held_lock+0x2d/0x110 [ 116.887264][ T6599] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 116.889861][ T6599] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.892343][ T6599] ? read_tsc+0x9/0x20 [ 116.894334][ T6599] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 116.896877][ T6599] ? bpf_obj_name_cpy+0x156/0x1b0 [ 116.899120][ T6599] bpf_prog_load+0xe3f/0x2670 [ 116.901282][ T6599] ? __pfx_bpf_prog_load+0x10/0x10 [ 116.903654][ T6599] ? find_held_lock+0x2d/0x110 [ 116.906086][ T6599] ? security_bpf+0x8c/0xc0 [ 116.908232][ T6599] __sys_bpf+0x9e0/0x5600 [ 116.910664][ T6599] ? __pfx___sys_bpf+0x10/0x10 [ 116.913194][ T6599] ? ksys_write+0x12f/0x260 [ 116.917733][ T6599] ? find_held_lock+0x2d/0x110 [ 116.920344][ T6599] ? ksys_write+0x21c/0x260 [ 116.922373][ T6599] ? __pfx_lock_release+0x10/0x10 [ 116.924522][ T6599] ? vfs_write+0x14d/0x1140 [ 116.926496][ T6599] ? __mutex_unlock_slowpath+0x164/0x650 [ 116.929217][ T6599] ? fput+0x32/0x390 [ 116.930949][ T6599] ? ksys_write+0x1ab/0x260 [ 116.933087][ T6599] ? __pfx_ksys_write+0x10/0x10 [ 116.935732][ T6599] __ia32_sys_bpf+0x76/0xe0 [ 116.937708][ T6599] __do_fast_syscall_32+0x73/0x120 [ 116.939997][ T6599] do_fast_syscall_32+0x32/0x80 [ 116.941176][ T5214] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.942347][ T6599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.949721][ T5214] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.951159][ T6599] RIP: 0023:0xf744e579 [ 116.959481][ T6599] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 116.964425][ T5214] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.969235][ T6599] RSP: 002b:00000000f5d6656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 116.974221][ T5214] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.976173][ T6599] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 116.980844][ T5214] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 116.982505][ T6599] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.985858][ T5214] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.988911][ T6599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.995482][ T6599] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 116.998870][ T6599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.002109][ T6599] [ 117.004451][ T6599] syz.1.243: vmalloc error: size 864, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 117.010684][ T6599] CPU: 2 PID: 6599 Comm: syz.1.243 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 117.014631][ T6599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.019433][ T6599] Call Trace: [ 117.020816][ T6599] [ 117.022273][ T6599] dump_stack_lvl+0x16c/0x1f0 [ 117.024754][ T6599] warn_alloc+0x24d/0x3a0 [ 117.027015][ T6599] ? __pfx_warn_alloc+0x10/0x10 [ 117.029566][ T6599] ? should_fail_ex+0x2de/0x5b0 [ 117.031934][ T6599] ? trace_kmalloc+0x2d/0xe0 [ 117.034059][ T6599] ? __kasan_kmalloc+0x8a/0xb0 [ 117.034965][ T6600] ip6gretap0 speed is unknown, defaulting to 1000 [ 117.036133][ T6599] ? __get_vm_area_node+0x1bc/0x2d0 [ 117.041920][ T6599] __vmalloc_node_range_noprof+0xc1e/0x1520 [ 117.044410][ T6599] ? find_held_lock+0x2d/0x110 [ 117.046821][ T6599] ? rcu_read_unlock+0x17/0x60 [ 117.049309][ T6599] ? __pfx_lock_release+0x10/0x10 [ 117.052269][ T6599] ? bpf_check+0x1fa/0xb3f0 [ 117.055018][ T6599] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.057849][ T6599] ? ___kmalloc_large_node+0x127/0x1a0 [ 117.060133][ T6599] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.062224][ T6599] ? bpf_check+0x1fa/0xb3f0 [ 117.064167][ T6599] vzalloc_noprof+0x6b/0x90 [ 117.066599][ T6599] ? bpf_check+0x1fa/0xb3f0 [ 117.069453][ T6599] bpf_check+0x1fa/0xb3f0 [ 117.071408][ T6599] ? __pfx___lock_acquire+0x10/0x10 [ 117.073909][ T6599] ? __pfx_bpf_check+0x10/0x10 [ 117.076336][ T6599] ? ktime_get_with_offset+0x13a/0x240 [ 117.079353][ T6599] ? __pfx_lock_release+0x10/0x10 [ 117.081740][ T6599] ? find_held_lock+0x2d/0x110 [ 117.083706][ T6599] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 117.086331][ T6599] ? lockdep_hardirqs_on+0x7c/0x110 [ 117.089416][ T6599] ? read_tsc+0x9/0x20 [ 117.091301][ T6599] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 117.093799][ T6599] ? bpf_obj_name_cpy+0x156/0x1b0 [ 117.096374][ T6599] bpf_prog_load+0xe3f/0x2670 [ 117.098321][ T6599] ? __pfx_bpf_prog_load+0x10/0x10 [ 117.100420][ T6599] ? find_held_lock+0x2d/0x110 [ 117.102398][ T6599] ? security_bpf+0x8c/0xc0 [ 117.104742][ T6599] __sys_bpf+0x9e0/0x5600 [ 117.106658][ T6599] ? __pfx___sys_bpf+0x10/0x10 [ 117.108836][ T6599] ? ksys_write+0x12f/0x260 [ 117.110940][ T6599] ? find_held_lock+0x2d/0x110 [ 117.113196][ T6599] ? ksys_write+0x21c/0x260 [ 117.115360][ T6599] ? __pfx_lock_release+0x10/0x10 [ 117.117732][ T6599] ? vfs_write+0x14d/0x1140 [ 117.119859][ T6599] ? __mutex_unlock_slowpath+0x164/0x650 [ 117.122228][ T6599] ? fput+0x32/0x390 [ 117.124648][ T6599] ? ksys_write+0x1ab/0x260 [ 117.127115][ T6599] ? __pfx_ksys_write+0x10/0x10 [ 117.130339][ T6599] __ia32_sys_bpf+0x76/0xe0 [ 117.132530][ T6599] __do_fast_syscall_32+0x73/0x120 [ 117.135184][ T6599] do_fast_syscall_32+0x32/0x80 [ 117.138004][ T6599] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.141088][ T6599] RIP: 0023:0xf744e579 [ 117.142878][ T6599] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 117.153266][ T6599] RSP: 002b:00000000f5d6656c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 117.157485][ T6599] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200000c0 [ 117.161204][ T6599] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.164651][ T6599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 117.168010][ T6599] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 117.171489][ T6599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.174877][ T6599] [ 117.181655][ T6599] Mem-Info: [ 117.183269][ T6599] active_anon:5332 inactive_anon:894 isolated_anon:0 [ 117.183269][ T6599] active_file:3578 inactive_file:26094 isolated_file:0 [ 117.183269][ T6599] unevictable:768 dirty:450 writeback:0 [ 117.183269][ T6599] slab_reclaimable:4495 slab_unreclaimable:52800 [ 117.183269][ T6599] mapped:10220 shmem:796 pagetables:691 [ 117.183269][ T6599] sec_pagetables:328 bounce:0 [ 117.183269][ T6599] kernel_misc_reclaimable:0 [ 117.183269][ T6599] free:128189 free_pcp:8537 free_cma:0 [ 117.202801][ T6599] Node 0 active_anon:704kB inactive_anon:4028kB active_file:428kB inactive_file:504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:7924kB dirty:660kB writeback:0kB shmem:1576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10300kB pagetables:2144kB sec_pagetables:1264kB all_unreclaimable? no [ 117.216842][ T6599] Node 1 active_anon:20108kB inactive_anon:8kB active_file:13428kB inactive_file:104328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32856kB dirty:1140kB writeback:0kB shmem:1608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:960kB pagetables:620kB sec_pagetables:48kB all_unreclaimable? no [ 117.232761][ T6599] Node 0 DMA free:948kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:8kB active_file:8kB inactive_file:24kB unevictable:0kB writepending:28kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:232kB local_pcp:36kB free_cma:0kB [ 117.244897][ T6599] lowmem_reserve[]: 0 374 0 0 0 [ 117.248017][ T6599] Node 0 DMA32 free:27232kB boost:0kB min:19048kB low:23808kB high:28568kB reserved_highatomic:6144KB active_anon:2208kB inactive_anon:2524kB active_file:812kB inactive_file:88kB unevictable:1536kB writepending:632kB