last executing test programs: 6m7.202739608s ago: executing program 0 (id=556): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 6m7.109999011s ago: executing program 0 (id=558): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = socket(0x21, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x4, @local, 0x81}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0xc, "a5e49c655b78596116de78f9"}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6m6.861670164s ago: executing program 0 (id=559): r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) 6m6.829936056s ago: executing program 32 (id=559): r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) 6m2.860939471s ago: executing program 33 (id=595): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) 6m2.503345065s ago: executing program 34 (id=600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @loopback, 0x4e24, 0x1, 'none\x00', 0x1, 0x32bd, 0x9}, {@loopback, 0x4e21, 0x2, 0xfffffffe, 0x4, 0x12d5c}}, 0x44) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) 5m54.017520397s ago: executing program 5 (id=669): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 5m54.01736509s ago: executing program 5 (id=670): socket$packet(0x11, 0x2, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m53.134305947s ago: executing program 5 (id=677): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c0002"], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5m52.341115253s ago: executing program 5 (id=686): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 5m52.220802023s ago: executing program 5 (id=687): syz_usb_connect(0x0, 0xf5, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505240600010524007f000d240f019d000000080000000006241a03000a052404"], 0x0) 5m51.941606266s ago: executing program 6 (id=689): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 5m51.778389906s ago: executing program 6 (id=690): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="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", 0x266}, {&(0x7f0000000580)="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", 0x175}, {&(0x7f0000000740)="266a546475688763b44d30a862bc689d0b1d020dbb8656767fbd1d91637fccf4e308ae461b2548ba45299eb42928ff4ee493318ef9f71739a3f86f5193e556e085fc8c4793ffc8395e70ba93fd9e9d5f5413437784f92bb0128a9756b1c9b87c36cfe56c02568995726f7538f9ed3095531590839a2be05cf75ab02f51372bbc48c81b0283ffac37f28926e0a20a01d3ae06d03acc7095428e97af0141e80215b0823f76efad", 0xa6}], 0x3, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000) 5m51.778255573s ago: executing program 5 (id=691): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 5m51.657771067s ago: executing program 35 (id=691): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 5m51.602743104s ago: executing program 6 (id=693): ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4aa4) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r2, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x26020480) socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 5m51.438361133s ago: executing program 6 (id=695): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 5m51.382409107s ago: executing program 6 (id=698): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000540)=""/224, 0xe0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) 5m51.103070639s ago: executing program 6 (id=701): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) 5m51.065974402s ago: executing program 36 (id=701): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) 5m50.46674507s ago: executing program 4 (id=703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x58, r1, 0x1, 0x0, 0x10000001, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @beacon={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0xffa}}, 0x0, @random=0x8, 0x200, @void, @void, @val={0x3, 0x1, 0x2c}, @val={0x4, 0x6, {0x0, 0x0, 0x12, 0x2800}}, @val={0x6, 0x2, 0x46}, @val={0x5, 0x3, {0x7, 0x4, 0x3}}, @void, @void, @void, @void, @void, @void, @void}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240000c1}, 0x20008040) 5m49.320062118s ago: executing program 4 (id=704): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={r1, 0x1, 0x0, 0x8000}) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c1, 0x0, 0x0, 0x357}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x8000000, 0x0, 0x0, 0x0) 5m49.319782208s ago: executing program 4 (id=705): socket$inet6_sctp(0xa, 0x1, 0x84) openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x5}}, 0x14}}, 0x40800) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x8001, 0x1, 0x0, 0x0, 0xffffffff}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m48.410121665s ago: executing program 4 (id=706): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 5m48.354657611s ago: executing program 4 (id=707): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) 5m48.133028191s ago: executing program 4 (id=709): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000009c0)='8h', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001d80)="4706970663f3f7af2db76191c83b9772d01298d0b00b30289f75ca24f322329072a6416c040a3e89b911cd7e224d42326a8c9b61b1190e375e83fa97c359b052a4b59a0f7ac9003c32a19b479dae807378b4a550e6e2d92d4d6657dceb710ef001a08b5071f7cfe2e7ff11257d6aae2ab3f48a753208eae0339c9f648306b4e8ab5bfcec01e4b05d08a0d453b12c1849a234f4599d6374b909cd37a73a6d3f9afe51d22ef4df5f7ce6ed8588c819c9ed0c300e7f930825badf01e6da952c440e3991d99134cd6348357fa39790c9c607205e89924d642c64d4fe2b60746234f3392637a257a43615f0838702d772d641a3f9e0860f7b59c87838e837f051a8144a54d3a6eb8fc225d95f173ff470dd6d3185b2c32699e535b3fdc76dcdb1f45404448e0afed0ff6ddb55f3c3fe55960ec690a78d437bd5556bda115667061622923ec3f9e71ec3e531961c988e0b5a78d900834a11612bdf93a140e2afdf23c80644550f76d0e8218ca0e755dff4a0885b25bad7540a18a9d93612aca74cde840c2a53ae4eb3217327b8e9802cd70cbc5bcc0ecca20a2557fc8ec6664b7e1c53e265a1bfb4b9557eff5342b0ab8b8faa21aea953525fd021b7d16c9d46ad5427db9e78c38a11922add7ad9033887179ad68b933820deb794b9d3a19326d4aacb8d0404e25dd6b4bcfe69af5ae97a8c195cac87c723378daf1e8393dd3288feddd074d5f9ec5ac7d526406ba34ef57aaec2660a2a365a2ce00a80cb317086f5674d25d37cc5397b8e81206a738dea8b5079c92fe97966bb5094b4b41823856aa284816a8213ded79f33e3dc98df9fa9b8a89f77ecabf360f8ba21a2943f7183a17e7106e73d09115997f532081e4751f3da9e14051ba6f8889657c4db781185122f9d91bfe29394d1baa7b535faea7f4910a78b05c75dea7ff6224facdadc29b071f6dc8995a24758f997d56414cbf1950888b688a28de7a2e457302e22ba7c904badfe1b4b2141b721c8f7ea07f4d8071b6613abcb74f2c5c67cde5d0aec70c3f5d277951cd13bc0358e2653c03f1e4c00825ea246d18fbd893611eac729158a6a2fdb7ca682b3739da30c5cf7fc760a0ddef368011115a7d70d1a01cf9203b33f9cf83ff79aa2625fad175cfa368d15c5d6b720e0f29d4f8dad80dfd6c1ddc577b06b878daf7bacd31bb68c8bfac70d9b650879fe6ca650d81c1acde987b3f30c7c45627b6d183958d16096041cdeb52630342c80223ec4575e62ffba129b563868a913d51a14d4dd891bc2300e204ba3d62ad53bb7e8ffacccfe1c3b100c1187d4a173248a431c1613badeb7345503b0f441edeac181dbf9397a85433893f7d95d972d588bae7442ccac0f23c243d8b50684532663cb1aee33759e37e679e4326f14625eece81a7eb0fd0b3416a8cc90039e199f4228374efbf471d1dd9201b2a141135c9b508f11cce6bc7656d4363914832ddb77a46a450941530a4b2351a986a27e7a933bf221b0115289e72cd93fd2d5181dae2e5c3501413e31a5021a1acab914f795ae9cb93d07695962db3a72ff778fbe1b5f9a3067f9e91589d79882705ef4d4c542cd9043bf68c26435765a16a67cbda84e23b92403d11cfa832cdafaadf966fbb1c0e5c1d2f0e94563141f67522279916ba98892a13f479bb0a5cc0d593db312561ce28864ddbbe4c8b5b0ffc04c668483fd3db8a7fa4f3bd5d475b7db7ef7fc1a18d02b4298cc952b6e96ee62b2d4511345cb06a72520a8d5727547c667e6ba3486c2a3686f88b72f8a8cbe75dcc0496cde3ccd5cd7e75ec619c36c8d34bc", 0x505}], 0x1}}], 0x2, 0x0) 5m48.043105787s ago: executing program 37 (id=709): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000009c0)='8h', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001d80)="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", 0x505}], 0x1}}], 0x2, 0x0) 5m14.312929822s ago: executing program 8 (id=1185): ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4aa4) r1 = socket$pppoe(0x18, 0x1, 0x0) bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x0, 0x4001}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) unshare(0x26020480) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 5m14.252925534s ago: executing program 8 (id=1186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x200, 0x2}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x10, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x7fff, 0xa, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m14.142084813s ago: executing program 8 (id=1188): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000000101040000000000020000020000002400018014"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e716584bc5021df76d28"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m14.123802902s ago: executing program 8 (id=1189): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 5m14.002431634s ago: executing program 8 (id=1192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 5m13.780441989s ago: executing program 8 (id=1198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x10, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x7fff, 0xa, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m13.720103462s ago: executing program 38 (id=1198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x10, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x7fff, 0xa, 0xfd, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m8.412268597s ago: executing program 0 (id=1200): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 5m8.272535936s ago: executing program 0 (id=1242): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 5m5.786145613s ago: executing program 0 (id=1263): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = socket(0x21, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x4, @local, 0x81}]}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0xc, "a5e49c655b78596116de78f9"}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5m5.744372075s ago: executing program 39 (id=1263): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r5, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) connect$ax25(r5, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = socket(0x21, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x4, @local, 0x81}]}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0xc, "a5e49c655b78596116de78f9"}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000003000000610200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 51.720550923s ago: executing program 7 (id=4904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x40}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 51.720302112s ago: executing program 7 (id=4905): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x42280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) userfaultfd(0x80001) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 50.840732878s ago: executing program 7 (id=4927): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000000101040000000000020000020000002400018014"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e716584bc5021df76d28"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 50.780167389s ago: executing program 7 (id=4929): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000000101040000000000020000020000002400018014"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e716584bc5021d"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 50.720191975s ago: executing program 7 (id=4931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x140f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0xfd, 0x0, 0xa5, 0xbd, 0xff, 0x8, 0x4, 0x0, 0x2, 0x3}, {0x4, 0x8, 0x0, 0x0, 0x41, 0x0, 0x0, 0x4, 0x1, 0xff, 0x5, 0x2, 0x4}, {0x3fe, 0x9, 0x0, 0x6, 0x0, 0xf0, 0xb3, 0x0, 0xff, 0x0, 0x80, 0xf5, 0x7}], 0x1d7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 50.479638809s ago: executing program 7 (id=4935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x40}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 35.485032432s ago: executing program 40 (id=4935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x40}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 2.730083721s ago: executing program 9 (id=5771): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x140f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0xfd, 0x0, 0xa5, 0xbd, 0xff, 0x8, 0x4, 0x0, 0x2, 0x3}, {0x4, 0x8, 0x0, 0x0, 0x41, 0x0, 0x0, 0x4, 0x1, 0xff, 0x5, 0x2, 0x4}, {0x3fe, 0x9, 0x0, 0x6, 0x0, 0xf0, 0xb3, 0x0, 0xff, 0x0, 0x80, 0xf5, 0x7}], 0x1d7}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.859463295s ago: executing program 1 (id=5797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009118db0049d90491ceaebfd26ceeef23248000000f858dbb8", 0x30}, {&(0x7f0000000100)="09c69e16e1606f13050000d8186dd6", 0xf}], 0x2) 1.779607779s ago: executing program 9 (id=5798): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e40), 0x0, 0x10) shutdown(r0, 0x2) 1.779274345s ago: executing program 9 (id=5799): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e716584bc5021df76d28"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.72990635s ago: executing program 9 (id=5800): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000000101040000000000020000020000002400018014"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x40}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e716584bc5021df76d28"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.729561469s ago: executing program 1 (id=5801): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000000010104000000000002000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.729331289s ago: executing program 1 (id=5802): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @timestamp, @timestamp], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 1.679915538s ago: executing program 9 (id=5803): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.679627263s ago: executing program 9 (id=5804): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 868.817966ms ago: executing program 1 (id=5820): sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x2d83, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000b800000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, r4, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0xe, &(0x7f0000001980)={@remote, @empty, @void, {@generic={0x8884}}}, 0x0) 778.311153ms ago: executing program 1 (id=5821): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 777.843958ms ago: executing program 1 (id=5823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x140f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0xfd, 0x0, 0xa5, 0xbd, 0xff, 0x8, 0x4, 0x0, 0x2, 0x3}, {0x4, 0x8, 0x0, 0x0, 0x41, 0x0, 0x0, 0x4, 0x1, 0xff, 0x5, 0x2, 0x4}, {0x3fe, 0x9, 0x0, 0x6, 0x0, 0xf0, 0xb3, 0x0, 0xff, 0x0, 0x80, 0xf5, 0x7}], 0x1d7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 379.453853ms ago: executing program 3 (id=5825): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 378.99919ms ago: executing program 3 (id=5826): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000000101040000000000020000020000002400018014"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e716584bc5021df76d28"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 319.226707ms ago: executing program 3 (id=5828): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0xe, &(0x7f0000001980)={@remote, @empty, @void, {@generic={0x8884}}}, 0x0) 249.882867ms ago: executing program 3 (id=5830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009118db0049d90491ceaebfd26ceeef23248000000f858dbb8a190", 0x32}, {&(0x7f0000000100)="09c69e16e1606f13050000d8186dd6", 0xf}], 0x2) 189.90675ms ago: executing program 2 (id=5832): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000000101040000000000020000020000002400018014"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e716584bc5021df76d28"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 126.630859ms ago: executing program 2 (id=5833): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e716584bc5021d"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 126.20197ms ago: executing program 3 (id=5834): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 125.900233ms ago: executing program 2 (id=5835): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 67.742896ms ago: executing program 2 (id=5836): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000000101040000000000020000020000002400018014"], 0x40}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e716584bc5021df76d28"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 67.451619ms ago: executing program 3 (id=5837): bind$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0xff17) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000049c7d958aec852291f8d579d42e00dd17ef2eb4391d549352765a17a009b924eb9253e1a1f38b839f78d1da58950bb0816e22dde4dbd98cfefe59b7b7fe0a4a8face354c7bbc8ac8b29d68be25f4796537da5e04b4cc238f86493ce7f033db0c7b4c62e7"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES64, @ANYRES16], 0x4c}}, 0x4000804) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 67.304351ms ago: executing program 2 (id=5838): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0xe, &(0x7f0000001980)={@remote, @empty, @void, {@generic={0x8884}}}, 0x0) 0s ago: executing program 2 (id=5839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r4], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7ff}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x138, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x4}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0xd0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11}]}]}, @NFTA_SET_DESC_CONCAT={0x74, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x17c}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): audit(1750243217.902:441): avc: denied { mount } for pid=13636 comm="syz.9.2995" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 295.809291][T13645] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 295.815608][T13645] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 295.839821][T13647] fuse: Bad value for 'fd' [ 295.899405][T13651] fuse: Bad value for 'user_id' [ 295.901049][T13651] fuse: Bad value for 'user_id' [ 296.577755][ T40] audit: type=1400 audit(1750243218.672:442): avc: denied { unmount } for pid=7999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 296.614888][T13692] set match dimension is over the limit! [ 296.652101][T13690] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 297.106297][T13741] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 297.987567][ T40] audit: type=1400 audit(1750243220.082:443): avc: denied { set_context_mgr } for pid=13770 comm="syz.7.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 298.211179][T13788] set match dimension is over the limit! [ 299.293739][ T40] audit: type=1400 audit(1750243221.332:444): avc: denied { create } for pid=13807 comm="syz.9.3042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 299.308924][ T40] audit: type=1400 audit(1750243221.332:445): avc: denied { write } for pid=13807 comm="syz.9.3042" path="socket:[63997]" dev="sockfs" ino=63997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 299.359503][ T40] audit: type=1400 audit(1750243221.452:446): avc: denied { mounton } for pid=13818 comm="syz.7.3047" path="/549/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 299.457169][T13828] set match dimension is over the limit! [ 299.563596][T13839] fuse: Bad value for 'fd' [ 299.768820][T13847] Bluetooth: MGMT ver 1.23 [ 301.025160][T13874] set match dimension is over the limit! [ 301.697133][T13889] fuse: Invalid rootmode [ 301.812433][T13897] set match dimension is over the limit! [ 302.290919][T13912] fuse: Bad value for 'rootmode' [ 302.384033][T13916] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 302.828717][T13934] set match dimension is over the limit! [ 303.106203][T13947] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 303.528941][ T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 303.698036][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 303.708841][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 303.711712][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.715602][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 303.725530][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 303.731256][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.736505][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 303.744254][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.813340][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.817262][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.822401][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.828278][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.831720][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.863065][ T7999] bridge0: port 1(syz_tun) entered disabled state [ 303.871478][ T7999] syz_tun (unregistering): left allmulticast mode [ 303.873531][ T7999] syz_tun (unregistering): left promiscuous mode [ 303.875565][ T7999] bridge0: port 1(syz_tun) entered disabled state [ 303.955723][ T10] usb 7-1: usb_control_msg returned -32 [ 303.957586][ T10] usbtmc 7-1:16.0: can't read capabilities [ 303.989383][T13959] chnl_net:caif_netlink_parms(): no params data found [ 304.071404][T13959] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.073829][T13959] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.076604][T13959] bridge_slave_0: entered allmulticast mode [ 304.079551][T13959] bridge_slave_0: entered promiscuous mode [ 304.082737][T13959] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.084967][T13959] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.087268][T13959] bridge_slave_1: entered allmulticast mode [ 304.090587][T13959] bridge_slave_1: entered promiscuous mode [ 304.119477][ T1143] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.185338][ T1143] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.195933][T13959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.201334][T13959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.239711][T13959] team0: Port device team_slave_0 added [ 304.244425][T13959] team0: Port device team_slave_1 added [ 304.305313][ T1143] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.317217][T13959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.321218][T13959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.329924][T13959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.335356][T13959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.337572][T13959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.345985][T13959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.390842][ T1143] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.400596][T13959] hsr_slave_0: entered promiscuous mode [ 304.402799][T13959] hsr_slave_1: entered promiscuous mode [ 304.791215][ T1143] bond0 (unregistering): Released all slaves [ 304.797970][ T1143] bond1 (unregistering): (slave veth3): Releasing backup interface [ 304.801838][ T1143] bond1 (unregistering): Released all slaves [ 304.887857][ T1143] tipc: Left network mode [ 305.177954][ T1143] hsr_slave_0: left promiscuous mode [ 305.181397][ T1143] hsr_slave_1: left promiscuous mode [ 305.201782][ T1143] veth1_macvtap: left promiscuous mode [ 305.204485][ T1143] veth0_macvtap: left promiscuous mode [ 305.206307][ T1143] veth1_vlan: left promiscuous mode [ 305.207985][ T1143] veth0_vlan: left promiscuous mode [ 305.882765][ T5301] Bluetooth: hci1: command tx timeout [ 306.247807][ T8007] usb 7-1: USB disconnect, device number 19 [ 306.388503][T13990] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 306.563310][T13996] set match dimension is over the limit! [ 306.567021][T13959] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 306.586189][T13959] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 306.593298][T13959] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 306.598017][T13959] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 306.626115][ T40] audit: type=1400 audit(1750243228.732:447): avc: denied { read } for pid=14006 comm="syz.7.3111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 306.654974][T13959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.676801][T13959] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.684729][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.687666][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.694892][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.697212][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.814901][T13959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.958818][T13959] veth0_vlan: entered promiscuous mode [ 306.965385][T13959] veth1_vlan: entered promiscuous mode [ 306.979475][T13959] veth0_macvtap: entered promiscuous mode [ 306.983332][T13959] veth1_macvtap: entered promiscuous mode [ 306.992556][T13959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.998253][T13959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.002896][T13959] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.005595][T13959] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.008350][T13959] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.011946][T13959] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.044499][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.047000][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.058463][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.061238][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.449018][ T6023] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 307.612906][ T6023] usb 7-1: Using ep0 maxpacket: 8 [ 307.663029][ T6023] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 307.670571][ T6023] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.677861][ T6023] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 307.684625][ T6023] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.697225][ T6023] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.704851][ T6023] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 307.708528][ T6023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.947062][ T6023] usb 7-1: usb_control_msg returned -32 [ 307.950433][ T6023] usbtmc 7-1:16.0: can't read capabilities [ 307.959353][ T5301] Bluetooth: hci1: command tx timeout [ 308.657592][T14042] set match dimension is over the limit! [ 308.697539][T14044] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 308.706134][T14044] kvm: pic: level sensitive irq not supported [ 308.706669][T14044] kvm: pic: non byte read [ 308.712512][T14044] kvm: pic: level sensitive irq not supported [ 308.712844][T14044] kvm: pic: non byte read [ 308.717500][T14044] kvm: pic: level sensitive irq not supported [ 308.717787][T14044] kvm: pic: non byte read [ 308.722712][T14044] kvm: pic: level sensitive irq not supported [ 308.722990][T14044] kvm: pic: non byte read [ 308.727311][T14044] kvm: pic: level sensitive irq not supported [ 308.727609][T14044] kvm: pic: non byte read [ 308.732766][T14044] kvm: pic: level sensitive irq not supported [ 308.733587][T14044] kvm: pic: non byte read [ 308.738718][T14044] kvm: pic: level sensitive irq not supported [ 308.739500][T14044] kvm: pic: non byte read [ 308.744082][T14044] kvm: pic: level sensitive irq not supported [ 308.744365][T14044] kvm: pic: non byte read [ 308.749516][T14044] kvm: pic: level sensitive irq not supported [ 308.749834][T14044] kvm: pic: non byte read [ 308.754909][T14044] kvm: pic: level sensitive irq not supported [ 308.755185][T14044] kvm: pic: non byte read [ 308.985810][T14054] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3124'. [ 309.186055][T14064] fuse: Unknown parameter 'user_id00000000000000000000' [ 309.861508][T14070] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 310.039615][ T5301] Bluetooth: hci1: command tx timeout [ 310.100145][T14079] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3134'. [ 310.142209][ T1340] usb 7-1: USB disconnect, device number 20 [ 310.195094][T14089] fuse: Bad value for 'fd' [ 311.177828][T14102] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3144'. [ 312.129037][ T5301] Bluetooth: hci1: command tx timeout [ 312.378278][ T40] audit: type=1400 audit(1750243234.472:448): avc: denied { listen } for pid=14126 comm="syz.3.3153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 312.421367][ T40] audit: type=1400 audit(1750243234.532:449): avc: denied { accept } for pid=14126 comm="syz.3.3153" lport=57634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 312.837923][T14145] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3159'. [ 312.938411][ T40] audit: type=1400 audit(1750243235.032:450): avc: denied { create } for pid=14154 comm="syz.7.3164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 312.948044][ T40] audit: type=1400 audit(1750243235.052:451): avc: denied { sys_admin } for pid=14154 comm="syz.7.3164" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 313.531298][T14169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3169'. [ 313.940734][T14178] xt_TPROXY: Can be used only with -p tcp or -p udp [ 314.528957][ T1340] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 314.679160][ T1340] usb 7-1: Using ep0 maxpacket: 8 [ 314.686529][ T1340] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 314.690134][ T1340] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.694122][ T1340] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 314.698183][ T1340] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 314.701861][ T1340] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.705860][ T1340] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 314.709130][ T1340] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.931432][ T1340] usb 7-1: usb_control_msg returned -32 [ 314.934729][ T1340] usbtmc 7-1:16.0: can't read capabilities [ 315.198011][T14200] fuse: Unknown parameter '0x0000000000000003' [ 315.879961][T14214] block nbd7: NBD_DISCONNECT [ 315.888956][ T40] audit: type=1400 audit(1750243237.982:452): avc: denied { accept } for pid=14211 comm="syz.7.3185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 316.348598][ T40] audit: type=1400 audit(1750243238.442:453): avc: denied { execute } for pid=14217 comm="syz.9.3187" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 316.842614][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.845307][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.236828][ T1340] usb 7-1: USB disconnect, device number 21 [ 318.414978][T14263] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 318.417079][T14263] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 318.420021][T14263] vhci_hcd vhci_hcd.0: Device attached [ 318.553402][ T40] audit: type=1400 audit(1750243240.652:454): avc: denied { bind } for pid=14262 comm="syz.7.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 318.559800][ T40] audit: type=1400 audit(1750243240.652:455): avc: denied { write } for pid=14262 comm="syz.7.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 318.669041][ T7959] usb 51-1: new high-speed USB device number 2 using vhci_hcd [ 319.253037][T14264] vhci_hcd: connection reset by peer [ 319.256421][ T61] vhci_hcd: stop threads [ 319.257829][ T61] vhci_hcd: release socket [ 319.259706][ T61] vhci_hcd: disconnect device [ 319.892581][ T8528] bridge0: port 1(syz_tun) entered disabled state [ 319.903404][ T8528] syz_tun (unregistering): left allmulticast mode [ 319.905473][ T8528] syz_tun (unregistering): left promiscuous mode [ 319.907675][ T8528] bridge0: port 1(syz_tun) entered disabled state [ 319.909757][ T5953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.915777][ T5953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.920842][ T5953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.926265][ T5953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.930759][ T5953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.025225][T14280] chnl_net:caif_netlink_parms(): no params data found [ 320.091504][T14280] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.093718][T14280] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.096008][T14280] bridge_slave_0: entered allmulticast mode [ 320.098704][T14280] bridge_slave_0: entered promiscuous mode [ 320.102131][T14280] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.104392][T14280] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.106656][T14280] bridge_slave_1: entered allmulticast mode [ 320.110548][T14280] bridge_slave_1: entered promiscuous mode [ 320.127767][ T1183] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.164683][T14280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.169296][T14280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.193464][ T1183] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.216816][T14280] team0: Port device team_slave_0 added [ 320.222856][T14280] team0: Port device team_slave_1 added [ 320.255639][T14280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.257891][T14280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.266048][T14280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.279944][ T1183] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.286557][T14280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.288772][T14280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.298242][T14280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.342349][T14280] hsr_slave_0: entered promiscuous mode [ 320.344729][T14280] hsr_slave_1: entered promiscuous mode [ 320.346801][T14280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.350009][T14280] Cannot create hsr debugfs directory [ 320.363750][ T1183] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.750810][ T1183] bond0 (unregistering): Released all slaves [ 320.813324][ T1183] tipc: Left network mode [ 320.822796][ T40] audit: type=1400 audit(1750243242.922:456): avc: denied { setopt } for pid=14305 comm="syz.9.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 321.126879][ T1183] hsr_slave_0: left promiscuous mode [ 321.131201][ T1183] hsr_slave_1: left promiscuous mode [ 321.146397][ T1183] veth1_macvtap: left promiscuous mode [ 321.148235][ T1183] veth0_macvtap: left promiscuous mode [ 321.150317][ T1183] veth1_vlan: left promiscuous mode [ 321.152032][ T1183] veth0_vlan: left promiscuous mode [ 321.972902][ T5953] Bluetooth: hci0: command tx timeout [ 322.587736][T14342] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 322.589842][T14342] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 322.592696][T14342] vhci_hcd vhci_hcd.0: Device attached [ 322.774181][T14280] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 322.778510][T14280] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 322.785133][T14280] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 322.789204][T14280] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 322.830025][T14280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.842326][T14280] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.848955][ T837] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 322.851049][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.853596][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.894523][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.896805][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.110993][T14280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.274016][T14280] veth0_vlan: entered promiscuous mode [ 323.279484][T14280] veth1_vlan: entered promiscuous mode [ 323.291505][T14280] veth0_macvtap: entered promiscuous mode [ 323.302831][T14280] veth1_macvtap: entered promiscuous mode [ 323.312745][T14280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.318157][T14280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.325123][T14280] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.328243][T14280] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.331460][T14280] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.334228][T14280] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.370998][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.374009][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.389853][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.393002][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.430675][T14343] vhci_hcd: connection reset by peer [ 323.432917][ T1142] vhci_hcd: stop threads [ 323.441159][ T1142] vhci_hcd: release socket [ 323.452294][ T1142] vhci_hcd: disconnect device [ 323.809068][ T7959] vhci_hcd: vhci_device speed not set [ 323.980739][T14380] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3235'. [ 323.983589][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3235'. [ 324.039001][ T5953] Bluetooth: hci0: command tx timeout [ 324.056356][T14385] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 324.058487][T14385] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 324.062652][T14385] vhci_hcd vhci_hcd.0: Device attached [ 325.262346][T14386] vhci_hcd: connection closed [ 325.269102][ T61] vhci_hcd: stop threads [ 325.274800][ T61] vhci_hcd: release socket [ 325.276794][ T61] vhci_hcd: disconnect device [ 325.523363][ T40] audit: type=1400 audit(1750243247.622:457): avc: denied { read } for pid=14410 comm="syz.2.