present:1032192kB managed:410704kB mlocked:0kB bounce:0kB free_pcp:8764kB local_pcp:2912kB free_cma:0kB [ 117.252835][ T6600] chnl_net:caif_netlink_parms(): no params data found [ 117.263669][ T6599] lowmem_reserve[]: 0 0 0 0 0 [ 117.271172][ T6599] Node 1 DMA32 free:483548kB boost:0kB min:47048kB low:58808kB high:70568kB reserved_highatomic:0KB active_anon:20208kB inactive_anon:8kB active_file:13428kB inactive_file:104328kB unevictable:1536kB writepending:1140kB present:1048436kB managed:946208kB mlocked:0kB bounce:0kB free_pcp:25464kB local_pcp:7840kB free_cma:0kB [ 117.295522][ T6599] lowmem_reserve[]: 0 0 0 0 0 [ 117.297645][ T6599] Node 0 DMA: 4*4kB (U) 8*8kB (U) 3*16kB (U) 27*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 992kB [ 117.303087][ T6599] Node 0 DMA32: 173*4kB (UMEH) 260*8kB (UMEH) 72*16kB (UMEH) 140*32kB (UMEH) 61*64kB (UMEH) 31*128kB (UMEH) 16*256kB (UME) 10*512kB (UMEH) 2*1024kB (M) 2*2048kB (M) 0*4096kB = 31636kB [ 117.312348][ T6599] Node 1 DMA32: 1*4kB (M) 65*8kB (UM) 263*16kB (UME) 108*32kB (ME) 33*64kB (UME) 28*128kB (ME) 1*256kB (E) 1*512kB (M) 2*1024kB (U) 6*2048kB (UME) 111*4096kB (M) = 483644kB [ 117.323163][ T6599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.333288][ T6599] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.340843][ T6599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.352598][ T6599] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.357983][ T6599] 30998 total pagecache pages [ 117.360139][ T6599] 531 pages in swap cache [ 117.361962][ T6599] Free swap = 110136kB [ 117.363933][ T6599] Total swap = 124996kB [ 117.372224][ T6599] 524155 pages RAM [ 117.373921][ T6599] 0 pages HighMem/MovableOnly [ 117.376596][ T6599] 181087 pages reserved [ 117.387937][ T6599] 0 pages cma reserved [ 117.562272][ T6600] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.566248][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.566407][ T6612] MTD: Couldn't look up '/dev/sg0': -15 [ 117.569706][ T6600] bridge_slave_0: entered allmulticast mode [ 117.586241][ T6600] bridge_slave_0: entered promiscuous mode [ 117.605907][ T6600] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.609688][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.613065][ T6600] bridge_slave_1: entered allmulticast mode [ 117.625951][ T6600] bridge_slave_1: entered promiscuous mode [ 117.751263][ T6600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.762836][ T6600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.838283][ T6600] team0: Port device team_slave_0 added [ 117.845299][ T6600] team0: Port device team_slave_1 added [ 117.991937][ T6600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.995013][ T6600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.006003][ T6600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.013637][ T6600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.018531][ T6600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.035210][ T6600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.123899][ T6600] hsr_slave_0: entered promiscuous mode [ 118.127728][ T6600] hsr_slave_1: entered promiscuous mode [ 118.131114][ T6600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.135662][ T6600] Cannot create hsr debugfs directory [ 118.439957][ T45] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.533583][ T6630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.576474][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 118.586238][ C0] ================================================================== [ 118.589658][ C0] BUG: KASAN: slab-use-after-free in __lock_acquire+0x2de0/0x3cb0 [ 118.592989][ C0] Read of size 8 at addr ffff8880210b0818 by task kworker/u32:1/12 [ 118.598349][ C0] [ 118.599426][ C0] CPU: 0 PID: 12 