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 326.119003][ T5953] Bluetooth: hci0: command tx timeout [ 326.531001][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3254'. [ 327.637679][T14469] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3266'. [ 328.199118][ T5953] Bluetooth: hci0: command tx timeout [ 328.348959][ T837] vhci_hcd: vhci_device speed not set [ 328.914080][T14523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3287'. [ 328.917115][T14523] net_ratelimit: 10 callbacks suppressed [ 328.917124][T14523] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 330.358989][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3299'. [ 330.366166][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3299'. [ 330.479795][T14571] tipc: Started in network mode [ 330.482042][T14571] tipc: Node identity 72048035ae49, cluster identity 4711 [ 330.485141][T14571] tipc: Enabled bearer , priority 0 [ 330.502537][T14571] syzkaller0: MTU too low for tipc bearer [ 330.504868][T14571] tipc: Disabling bearer [ 330.873106][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3312'. [ 330.875955][T14593] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3312'. [ 330.919048][ T5948] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 331.081256][ T5948] usb 7-1: Using ep0 maxpacket: 32 [ 331.156195][ T5948] usb 7-1: unable to get BOS descriptor or descriptor too short [ 331.172406][ T5948] usb 7-1: config 1 interface 0 altsetting 71 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.176503][ T5948] usb 7-1: config 1 interface 0 has no altsetting 0 [ 331.207992][ T5948] usb 7-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.40 [ 331.214013][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.217400][ T5948] usb 7-1: Product: syz [ 331.218807][ T5948] usb 7-1: SerialNumber: syz [ 331.432428][ T5948] usbhid 7-1:1.0: can't add hid device: -71 [ 331.434479][ T5948] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 331.437929][ T5948] usb 7-1: USB disconnect, device number 22 [ 331.828193][ T40] audit: type=1326 audit(1750243253.922:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14610 comm="syz.9.3318" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f3d98e929 code=0x0 [ 332.685776][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3324'. [ 332.690410][T14630] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3324'. [ 334.882390][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3349'. [ 334.885142][T14702] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3349'. [ 335.374748][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3358'. [ 335.379089][T14725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3358'. [ 337.342531][T14788] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3382'. [ 337.345684][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3382'. [ 338.271096][T14805] tipc: Started in network mode [ 338.272890][T14805] tipc: Node identity cae5441a85ce, cluster identity 4711 [ 338.275702][T14805] tipc: Enabled bearer , priority 0 [ 338.283761][T14804] tipc: Disabling bearer [ 339.449125][T14827] capability: warning: `syz.9.3397' uses deprecated v2 capabilities in a way that may be insecure [ 339.455005][T14830] tipc: Enabled bearer , priority 0 [ 339.459787][T14827] QAT: Device 7 not found [ 339.464455][T14829] tipc: Disabling bearer [ 340.275552][ T40] audit: type=1400 audit(1750243262.372:459): avc: denied { mount } for pid=14839 comm="syz.3.3402" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 340.282635][ T40] audit: type=1400 audit(1750243262.372:460): avc: denied { search } for pid=14839 comm="syz.3.3402" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 340.290469][ T40] audit: type=1400 audit(1750243262.372:461): avc: denied { unmount } for pid=14839 comm="syz.3.3402" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 340.647842][T14862] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.3409'. [ 340.889013][ T5941] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 340.972157][ T40] audit: type=1400 audit(1750243263.072:462): avc: denied { create } for pid=14868 comm="syz.3.3412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 340.983188][ T837] IPVS: starting estimator thread 0... [ 341.069087][T14871] IPVS: using max 42 ests per chain, 100800 per kthread [ 341.079117][ T5941] usb 12-1: Using ep0 maxpacket: 8 [ 341.162793][ T5941] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 341.170334][ T5941] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.272765][ T5941] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.283577][ T5941] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.286733][ T5941] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.290825][ T5941] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 341.293777][ T5941] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.537665][ T5941] usb 12-1: usb_control_msg returned -32 [ 341.539761][ T5941] usbtmc 12-1:16.0: can't read capabilities [ 341.560651][ T40] audit: type=1400 audit(1750243263.662:463): avc: denied { ioctl } for pid=14874 comm="syz.9.3414" path="socket:[72822]" dev="sockfs" ino=72822 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 342.178948][ T1340] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 342.339146][ T1340] usb 8-1: Using ep0 maxpacket: 8 [ 342.342518][ T1340] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 342.345091][ T1340] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 342.348184][ T1340] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 342.351387][ T1340] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 342.354577][ T1340] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.358691][ T1340] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 342.361727][ T1340] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.568868][ T1340] usb 8-1: usb_control_msg returned -32 [ 342.570968][ T1340] usbtmc 8-1:16.0: can't read capabilities [ 343.068445][T14907] tipc: Enabled bearer , priority 0 [ 343.074841][T14906] tipc: Disabling bearer [ 343.290090][ T40] audit: type=1400 audit(1750243265.392:464): avc: denied { setopt } for pid=14913 comm="syz.9.3428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 343.291470][T14914] netlink: 5128 bytes leftover after parsing attributes in process `syz.9.3428'. [ 343.299424][T14914] netlink: 5128 bytes leftover after parsing attributes in process `syz.9.3428'. [ 343.302264][T14914] netlink: 584 bytes leftover after parsing attributes in process `syz.9.3428'. [ 343.549037][ T6066] usb 14-1: new high-speed USB device number 23 using dummy_hcd [ 343.594810][ T5941] usb 12-1: USB disconnect, device number 13 [ 343.720726][ T6066] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.723960][ T6066] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.727600][ T6066] usb 14-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 343.731329][ T6066] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 343.733864][ T6066] usb 14-1: SerialNumber: syz [ 343.940804][ T6066] usb 14-1: 0:2 : does not exist [ 343.942476][ T6066] usb 14-1: unit 255 not found! [ 343.946680][ T6066] usb 14-1: 5:0: cannot get min/max values for control 2 (id 5) [ 343.959251][ T6066] usb 14-1: USB disconnect, device number 23 [ 344.783010][T14940] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.3436'. [ 344.814986][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3437'. [ 344.817780][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3437'. [ 344.853834][T14944] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3438'. [ 344.969071][ T1340] usb 8-1: USB disconnect, device number 36 [ 345.055492][ T40] audit: type=1326 audit(1750243267.152:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14955 comm="syz.7.3444" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f138858e929 code=0x0 [ 345.406319][ T40] audit: type=1400 audit(1750243267.502:466): avc: denied { append } for pid=14962 comm="syz.9.3445" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 345.406939][T14964] random: crng reseeded on system resumption [ 345.415854][ T40] audit: type=1400 audit(1750243267.502:467): avc: denied { open } for pid=14962 comm="syz.9.3445" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 345.841469][T14969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3447'. [ 345.845321][T14969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3447'. [ 346.140610][ T1340] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 346.299108][ T1340] usb 7-1: Using ep0 maxpacket: 16 [ 346.312563][ T1340] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.315806][ T1340] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.319276][ T1340] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.322344][ T1340] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 346.326597][ T1340] usb 7-1: config 0 interface 0 has no altsetting 0 [ 346.328706][ T1340] usb 7-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 346.331690][ T1340] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.335668][ T1340] usb 7-1: config 0 descriptor?? [ 346.801095][ T1340] cypress 0003:04B4:ED81.0016: item fetching failed at offset 0/4 [ 346.810079][ T1340] cypress 0003:04B4:ED81.0016: parse failed [ 346.814475][ T1340] cypress 0003:04B4:ED81.0016: probe with driver cypress failed with error -22 [ 347.003509][ T6005] usb 7-1: USB disconnect, device number 23 [ 347.616461][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3458'. [ 347.619365][T15005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3458'. [ 351.014511][T15089] netlink: 452 bytes leftover after parsing attributes in process `syz.3.3490'. [ 351.153716][ T5953] Bluetooth: hci1: Malformed LE Event: 0x0b [ 351.262918][T15115] netlink: 17 bytes leftover after parsing attributes in process `syz.9.3496'. [ 351.266044][T15115] netlink: zone id is out of range [ 351.267694][T15115] netlink: zone id is out of range [ 351.270170][T15115] netlink: zone id is out of range [ 351.271927][T15115] netlink: zone id is out of range [ 351.273547][T15115] netlink: zone id is out of range [ 351.275190][T15115] netlink: zone id is out of range [ 351.276798][T15115] netlink: zone id is out of range [ 351.278454][T15115] netlink: zone id is out of range [ 351.280376][T15115] netlink: zone id is out of range [ 351.282015][T15115] netlink: zone id is out of range [ 352.100523][ T40] audit: type=1400 audit(1750243274.202:468): avc: denied { read write } for pid=15126 comm="syz.2.3504" name="btrfs-control" dev="devtmpfs" ino=1336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 352.108156][ T40] audit: type=1400 audit(1750243274.202:469): avc: denied { open } for pid=15126 comm="syz.2.3504" path="/dev/btrfs-control" dev="devtmpfs" ino=1336 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 352.952804][ T5953] Bluetooth: hci0: Malformed LE Event: 0x0b [ 353.440689][ T40] audit: type=1400 audit(1750243275.522:470): avc: denied { map } for pid=15174 comm="syz.7.3523" path="socket:[72262]" dev="sockfs" ino=72262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 353.570125][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3525'. [ 353.592217][T15183] xt_connbytes: Forcing CT accounting to be enabled [ 353.594489][T15183] --map-set only usable from mangle table [ 355.368961][ T54] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 355.515329][T15235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3549'. [ 355.518148][T15235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3549'. [ 355.528962][ T54] usb 7-1: Using ep0 maxpacket: 8 [ 355.532225][ T54] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 355.535145][ T54] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.538184][ T54] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 355.541518][ T54] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.545639][ T54] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.550127][ T54] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 355.553327][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.644106][ T9455] bridge0: port 1(syz_tun) entered disabled state [ 355.651613][ T9455] syz_tun (unregistering): left allmulticast mode [ 355.653599][ T9455] syz_tun (unregistering): left promiscuous mode [ 355.655567][ T9455] bridge0: port 1(syz_tun) entered disabled state [ 355.682395][ T5301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 355.686709][ T5301] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 355.691710][ T5301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.695511][ T5301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.699679][ T5301] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 355.763028][ T54] usb 7-1: usb_control_msg returned -32 [ 355.764864][ T54] usbtmc 7-1:16.0: can't read capabilities [ 355.879568][T15237] chnl_net:caif_netlink_parms(): no params data found [ 355.943531][ T1152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.099606][ T1152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.108198][T15237] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.110662][T15237] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.113562][T15237] bridge_slave_0: entered allmulticast mode [ 356.117295][T15237] bridge_slave_0: entered promiscuous mode [ 356.122200][T15237] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.124396][T15237] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.126618][T15237] bridge_slave_1: entered allmulticast mode [ 356.129408][T15237] bridge_slave_1: entered promiscuous mode [ 356.184809][ T1152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.250984][ T1152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.263124][T15237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.271422][T15237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.327163][T15237] team0: Port device team_slave_0 added [ 356.334484][T15237] team0: Port device team_slave_1 added [ 356.366021][T15237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.368186][T15237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.375911][T15237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.397057][T15237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.399718][T15237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.407436][T15237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.700625][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3556'. [ 356.795629][ T1152] bond0 (unregistering): Released all slaves [ 356.805982][ T1152] bond1 (unregistering): Released all slaves [ 356.819865][T15237] hsr_slave_0: entered promiscuous mode [ 356.823610][T15237] hsr_slave_1: entered promiscuous mode [ 356.826370][T15237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.829846][T15237] Cannot create hsr debugfs directory [ 357.005600][ T1152] tipc: Left network mode [ 357.230995][ T1152] hsr_slave_0: left promiscuous mode [ 357.233098][ T1152] hsr_slave_1: left promiscuous mode [ 357.253696][ T1152] veth1_macvtap: left promiscuous mode [ 357.255665][ T1152] veth0_macvtap: left promiscuous mode [ 357.257453][ T1152] veth1_vlan: left promiscuous mode [ 357.262015][ T1152] veth0_vlan: left promiscuous mode [ 357.720446][ T5953] Bluetooth: hci2: command tx timeout [ 358.084713][ T9] usb 7-1: USB disconnect, device number 24 [ 358.556252][ T40] audit: type=1400 audit(1750243280.652:471): avc: denied { ioctl } for pid=15280 comm="syz.7.3565" path="socket:[70654]" dev="sockfs" ino=70654 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 358.658080][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3571'. [ 358.661416][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3571'. [ 358.803016][T15237] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 358.818830][T15237] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 358.833598][T15237] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 358.837777][T15237] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 358.866156][T15298] net_ratelimit: 76 callbacks suppressed [ 358.866168][T15298] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 358.909028][ T9] IPVS: starting estimator thread 0... [ 358.923955][T15237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.935402][T15237] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.959436][ T1152] IPVS: stop unused estimator thread 0... [ 358.974054][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.976259][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.992902][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.995291][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.011050][T15308] IPVS: using max 42 ests per chain, 100800 per kthread [ 359.176425][T15237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.220105][T15237] veth0_vlan: entered promiscuous mode [ 359.223261][T15324] netlink: 452 bytes leftover after parsing attributes in process `syz.2.3579'. [ 359.234041][T15237] veth1_vlan: entered promiscuous mode [ 359.249604][T15237] veth0_macvtap: entered promiscuous mode [ 359.254499][T15237] veth1_macvtap: entered promiscuous mode [ 359.265047][T15237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.273598][T15237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.280790][T15237] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.284204][T15237] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.286938][T15237] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.290457][T15237] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.332216][T14838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.334768][T14838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.349321][ T54] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 359.356884][T14838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.359587][T14838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.511739][ T54] usb 12-1: config 0 has an invalid interface number: 50 but max is 0 [ 359.514547][ T54] usb 12-1: config 0 has no interface number 0 [ 359.519505][ T54] usb 12-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 359.525038][ T54] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 359.527888][ T54] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.530817][ T54] usb 12-1: Product: syz [ 359.532384][ T54] usb 12-1: Manufacturer: syz [ 359.534009][ T54] usb 12-1: SerialNumber: syz [ 359.537034][ T54] usb 12-1: config 0 descriptor?? [ 359.543146][ T54] yurex 12-1:0.50: USB YUREX device now attached to Yurex #0 [ 359.799155][ T5953] Bluetooth: hci2: command tx timeout [ 359.894551][ T40] audit: type=1400 audit(1750243281.992:472): avc: denied { map } for pid=15354 comm="syz.2.3590" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 361.004502][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3600'. [ 361.009079][T15382] netlink: 'syz.3.3600': attribute type 1 has an invalid length. [ 361.011577][T15382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3600'. [ 361.385773][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3602'. [ 361.790571][T15405] netlink: 260 bytes leftover after parsing attributes in process `syz.9.3611'. [ 361.878964][ T5953] Bluetooth: hci2: command tx timeout [ 362.129530][ T54] usb 12-1: USB disconnect, device number 14 [ 362.136309][ T54] yurex 12-1:0.50: USB YUREX #0 now disconnected [ 362.516410][T15443] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3625'. [ 363.408393][ T40] audit: type=1400 audit(1750243285.502:473): avc: denied { read } for pid=15463 comm="syz.3.3633" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 363.417912][ T40] audit: type=1400 audit(1750243285.512:474): avc: denied { read } for pid=15466 comm="syz.9.3634" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 363.558099][T15464] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 363.562183][T15464] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 363.567868][T15464] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 363.574300][T15464] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 363.576266][T15464] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 363.586220][T15464] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 364.006830][T15472] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3635'. [ 365.479122][ T5301] Bluetooth: hci1: command 0x0c1a tx timeout [ 365.639022][ T5301] Bluetooth: hci2: command 0x0405 tx timeout [ 365.639039][T15470] Bluetooth: hci0: command 0x0c1a tx timeout [ 365.641837][T15464] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 365.645491][T15464] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 365.648058][T15464] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 366.029035][ T6005] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 366.179099][ T6005] usb 12-1: Using ep0 maxpacket: 8 [ 366.183657][ T6005] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 366.187064][ T6005] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.190734][ T6005] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.194183][ T6005] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.198013][ T6005] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.204433][ T6005] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 366.208483][ T6005] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.402927][T15524] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3655'. [ 366.426059][ T6005] usb 12-1: GET_CAPABILITIES returned 0 [ 366.427864][ T6005] usbtmc 12-1:16.0: can't read capabilities [ 366.625516][ T54] usb 12-1: USB disconnect, device number 15 [ 367.201510][T15540] sg_read: process 933 (syz.2.3661) changed security contexts after opening file descriptor, this is not allowed. [ 367.559245][ T5301] Bluetooth: hci1: command 0x0c1a tx timeout [ 367.721925][ T5301] Bluetooth: hci0: command 0x0c1a tx timeout [ 367.729005][ T5301] Bluetooth: hci2: command 0x0405 tx timeout [ 368.684273][T15607] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 368.719994][ T40] audit: type=1400 audit(1750243290.812:475): avc: denied { setattr } for pid=15610 comm="syz.3.3692" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 368.746002][T15612] Bluetooth: MGMT ver 1.23 [ 368.748989][T15607] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 369.639005][T15470] Bluetooth: hci1: command 0x0c1a tx timeout [ 369.799061][T15470] Bluetooth: hci2: command 0x0405 tx timeout [ 369.799075][ T5953] Bluetooth: hci0: command 0x0c1a tx timeout [ 369.804369][ T5301] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 369.881188][T15653] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=15653 comm=syz.3.3709 [ 369.883182][T15654] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3707'. [ 370.279532][T15668] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 370.282493][T15668] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 370.688726][T15683] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=15683 comm=syz.2.3720 [ 372.279041][ T5953] Bluetooth: hci1: command 0x0c1a tx timeout [ 372.359001][ T5953] Bluetooth: hci2: command 0x0405 tx timeout [ 372.363492][T15668] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 372.369057][ T5301] Bluetooth: hci0: command 0x0c1a tx timeout [ 372.495927][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3726'. [ 372.951895][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3729'. [ 372.955027][T15713] nbd: must specify a size in bytes for the device [ 373.250182][T15730] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 373.252281][T15730] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 375.239026][ T5953] Bluetooth: hci1: command 0x0c1a tx timeout [ 375.319105][T15470] Bluetooth: hci0: command 0x0c1a tx timeout [ 375.320769][ T5953] Bluetooth: hci2: command 0x0405 tx timeout [ 375.323911][T15730] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 375.874222][T15777] netlink: 260 bytes leftover after parsing attributes in process `syz.7.3757'. [ 376.501646][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3767'. [ 376.504647][T15797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3767'. [ 376.509214][ T40] audit: type=1400 audit(1750243298.612:476): avc: denied { name_bind } for pid=15798 comm="syz.2.3768" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 376.515781][ T40] audit: type=1400 audit(1750243298.612:477): avc: denied { node_bind } for pid=15798 comm="syz.2.3768" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 377.099993][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3777'. [ 377.103084][T15823] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3777'. [ 377.399169][ T5953] Bluetooth: hci2: command 0x0405 tx timeout [ 377.442285][T15834] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 377.646150][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3789'. [ 377.648832][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3789'. [ 378.287621][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.290514][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.496612][T15893] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 378.498729][T15893] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 380.439023][ T5301] Bluetooth: hci1: command 0x0c1a tx timeout [ 380.519147][T15470] Bluetooth: hci0: command 0x0c1a tx timeout [ 380.520295][ T5301] Bluetooth: hci2: command 0x0405 tx timeout [ 380.524305][T15893] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 380.580647][T15917] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3815'. [ 380.583559][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3815'. [ 381.047864][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3825'. [ 381.051930][T15942] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3825'. [ 381.132699][T15953] overlayfs: failed to resolve './file0': -2 [ 381.215122][T15968] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3836'. [ 381.218088][T15968] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3836'. [ 381.272635][T15973] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 381.368048][T15963] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 381.370273][T15963] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 381.548483][T15980] overlayfs: failed to resolve './file0': -2 [ 383.329004][ T5301] Bluetooth: hci1: command 0x0c1a tx timeout [ 383.399965][T15470] Bluetooth: hci0: command 0x0c1a tx timeout [ 383.401441][ T5301] Bluetooth: hci2: command 0x0405 tx timeout [ 383.404618][T15963] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 383.433746][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3846'. [ 383.436775][T15992] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3846'. [ 383.493551][T16001] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3847'. [ 383.518302][T16003] overlayfs: failed to resolve './file1': -2 [ 384.153159][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3862'. [ 384.184922][T16028] overlayfs: failed to resolve './file1': -2 [ 384.765339][T16009] Set syz1 is full, maxelem 65536 reached [ 384.766959][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3872'. [ 384.804150][T16054] overlayfs: failed to resolve './file0': -2 [ 384.851048][T16060] netlink: 260 bytes leftover after parsing attributes in process `syz.7.3873'. [ 385.478984][ T5953] Bluetooth: hci2: command 0x0405 tx timeout [ 386.284305][T16105] overlayfs: failed to resolve './file0': -2 [ 386.324342][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3892'. [ 386.638911][T16080] Set syz1 is full, maxelem 65536 reached [ 386.679791][T16126] overlayfs: failed to resolve './file0': -2 [ 386.723389][T16131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3902'. [ 