Comm: kworker/u32:1 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 118.604040][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.608859][ C0] Workqueue: events_unbound toggle_allocation_gate SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 118.611543][ C0] Call Trace: [ 118.613148][ C0] [ 118.614402][ C0] dump_stack_lvl+0x116/0x1f0 [ 118.616960][ C0] print_report+0xc3/0x620 [ 118.619237][ C0] ? __virt_addr_valid+0x5e/0x590 [ 118.621921][ C0] ? __phys_addr+0xc6/0x150 [ 118.624612][ C0] kasan_report+0xd9/0x110 [ 118.626868][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 118.629360][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 118.631744][ C0] __lock_acquire+0x2de0/0x3cb0 [ 118.633938][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 118.635922][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 118.638286][ C0] lock_acquire+0x1b1/0x560 [ 118.640768][ C0] ? p9_req_put+0xca/0x250 [ 118.642758][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 118.644996][ C0] ? __pfx_lock_release+0x10/0x10 [ 118.647099][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 118.649230][ C0] ? p9_req_put+0xca/0x250 [ 118.651260][ C0] p9_req_put+0xca/0x250 [ 118.652973][ C0] req_done+0x1e7/0x2f0 [ 118.654724][ C0] ? __pfx_req_done+0x10/0x10 [ 118.656920][ C0] ? __pfx_req_done+0x10/0x10 [ 118.658863][ C0] vring_interrupt+0x31b/0x400 [ 118.660824][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 118.663363][ C0] __handle_irq_event_percpu+0x229/0x7c0 [ 118.666053][ C0] handle_irq_event+0xab/0x1e0 [ 118.668208][ C0] handle_edge_irq+0x263/0xd10 [ 118.670212][ C0] __common_interrupt+0xdf/0x250 [ 118.672241][ C0] common_interrupt+0xab/0xd0 [ 118.674663][ C0] [ 118.676305][ C0] [ 118.677781][ C0] asm_common_interrupt+0x26/0x40 [ 118.679823][ C0] RIP: 0010:x2apic_send_IPI_allbutself+0x25/0x40 [ 118.682660][ C0] Code: 90 90 90 90 90 f3 0f 1e fa 89 f8 ba 00 04 0c 00 0d 00 00 0c 00 83 ff 02 0f 44 c2 0f ae f0 0f ae e8 b9 30 08 00 00 31 d2 0f 30 <66> 90 c3 cc cc cc cc 89 c6 31 d2 bf 30 08 00 00 e9 d6 70 74 03 66 [ 118.692370][ C0] RSP: 0018:ffffc900003e78d0 EFLAGS: 00000246 [ 118.694880][ C0] RAX: 00000000000c00fc RBX: 0000000000000001 RCX: 0000000000000830 [ 118.697948][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000000000fc [ 118.700970][ C0] RBP: ffff88802c03fe90 R08: 0000000000000000 R09: ffffed1005807fd2 [ 118.703979][ C0] R10: ffff88802c03fe97 R11: 0000000000000000 R12: ffffffff817eca90 [ 118.707061][ C0] R13: 0000000000000000 R14: 0000000000000003 R15: ffff88802c03fe80 [ 118.710139][ C0] ? on_each_cpu_cond_mask+0x40/0x90 [ 118.712141][ C0] kvm_smp_send_call_func_ipi+0x1e/0x260 [ 118.714035][ C0] ? on_each_cpu_cond_mask+0x40/0x90 [ 118.716172][ C0] smp_call_function_many_cond+0xd01/0x1420 [ 118.718390][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 118.720348][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 118.722598][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 118.724547][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 118.726255][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 118.728108][ C0] text_poke_bp_batch+0x659/0x760 [ 118.730058][ C0] ? kmem_cache_alloc_bulk_noprof+0x198/0x8e0 [ 118.732377][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 118.734597][ C0] ? __jump_label_patch+0x1db/0x400 [ 118.736619][ C0] ? text_poke_queue+0xef/0x180 [ 118.738444][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 118.740917][ C0] text_poke_finish+0x30/0x40 [ 118.742703][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 118.745073][ C0] jump_label_update+0x1d7/0x400 [ 118.747228][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 118.749591][ C0] static_key_enable+0x1a/0x20 [ 118.751532][ C0] toggle_allocation_gate+0xf8/0x250 [ 118.753699][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 118.755974][ C0] process_one_work+0x958/0x1ad0 [ 118.757971][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 118.759928][ C0] ? __pfx_process_one_work+0x10/0x10 [ 118.762183][ C0] ? assign_work+0x1a0/0x250 [ 118.764225][ C0] worker_thread+0x6c8/0xf20 [ 118.766698][ C0] ? __pfx_worker_thread+0x10/0x10 [ 118.768915][ C0] kthread+0x2c1/0x3a0 [ 118.770665][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 118.772853][ C0] ? __pfx_kthread+0x10/0x10 [ 118.774822][ C0] ret_from_fork+0x45/0x80 [ 118.776778][ C0] ? __pfx_kthread+0x10/0x10 [ 118.778724][ C0] ret_from_fork_asm+0x1a/0x30 [ 118.780872][ C0] [ 118.782077][ C0] [ 118.783059][ C0] Allocated by task 6630: [ 118.785096][ C0] kasan_save_stack+0x33/0x60 [ 118.787163][ C0] kasan_save_track+0x14/0x30 [ 118.789159][ C0] __kasan_kmalloc+0xaa/0xb0 [ 118.791134][ C0] p9_client_create+0xcf/0x11b0 [ 118.793224][ C0] v9fs_session_init+0x1f8/0x1a80 [ 118.795450][ C0] v9fs_mount+0xc6/0xaa0 [ 118.797656][ C0] legacy_get_tree+0x109/0x220 [ 118.799641][ C0] vfs_get_tree+0x8f/0x380 [ 118.801768][ C0] path_mount+0x6e1/0x1f10 [ 118.803799][ C0] __ia32_sys_mount+0x292/0x310 [ 118.805966][ C0] __do_fast_syscall_32+0x73/0x120 [ 118.808195][ C0] do_fast_syscall_32+0x32/0x80 [ 118.810344][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.813461][ C0] [ 118.814526][ C0] Freed by task 6630: [ 118.816120][ C0] kasan_save_stack+0x33/0x60 [ 118.817959][ C0] kasan_save_track+0x14/0x30 [ 118.819790][ C0] kasan_save_free_info+0x3b/0x60 [ 118.821742][ C0] poison_slab_object+0xf7/0x160 [ 118.823652][ C0] __kasan_slab_free+0x32/0x50 [ 118.825517][ C0] kfree+0x12a/0x3b0 [ 118.827025][ C0] p9_client_create+0x9ca/0x11b0 [ 118.829228][ C0] v9fs_session_init+0x1f8/0x1a80 [ 118.831243][ C0] v9fs_mount+0xc6/0xaa0 [ 118.832865][ C0] legacy_get_tree+0x109/0x220 [ 118.834804][ C0] vfs_get_tree+0x8f/0x380 [ 118.836711][ C0] path_mount+0x6e1/0x1f10 [ 118.838623][ C0] __ia32_sys_mount+0x292/0x310 [ 118.840669][ C0] __do_fast_syscall_32+0x73/0x120 [ 118.842799][ C0] do_fast_syscall_32+0x32/0x80 [ 118.844830][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 118.847489][ C0] [ 118.848551][ C0] The buggy address belongs to the object at ffff8880210b0800 [ 118.848551][ C0] which belongs to the cache kmalloc-512 of size 512 [ 118.853901][ C0] The buggy address is located 24 bytes inside of [ 118.853901][ C0] freed 512-byte region [ffff8880210b0800, ffff8880210b0a00) [ 118.859611][ C0] [ 118.860441][ C0] The buggy address belongs to the physical page: [ 118.862566][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x210b0 [ 118.866084][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 118.869607][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 118.872173][ C0] page_type: 0xffffefff(slab) [ 118.874124][ C0] raw: 00fff00000000040 ffff888015442c80 ffffea000002ff00 dead000000000002 [ 118.877848][ C0] raw: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000 [ 118.881172][ C0] head: 00fff00000000040 ffff888015442c80 ffffea000002ff00 dead000000000002 [ 118.884268][ C0] head: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000 [ 118.887641][ C0] head: 00fff00000000002 ffffea0000842c01 ffffffffffffffff 0000000000000000 [ 118.890632][ C0] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 118.893918][ C0] page dumped because: kasan: bad access detected [ 118.896667][ C0] page_owner tracks the page as allocated [ 118.898916][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5218, tgid 5218 (syz-executor), ts 58216036657, free_ts 57734510467 [ 118.907535][ C0] post_alloc_hook+0x2d1/0x350 [ 118.909565][ C0] get_page_from_freelist+0x1353/0x2e50 [ 118.911874][ C0] __alloc_pages_noprof+0x22b/0x2460 [ 118.914089][ C0] alloc_slab_page+0x56/0x110 [ 118.916121][ C0] new_slab+0x84/0x260 [ 118.917832][ C0] ___slab_alloc+0xdac/0x1870 [ 118.919816][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 118.922062][ C0] __kmalloc_cache_noprof+0x2c5/0x310 [ 118.924084][ C0] __ipv6_dev_mc_inc+0x2b7/0xc50 [ 118.926200][ C0] ipv6_add_dev+0xa93/0x1400 [ 118.928147][ C0] addrconf_notify+0x546/0x19e0 [ 118.930187][ C0] notifier_call_chain+0xb9/0x410 [ 118.932257][ C0] call_netdevice_notifiers_info+0xbe/0x140 [ 118.934596][ C0] register_netdevice+0x1728/0x1e20 [ 118.936733][ C0] team_newlink+0x92/0x160 [ 118.938600][ C0] __rtnl_newlink+0x119c/0x1960 [ 118.940648][ C0] page last free pid 4648 tgid 4648 stack trace: [ 118.943272][ C0] free_unref_page+0x64a/0xe40 [ 118.945296][ C0] rcu_core+0x828/0x16b0 [ 118.947074][ C0] handle_softirqs+0x216/0x8f0 [ 118.949103][ C0] irq_exit_rcu+0xbb/0x120 [ 118.950960][ C0] sysvec_apic_timer_interrupt+0x95/0xb0 [ 118.953295][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 118.955805][ C0] [ 118.956812][ C0] Memory state around the buggy address: [ 118.959132][ C0] ffff8880210b0700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.962449][ C0] ffff8880210b0780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.965788][ C0] >ffff8880210b0800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.969105][ C0] ^ [ 118.971132][ C0] ffff8880210b0880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.974297][ C0] ffff8880210b0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.977678][ C0] ================================================================== [ 118.981012][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 118.983982][ C0] CPU: 0 PID: 12 Comm: kworker/u32:1 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 118.988015][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.992406][ C0] Workqueue: events_unbound toggle_allocation_gate [ 118.995118][ C0] Call Trace: [ 118.996381][ C0] [ 118.997595][ C0] dump_stack_lvl+0x3d/0x1f0 [ 118.999547][ C0] panic+0x6f5/0x7a0 [ 119.001217][ C0] ? __pfx_panic+0x10/0x10 [ 119.002915][ C0] ? rcu_is_watching+0x12/0xc0 [ 119.004697][ C0] ? __pfx_lock_release+0x10/0x10 [ 119.006763][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 119.008912][ C0] check_panic_on_warn+0xab/0xb0 [ 119.010989][ C0] end_report+0x117/0x180 [ 119.012466][ C0] kasan_report+0xe9/0x110 [ 119.014119][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 119.016193][ C0] ? __lock_acquire+0x2de0/0x3cb0 [ 119.018344][ C0] __lock_acquire+0x2de0/0x3cb0 [ 119.020090][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 119.021958][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 119.024146][ C0] lock_acquire+0x1b1/0x560 [ 119.025676][ C0] ? p9_req_put+0xca/0x250 [ 119.027396][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 119.029572][ C0] ? __pfx_lock_release+0x10/0x10 [ 119.031342][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 119.033258][ C0] ? p9_req_put+0xca/0x250 [ 119.035171][ C0] p9_req_put+0xca/0x250 [ 119.036905][ C0] req_done+0x1e7/0x2f0 [ 119.038343][ C0] ? __pfx_req_done+0x10/0x10 [ 119.040366][ C0] ? __pfx_req_done+0x10/0x10 [ 119.042368][ C0] vring_interrupt+0x31b/0x400 [ 119.044438][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 119.046491][ C0] __handle_irq_event_percpu+0x229/0x7c0 [ 119.048518][ C0] handle_irq_event+0xab/0x1e0 [ 119.050536][ C0] handle_edge_irq+0x263/0xd10 [ 119.052234][ C0] __common_interrupt+0xdf/0x250 [ 119.053945][ C0] common_interrupt+0xab/0xd0 [ 119.055810][ C0] [ 119.057044][ C0] [ 119.058292][ C0] asm_common_interrupt+0x26/0x40 [ 119.060312][ C0] RIP: 0010:x2apic_send_IPI_allbutself+0x25/0x40 [ 119.062715][ C0] Code: 90 90 90 90 90 f3 0f 1e fa 89 f8 ba 00 04 0c 00 0d 00 00 0c 00 83 ff 02 0f 44 c2 0f ae