386.926328][T16148] netlink: 260 bytes leftover after parsing attributes in process `syz.7.3908'. [ 387.019022][ T6005] usb 14-1: new high-speed USB device number 24 using dummy_hcd [ 387.169267][ T6005] usb 14-1: Using ep0 maxpacket: 8 [ 387.172748][ T6005] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 387.175993][ T6005] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 387.179315][ T6005] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 387.182494][ T6005] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 387.186604][ T6005] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 387.192128][ T6005] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 387.195685][ T6005] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.402086][ T6005] usb 14-1: usb_control_msg returned -32 [ 387.404295][ T6005] usbtmc 14-1:16.0: can't read capabilities [ 387.569209][ T5953] Bluetooth: hci2: command 0x0405 tx timeout [ 388.206970][T16201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3931'. [ 388.209949][T16201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3931'. [ 388.246830][T16203] tipc: Enabling of bearer rejected, failed to enable media [ 388.755197][T16231] tipc: Enabling of bearer rejected, failed to enable media [ 388.940400][T16240] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3946'. [ 388.943281][T16240] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3946'. [ 389.071902][T16247] 9pnet_fd: Insufficient options for proto=fd [ 389.186036][T16253] 9pnet_fd: Insufficient options for proto=fd [ 389.649041][ T5953] Bluetooth: hci2: command 0x0405 tx timeout [ 389.707744][T16268] 9pnet_fd: Insufficient options for proto=fd [ 389.737113][ T6006] usb 14-1: USB disconnect, device number 24 [ 389.794018][T16279] input: syz1 as /devices/virtual/input/input48 [ 389.988114][T16294] 9pnet_fd: Insufficient options for proto=fd [ 390.154517][T16306] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3974'. [ 390.157397][T16306] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3974'. [ 390.318039][T16317] netlink: 260 bytes leftover after parsing attributes in process `syz.7.3979'. [ 390.673053][T16334] overlayfs: missing 'lowerdir' [ 391.663833][T16370] 9pnet_fd: Insufficient options for proto=fd [ 391.691247][T16372] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 391.694046][T16372] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 391.728970][ T5953] Bluetooth: hci2: command 0x0405 tx timeout [ 391.758301][T16376] __nla_validate_parse: 4 callbacks suppressed [ 391.758313][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4005'. [ 391.763367][T16376] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4005'. [ 391.877410][T16382] overlayfs: missing 'lowerdir' [ 392.351489][T16402] overlayfs: missing 'lowerdir' [ 392.387941][ T40] audit: type=1400 audit(1750243314.482:478): avc: denied { connect } for pid=16403 comm="syz.7.4019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 392.480943][T16419] overlayfs: missing 'lowerdir' [ 393.275661][T16435] overlayfs: missing 'lowerdir' [ 393.808987][ T5953] Bluetooth: hci2: command 0x0405 tx timeout [ 394.532837][T16490] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 394.537434][T16490] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 394.707525][T16517] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 394.712329][T16517] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 394.907901][T16542] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 394.911806][T16542] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 395.111516][T16567] overlayfs: missing 'lowerdir' [ 395.355106][T16590] overlayfs: missing 'lowerdir' [ 395.583480][T16611] overlayfs: missing 'lowerdir' [ 395.680915][T16617] fuse: Bad value for 'group_id' [ 395.682547][T16617] fuse: Bad value for 'group_id' [ 395.745334][T16625] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4116'. [ 395.798965][ T8002] usb 14-1: new high-speed USB device number 25 using dummy_hcd [ 395.847978][T16632] overlayfs: missing 'workdir' [ 395.881573][T16636] fuse: Bad value for 'group_id' [ 395.883193][T16636] fuse: Bad value for 'group_id' [ 395.943828][T16645] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4126'. [ 395.969970][ T8002] usb 14-1: Using ep0 maxpacket: 8 [ 395.972864][ T8002] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 395.975453][ T8002] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 395.978545][ T8002] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 395.983971][ T8002] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 395.987125][ T8002] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.991649][ T8002] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 395.994600][ T8002] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.002430][T16653] overlayfs: missing 'workdir' [ 396.036625][T16659] fuse: Bad value for 'group_id' [ 396.038291][T16659] fuse: Bad value for 'group_id' [ 396.200559][ T8002] usb 14-1: usb_control_msg returned -32 [ 396.202350][ T8002] usbtmc 14-1:16.0: can't read capabilities [ 396.362297][T16682] overlayfs: missing 'workdir' [ 396.540846][T16692] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4148'. [ 397.786008][T16758] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4178'. [ 398.098662][T16782] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4189'. [ 398.292886][T16803] tipc: Started in network mode [ 398.296231][T16803] tipc: Node identity eea56043c8b7, cluster identity 4711 [ 398.299450][T16803] tipc: Enabled bearer , priority 0 [ 398.304144][T16802] tipc: Disabling bearer [ 398.390348][T16813] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4203'. [ 398.488832][T16826] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4210'. [ 398.516566][T16830] fuse: Unknown parameter 'grou00000000000000000000' [ 398.520609][T16829] tipc: Enabled bearer , priority 0 [ 398.524657][T16827] tipc: Disabling bearer [ 398.540083][ T6023] usb 14-1: USB disconnect, device number 25 [ 398.559275][T16834] netlink: 260 bytes leftover after parsing attributes in process `syz.9.4214'. [ 398.682889][T16850] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4221'. [ 398.692533][T16852] fuse: Unknown parameter 'grou00000000000000000000' [ 398.734634][T16859] netlink: 260 bytes leftover after parsing attributes in process `syz.7.4225'. [ 398.764760][T16862] tipc: Enabled bearer , priority 0 [ 398.768775][T16861] tipc: Disabling bearer [ 398.958995][ T8002] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 399.018038][T16878] fuse: Unknown parameter 'grou00000000000000000000' [ 399.118968][ T8002] usb 7-1: Using ep0 maxpacket: 8 [ 399.121995][ T8002] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 399.124650][ T8002] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.127708][ T8002] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 399.131432][ T8002] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 399.134535][ T8002] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.138529][ T8002] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 399.141618][ T8002] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.347196][ T8002] usb 7-1: usb_control_msg returned -32 [ 399.349128][ T8002] usbtmc 7-1:16.0: can't read capabilities [ 399.783440][T16906] tipc: Enabled bearer , priority 0 [ 399.787939][T16905] tipc: Disabling bearer [ 399.830190][T16910] fuse: Unknown parameter 'group_i00000000000000000000' [ 400.244094][T16934] fuse: Unknown parameter 'group_i00000000000000000000' [ 400.276551][T16936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4258'. [ 400.283893][T16936] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4258'. [ 400.310226][T16938] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4259'. [ 400.491300][T16950] fuse: Bad value for 'fd' [ 400.627570][T16954] fuse: Unknown parameter 'group_id00000000000000000000' [ 400.953904][T16986] fuse: Unknown parameter 'group_id00000000000000000000' [ 401.162607][T17010] fuse: Bad value for 'user_id' [ 401.164267][T17010] fuse: Bad value for 'user_id' [ 401.575647][T17030] fuse: Bad value for 'user_id' [ 401.577240][T17030] fuse: Bad value for 'user_id' [ 401.715257][ T6005] usb 7-1: USB disconnect, device number 25 [ 402.110720][ T9] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 402.279008][ T9] usb 12-1: Using ep0 maxpacket: 8 [ 402.282026][ T9] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 402.284695][ T9] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 402.287767][ T9] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 402.291125][ T9] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 402.294699][ T9] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.299219][ T9] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 402.302094][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.509683][ T9] usb 12-1: usb_control_msg returned -32 [ 402.511500][ T9] usbtmc 12-1:16.0: can't read capabilities [ 402.966975][T17116] fuse: Bad value for 'fd' [ 403.020773][T17119] __nla_validate_parse: 15 callbacks suppressed [ 403.020794][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4341'. [ 403.029622][T17119] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4341'. [ 403.094498][T17122] syz_tun: left allmulticast mode [ 403.096153][T17122] syz_tun: left promiscuous mode [ 403.097932][T17122] bridge0: port 3(syz_tun) entered disabled state [ 403.112645][T17122] bridge_slave_0: left allmulticast mode [ 403.114521][T17122] bridge_slave_0: left promiscuous mode [ 403.116432][T17122] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.124430][T17122] bridge_slave_1: left allmulticast mode [ 403.126785][T17122] bridge_slave_1: left promiscuous mode [ 403.129576][T17122] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.146742][T17122] bond0: (slave bond_slave_0): Releasing backup interface [ 403.168060][T17122] bond0: (slave bond_slave_1): Releasing backup interface [ 403.187332][T17122] team0: Port device team_slave_0 removed [ 403.195076][T17122] team0: Port device team_slave_1 removed [ 403.197359][T17122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.201575][T17122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.205142][T17122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.207539][T17122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.870530][T17150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4352'. [ 403.875219][T17150] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4352'. [ 403.904155][T17152] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4353'. [ 404.688153][T17181] fuse: Invalid rootmode [ 404.795061][T17193] bridge_slave_0: left allmulticast mode [ 404.796966][T17193] bridge_slave_0: left promiscuous mode [ 404.798848][T17193] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.803463][T17193] bridge_slave_1: left allmulticast mode [ 404.805303][T17193] bridge_slave_1: left promiscuous mode [ 404.807792][T17193] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.814992][T17193] bond0: (slave bond_slave_0): Releasing backup interface [ 404.820701][T17193] bond0: (slave bond_slave_1): Releasing backup interface [ 404.836312][T17193] team0: Port device team_slave_0 removed [ 404.841833][T17193] team0: Port device team_slave_1 removed [ 404.844031][T17193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.846311][T17193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.849776][T17193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.852074][T17193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.878690][ T5948] usb 12-1: USB disconnect, device number 16 [ 404.965897][T17206] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4377'. [ 405.220254][T17222] fuse: Invalid rootmode [ 405.277735][T17228] fuse: Bad value for 'group_id' [ 405.281920][T17228] fuse: Bad value for 'group_id' [ 405.308991][ T8002] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 405.479088][ T8002] usb 12-1: Using ep0 maxpacket: 8 [ 405.482328][ T8002] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 405.485041][ T8002] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 405.488126][ T8002] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 405.492567][ T8002] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 405.495765][ T8002] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.500081][ T8002] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 405.502977][ T8002] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.631176][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4396'. [ 405.694933][T17250] fuse: Bad value for 'group_id' [ 405.696632][T17250] fuse: Bad value for 'group_id' [ 405.708831][ T8002] usb 12-1: usb_control_msg returned -32 [ 405.711129][ T8002] usbtmc 12-1:16.0: can't read capabilities [ 406.390015][T17281] fuse: Unknown parameter 'use00000000000000000000' [ 406.547992][T17291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4417'. [ 406.578984][ T1340] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 