f0 0f ae e8 b9 30 08 00 00 31 d2 0f 30 <66> 90 c3 cc cc cc cc 89 c6 31 d2 bf 30 08 00 00 e9 d6 70 74 03 66 [ 119.070286][ C0] RSP: 0018:ffffc900003e78d0 EFLAGS: 00000246 [ 119.072781][ C0] RAX: 00000000000c00fc RBX: 0000000000000001 RCX: 0000000000000830 [ 119.075986][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 00000000000000fc [ 119.078942][ C0] RBP: ffff88802c03fe90 R08: 0000000000000000 R09: ffffed1005807fd2 [ 119.082220][ C0] R10: ffff88802c03fe97 R11: 0000000000000000 R12: ffffffff817eca90 [ 119.085361][ C0] R13: 0000000000000000 R14: 0000000000000003 R15: ffff88802c03fe80 [ 119.088783][ C0] ? on_each_cpu_cond_mask+0x40/0x90 [ 119.090855][ C0] kvm_smp_send_call_func_ipi+0x1e/0x260 [ 119.093287][ C0] ? on_each_cpu_cond_mask+0x40/0x90 [ 119.095268][ C0] smp_call_function_many_cond+0xd01/0x1420 [ 119.097624][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 119.099329][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 119.101587][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 119.103861][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 119.105971][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 119.108186][ C0] text_poke_bp_batch+0x659/0x760 [ 119.110344][ C0] ? kmem_cache_alloc_bulk_noprof+0x198/0x8e0 [ 119.112875][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 119.115203][ C0] ? __jump_label_patch+0x1db/0x400 [ 119.117434][ C0] ? text_poke_queue+0xef/0x180 [ 119.119420][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 119.121814][ C0] text_poke_finish+0x30/0x40 [ 119.123575][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 119.125915][ C0] jump_label_update+0x1d7/0x400 [ 119.127814][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 119.130066][ C0] static_key_enable+0x1a/0x20 [ 119.131913][ C0] toggle_allocation_gate+0xf8/0x250 [ 119.134119][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 119.136267][ C0] process_one_work+0x958/0x1ad0 [ 119.138095][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 119.140188][ C0] ? __pfx_process_one_work+0x10/0x10 [ 119.142065][ C0] ? assign_work+0x1a0/0x250 [ 119.143809][ C0] worker_thread+0x6c8/0xf20 [ 119.145769][ C0] ? __pfx_worker_thread+0x10/0x10 [ 119.147920][ C0] kthread+0x2c1/0x3a0 [ 119.149678][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.151904][ C0] ? __pfx_kthread+0x10/0x10 [ 119.153790][ C0] ret_from_fork+0x45/0x80 [ 119.155686][ C0] ? __pfx_kthread+0x10/0x10 [ 119.157569][ C0] ret_from_fork_asm+0x1a/0x30 [ 119.159180][ C0] [ 119.160803][ C0] Kernel Offset: disabled [ 119.162264][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:15:41 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84f8aec5 RDI=ffffffff94dc1380 RBP=ffffffff94dc1340 RSP=ffffc90000007610 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000064 R14=ffffffff84f8ae60 R15=0000000000000000 RIP=ffffffff84f8aeef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f74760e8 CR3=000000000d97c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000001 RSI=1ffffffff1fcbb77 RDI=ffff8880154b4780 RBP=ffff8880176ee000 RSP=ffffc90000e0f240 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=00000000ffffffff R13=ffff8880154b4000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81eed6a5 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000578b24c0 CR3=000000001a298000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000044000001 Opmask01=0000000000000000 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe76587da0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe76587730 0000003000000010 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 491088d29cf88896 7373269fb2e63a16 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737142 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d25203a7325206b 6e696c6d79732065 7461657263206f74 2064656c69614600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4800051f5600054e 4b4c49485c560540 5144405746054a51 054140494c444600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000091 0000000000000000 32706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001e1 0000000031336c6c 696b66722f303279 68702f3131323038 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4943213f395b2249 5a6e786b6e646b7e 59647a305f474f5b 647c79303a243a78 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 26483b3a3a264b3b 3a0a00307f617930 382432273f397b27 697a787c69303b7e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff88802c23fe00 RCX=ffffffff817ed748 RDX=0000000000000001 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc90000457d60 RSP=ffffc90000457c38 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffffffff8dbc3230 R12=1ffff9200008af8c R13=0000000000000001 R14=0000000000000003 R15=ffffed1005847fc1 RIP=ffffffff818ae043 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f74a60e8 CR3=000000005a81c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffffd0 Opmask01=0000000000004211 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe765877c0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000000 ffff00ff00ff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 000055e99f0bf410 0000000000000051 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 455355006d726f66 74616c703d4d4554 5359534255530034 323338313d4d554e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 456e185523232a35 7425203f62051115 030f1606556e4478 7d6c70657c1d030b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 26483b3a3a264b3b 3a0a00307f617930 382432273f397b27 697a787c69303b7e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00302e00726f6f61 616c6765652f3a6d 6f666661616c2f3d 5341494c41442f3d ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00302e0043455355 00353435382f3636 31313d4245530034 323338313d442f3d ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=1ffffffff28ad003 RBX=ffffffff942e21a8 RCX=1ffffffff2723437 RDX=00000000000003fd RSI=1ffffffff285c440 RDI=ffffffff942e2204 RBP=ffffffff945691a8 RSP=ffffc900033be820 R8 =0000000000000000 R9 =ffffffff94275538 R10=0000000000000003 R11=00000000000001b0 R12=ffffffff8167fbe0 R13=ffffffff94569198 R14=dffffc0000000000 R15=ffffffff94569198 RIP=ffffffff816847ed RFL=00000803 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff200aacd00 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000560c04e3d000 CR3=00000000263f8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=b0a5acd9b0a5acd9 b0a5acd9b0a5acd9 b0a5acd9b0a5acd9 b0a5acd9b0a5acd9 b0a5acd9b0a5acd9 b0a5acd9b0a5acd9 b0a5acd9b0a5acd9 b0a5acd9b0a5acd9 ZMM22=7ce3de727ce3de72 7ce3de727ce3de72 7ce3de727ce3de72 7ce3de727ce3de72 7ce3de727ce3de72 7ce3de727ce3de72 7ce3de727ce3de72 7ce3de727ce3de72 ZMM23=eff38b73eff38b73 eff38b73eff38b73 eff38b73eff38b73 eff38b73eff38b73 eff38b73eff38b73 eff38b73eff38b73 eff38b73eff38b73 eff38b73eff38b73 ZMM24=d7baf37dd7baf37d d7baf37dd7baf37d d7baf37dd7baf37d d7baf37dd7baf37d d7baf37dd7baf37d d7baf37dd7baf37d d7baf37dd7baf37d d7baf37dd7baf37d ZMM25=d79ee04dd79ee04d d79ee04dd79ee04d d79ee04dd79ee04d d79ee04dd79ee04d d79ee04dd79ee04d d79ee04dd79ee04d d79ee04dd79ee04d d79ee04dd79ee04d ZMM26=e324d732e324d732 e324d732e324d732 e324d732e324d732 e324d732e324d732 e324d732e324d732 e324d732e324d732 e324d732e324d732 e324d732e324d732 ZMM27=d0e4e783d0e4e783 d0e4e783d0e4e783 d0e4e783d0e4e783 d0e4e783d0e4e783 d0e4e783d0e4e783 d0e4e783d0e4e783 d0e4e783d0e4e783 d0e4e783d0e4e783 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=af030000af030000 af030000af030000 af030000af030000 af030000af030000 af030000af030000 af030000af030000 af030000af030000 af030000af030000