406.720986][T17300] fuse: Unknown parameter 'use00000000000000000000' [ 406.729855][ T1340] usb 8-1: Using ep0 maxpacket: 8 [ 406.732679][ T1340] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 406.735577][ T1340] usb 8-1: config 179 has no interface number 0 [ 406.738201][ T1340] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 406.743392][ T1340] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 406.748057][ T1340] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 406.752896][ T1340] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 406.756674][ T1340] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 406.761894][ T1340] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 406.764781][ T1340] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.770117][T17277] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 406.979964][ T5953] Bluetooth: hci2: unexpected event for opcode 0x203d [ 406.980624][ T1340] usb 8-1: USB disconnect, device number 37 [ 406.982218][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 406.982260][ C2] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 407.376503][T17324] fuse: Unknown parameter 'user_i00000000000000000000' [ 407.648756][T17348] fuse: Unknown parameter 'grou00000000000000000000' [ 407.859098][T17376] fuse: Unknown parameter 'grou00000000000000000000' [ 408.085152][ T1340] usb 12-1: USB disconnect, device number 17 [ 408.576795][T17425] fuse: Unknown parameter 'user_i00000000000000000000' [ 408.589137][ T5948] usb 14-1: new high-speed USB device number 26 using dummy_hcd [ 408.638600][T17430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4481'. [ 408.769107][ T5948] usb 14-1: Using ep0 maxpacket: 8 [ 408.773933][ T5948] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 408.776692][ T5948] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 408.780276][ T5948] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 408.783315][ T5948] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.786462][ T5948] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.790684][ T5948] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 408.793518][ T5948] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.999073][ T5948] usb 14-1: usb_control_msg returned -32 [ 409.001031][ T5948] usbtmc 14-1:16.0: can't read capabilities [ 409.273610][T17445] fuse: Unknown parameter 'group_i00000000000000000000' [ 409.343531][T17449] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4490'. [ 409.645956][T17465] fuse: Unknown parameter 'group_i00000000000000000000' [ 409.737369][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4500'. [ 409.986247][T17484] fuse: Unknown parameter 'group_id00000000000000000000' [ 410.451079][T17490] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4509'. [ 410.454734][T17490] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4509'. [ 410.618973][T17504] fuse: Unknown parameter 'group_id00000000000000000000' [ 410.626140][T17506] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4515'. [ 410.998996][ T5953] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 411.002596][ T5953] Bluetooth: hci2: Injecting HCI hardware error event [ 411.006080][ T5301] Bluetooth: hci2: hardware error 0x00 [ 411.060664][T17548] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4535'. [ 411.304513][ T6006] usb 14-1: USB disconnect, device number 26 [ 411.671790][T17572] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4545'. [ 411.734458][T17578] fuse: Bad value for 'user_id' [ 411.736039][T17578] fuse: Bad value for 'user_id' [ 412.079025][ T5948] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 412.239042][ T5948] usb 7-1: Using ep0 maxpacket: 8 [ 412.242978][ T5948] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 412.246346][ T5948] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 412.250579][ T5948] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 412.255331][ T5948] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 412.258423][ T5948] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.263264][ T5948] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 412.266307][ T5948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.342222][T17600] fuse: Bad value for 'fd' [ 412.412637][T17604] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4559'. [ 412.473361][ T5948] usb 7-1: usb_control_msg returned -32 [ 412.475240][ T5948] usbtmc 7-1:16.0: can't read capabilities [ 412.681681][T17621] fuse: Bad value for 'fd' [ 413.088155][T17633] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4571'. [ 413.091357][ T5301] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 413.406372][T17650] fuse: Bad value for 'fd' [ 413.554248][T17662] fuse: Unknown parameter '0x0000000000000005' [ 413.612400][T17672] fuse: Bad value for 'fd' [ 413.733301][T17687] fuse: Unknown parameter '0x0000000000000005' [ 413.810777][T17692] __nla_validate_parse: 2 callbacks suppressed [ 413.810790][T17692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4598'. [ 413.816694][T17692] netlink: 'syz.3.4598': attribute type 1 has an invalid length. [ 413.819307][T17692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4598'. [ 413.888284][T17696] fuse: Bad value for 'fd' [ 414.156418][T17707] fuse: Unknown parameter '0x0000000000000005' [ 414.304370][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4610'. [ 414.307135][T17717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4610'. [ 414.339974][T17719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4611'. [ 414.344301][T17719] netlink: 'syz.3.4611': attribute type 1 has an invalid length. [ 414.346874][T17719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4611'. [ 414.578680][T17737] fuse: Invalid rootmode [ 414.663051][T17745] fuse: Unknown parameter 'fd0x0000000000000005' [ 414.695475][T17749] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4625'. [ 414.698369][T17749] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4625'. [ 414.746789][T17753] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4626'. [ 414.750092][T17753] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4626'. [ 414.778200][ T9] usb 7-1: USB disconnect, device number 26 [ 415.386807][T17765] 9pnet_fd: Insufficient options for proto=fd [ 415.799094][ T1340] usb 14-1: new high-speed USB device number 27 using dummy_hcd [ 415.968973][ T1340] usb 14-1: Using ep0 maxpacket: 8 [ 415.971984][ T1340] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 415.974660][ T1340] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 415.978025][ T1340] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 415.981242][ T1340] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 415.984399][ T1340] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.988555][ T1340] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 415.991914][ T1340] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.198486][ T1340] usb 14-1: usb_control_msg returned -32 [ 416.200500][ T1340] usbtmc 14-1:16.0: can't read capabilities [ 416.287682][T17790] 9pnet_fd: Insufficient options for proto=fd [ 417.254450][T17815] 9pnet_fd: Insufficient options for proto=fd [ 417.314427][T17819] fuse: Bad value for 'rootmode' [ 417.502698][T17827] trusted_key: encrypted_key: insufficient parameters specified [ 418.107415][T17843] fuse: Unknown parameter 'use00000000000000000000' [ 418.518724][ T6005] usb 14-1: USB disconnect, device number 27 [ 418.648176][T17866] fuse: Unknown parameter 'use00000000000000000000' [ 418.740386][T17879] 9pnet_fd: Insufficient options for proto=fd [ 418.902400][T17889] __nla_validate_parse: 14 callbacks suppressed [ 418.902412][T17889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4685'. [ 419.049188][T17894] fuse: Unknown parameter 'use00000000000000000000' [ 419.260804][T17909] trusted_key: encrypted_key: insufficient parameters specified [ 419.417464][T17918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4697'. [ 419.420347][T17918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4697'. [ 419.447004][T17920] 9pnet_fd: Insufficient options for proto=fd [ 419.583577][T17939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4707'. [ 419.588639][T17938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4708'. [ 419.592467][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4708'. [ 419.597127][T17941] 9pnet_fd: Insufficient options for proto=fd [ 419.761659][T17966] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4721'. [ 419.765707][T17969] 9pnet_fd: Insufficient options for proto=fd [ 420.350877][T17984] fuse: Unknown parameter 'user_i00000000000000000000' [ 420.355223][T17985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4726'. [ 420.496549][T17999] 9pnet_fd: Insufficient options for proto=fd [ 420.527186][T18003] fuse: Unknown parameter 'user_id00000000000000000000' [ 420.569768][T18005] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4738'. [ 420.644577][T18013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4742'. [ 420.724961][T18021] 9pnet_fd: Insufficient options for proto=fd [ 420.734481][T18023] fuse: Unknown parameter 'user_id00000000000000000000' [ 420.899112][T18049] fuse: Unknown parameter 'user_id00000000000000000000' [ 420.927427][T18051] 9pnet_fd: Insufficient options for proto=fd [ 421.103614][T18069] fuse: Bad value for 'fd' [ 422.196848][T18099] fuse: Bad value for 'fd' [ 422.400093][T18110] 9pnet_fd: Insufficient options for proto=fd [ 422.537332][T18118] fuse: Bad value for 'fd' [ 422.756097][T18136] bond0: entered promiscuous mode [ 422.760087][T18136] bond0: left promiscuous mode [ 422.765915][T18138] fuse: Unknown parameter '0x0000000000000005' [ 423.224069][T18164] fuse: Unknown parameter '0x0000000000000005' [ 424.055548][ T5953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 424.060987][ T5953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 424.064343][ T5953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 424.067701][ T5953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 424.070851][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 424.197762][T18192] chnl_net:caif_netlink_parms(): no params data found [ 424.267740][T18192] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.276581][T18192] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.279054][T18192] bridge_slave_0: entered allmulticast mode [ 424.281793][T18192] bridge_slave_0: entered promiscuous mode [ 424.285463][T18192] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.287859][T18192] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.291307][T18192] bridge_slave_1: entered allmulticast mode [ 424.295401][T18192] bridge_slave_1: entered promiscuous mode [ 424.332201][T18192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.337209][T18192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.383685][T18192] team0: Port device team_slave_0 added [ 424.386969][T18192] team0: Port device team_slave_1 added [ 424.418677][T18192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.421476][T18192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.429961][T18192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.433900][T18192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.435934][T18192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.443445][T18192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.486708][T18192] hsr_slave_0: entered promiscuous mode [ 424.489305][T18192] hsr_slave_1: entered promiscuous mode [ 424.491341][T18192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.493532][T18192] Cannot create hsr debugfs directory [ 424.593774][T18192] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.688482][T18192] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.770091][T18192] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.859339][T18192] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.985896][T18192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 424.993126][T18192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 425.006577][T18192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 425.013862][T18192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 425.037970][T18192] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.040984][T18192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.044117][T18192] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.047093][T18192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.078660][T18192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.087478][T18192] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.096424][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.101236][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.119112][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.121472][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.126890][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.129229][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.263486][T18247] fuse: Unknown parameter '0x0000000000000005' [ 425.294029][T18250] __nla_validate_parse: 2 callbacks suppressed [ 425.294040][T18250] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4841'. [ 425.310871][T18192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.335165][T18192] veth0_vlan: entered promiscuous mode [ 425.341708][T18192] veth1_vlan: entered promiscuous mode [ 425.361413][T18192] veth0_macvtap: entered promiscuous mode [ 425.372509][T18192] veth1_macvtap: entered promiscuous mode [ 425.384212][T18192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.390136][T18192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.396671][T18192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.399520][T18192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.402149][T18192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.404783][T18192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.453313][T14838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.455937][T14838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.473943][T14838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.476887][T14838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.583955][T18269] fuse: Unknown parameter '0x0000000000000005' [ 425.586160][T18271] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4850'. [ 425.665887][T18281] Set syz1 is full, maxelem 65536 reached [ 425.768319][T18294] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4861'. [ 425.797145][T18298] fuse: Unknown parameter 'fd0x0000000000000005' [ 425.963379][T18313] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4870'. [ 426.119778][ T5953] Bluetooth: hci3: command tx timeout [ 426.164886][T18330] 9pnet: Could not find request transport: fd0x0000000000000003 [ 426.368981][T18351] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4888'. [ 426.431579][T18353] 9pnet: Could not find request transport: fd0x0000000000000003 [ 427.715012][T18430] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4920'. [ 428.011770][T18460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4932'. [ 428.199149][ T5953] Bluetooth: hci3: command tx timeout [ 429.247048][T18501] 9pnet_fd: Insufficient options for proto=fd [ 429.277696][T18503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4950'. [ 429.843559][T18524] 9pnet_fd: Insufficient options for proto=fd [ 429.872653][T18526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4960'. [ 430.238972][ T837] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 430.279138][ T5953] Bluetooth: hci3: command tx timeout [ 430.388994][ T837] usb 7-1: Using ep0 maxpacket: 8 [ 430.391793][ T837] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 430.394455][ T837] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 430.397391][ T837] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 430.400726][ T837] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.403950][ T837] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.411844][ T837] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 430.414851][ T837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.622168][ T837] usb 7-1: usb_control_msg returned -32 [ 430.624064][ T837] usbtmc 7-1:16.0: can't read capabilities [ 431.118325][T18565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4976'. [ 431.758995][ T8002] usb 14-1: new high-speed USB device number 28 using dummy_hcd [ 431.912825][ T8002] usb 14-1: config 0 has no interfaces? [ 431.916117][ T8002] usb 14-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 431.919224][ T8002] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.921750][ T8002] usb 14-1: Product: syz [ 431.923123][ T8002] usb 14-1: Manufacturer: syz [ 431.925007][ T8002] usb 14-1: SerialNumber: syz [ 431.927699][ T8002] usb 14-1: config 0 descriptor?? [ 432.369025][ T5953] Bluetooth: hci3: command tx timeout [ 433.009842][ T6005] usb 7-1: USB disconnect, device number 27 [ 433.319079][ T837] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 433.468971][ T837] usb 8-1: Using ep0 maxpacket: 8 [ 433.473882][ T837] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 433.477455][ T837] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 433.481960][ T837] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 433.485892][ T837] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 433.490041][ T837] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.494738][ T837] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 433.498368][ T837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.706347][ T837] usb 8-1: usb_control_msg returned -32 [ 433.708721][ T837] usbtmc 8-1:16.0: can't read capabilities [ 434.450431][ T8002] usb 14-1: USB disconnect, device number 28 [ 434.749007][ T6005] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 434.910211][ T6005] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.913507][ T6005] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.916478][ T6005] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 434.920430][ T6005] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.924231][ T6005] usb 7-1: config 0 descriptor?? [ 435.336976][ T6005] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 435.339405][ T6005] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 435.342881][ T6005] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0017/input/input49 [ 435.349476][ T6005] cm6533_jd 0003:0D8C:0022.0017: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 435.540498][ T5948] usb 7-1: USB disconnect, device number 28 [ 436.096965][ T9] usb 8-1: USB disconnect, device number 38 [ 436.639235][ T9] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 436.788955][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 436.791797][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 436.794266][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 436.797135][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 436.800177][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 436.803528][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.807431][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 436.810276][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.015701][ T9] usb 8-1: usb_control_msg returned -32 [ 437.017824][ T9] usbtmc 8-1:16.0: can't read capabilities [ 439.410724][ T1340] usb 8-1: USB disconnect, device number 39 [ 439.679051][ T7959] usb 14-1: new high-speed USB device number 29 using dummy_hcd [ 439.722211][ T1425] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.724268][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.838992][ T7959] usb 14-1: Using ep0 maxpacket: 8 [ 439.844387][ T7959] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 439.847089][ T7959] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 439.850142][ T7959] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 439.853109][ T7959] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 439.856145][ T7959] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 439.860277][ T7959] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 439.862972][ T7959] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.070826][ T7959] usb 14-1: usb_control_msg returned -32 [ 440.072946][ T7959] usbtmc 14-1:16.0: can't read capabilities [ 440.749146][ T7959] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 440.900389][ T7959] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.903938][ T7959] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.906999][ T7959] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 440.910273][ T7959] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.914336][ T7959] usb 8-1: config 0 descriptor?? [ 441.322674][ T7959] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 441.325299][ T7959] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 441.328973][ T7959] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0D8C:0022.0018/input/input50 [ 441.335514][ T7959] cm6533_jd 0003:0D8C:0022.0018: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 441.524438][ T8002] usb 8-1: USB disconnect, device number 40 [ 442.057482][T18721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5044'. [ 442.442202][ T1340] usb 14-1: USB disconnect, device number 29 [ 442.561865][T18746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5055'. [ 442.828933][ T1340] usb 14-1: new high-speed USB device number 30 using dummy_hcd [ 442.980135][ T1340] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.983476][ T1340] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.986585][ T1340] usb 14-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 442.989574][ T1340] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.993329][ T1340] usb 14-1: config 0 descriptor?? [ 443.340186][ T5301] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 443.344768][ T5301] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 443.348532][ T5301] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 443.362561][ T5301] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 443.368034][ T5301] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 443.404530][ T1340] cm6533_jd 0003:0D8C:0022.0019: unknown main item tag 0x0 [ 443.406895][ T1340] cm6533_jd 0003:0D8C:0022.0019: unknown main item tag 0x0 [ 443.410705][ T1340] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/0003:0D8C:0022.0019/input/input51 [ 443.418285][ T1340] cm6533_jd 0003:0D8C:0022.0019: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.9-1/input0 [ 443.514104][T18771] chnl_net:caif_netlink_parms(): no params data found [ 443.608371][T18771] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.609777][ T1340] usb 14-1: USB disconnect, device number 30 [ 443.612747][T18771] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.616807][T18771] bridge_slave_0: entered allmulticast mode [ 443.621421][T18771] bridge_slave_0: entered promiscuous mode [ 443.626002][T18771] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.629014][T18771] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.631965][T18771] bridge_slave_1: entered allmulticast mode [ 443.636262][T18771] bridge_slave_1: entered promiscuous mode [ 443.692600][T18771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.702996][T18771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.736271][T18771] team0: Port device team_slave_0 added [ 443.740358][T18771] team0: Port device team_slave_1 added [ 443.771146][T18771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.773295][T18771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.783247][T18771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.787472][T18771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.789724][T18771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.797571][T18771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.834479][T18771] hsr_slave_0: entered promiscuous mode [ 443.836742][T18771] hsr_slave_1: entered promiscuous mode [ 443.838830][T18771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.841260][T18771] Cannot create hsr debugfs directory [ 444.188842][T18771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 444.200922][T18771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 444.205183][T18771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 444.210074][T18771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 444.224471][T18771] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.226847][T18771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.229299][T18771] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.231561][T18771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.274578][T18771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.290755][T18771] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.297440][ T89] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.301416][ T89] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.322793][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.325114][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.331759][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.334026][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.457482][T18771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.482183][T18771] veth0_vlan: entered promiscuous mode [ 444.487850][T18771] veth1_vlan: entered promiscuous mode [ 444.509849][T18771] veth0_macvtap: entered promiscuous mode [ 444.515331][T18771] veth1_macvtap: entered promiscuous mode [ 444.525016][T18771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.530725][T18771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.537584][T18771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.541851][T18771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.544676][T18771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.547383][T18771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.594947][T14838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.596690][T18839] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5087'. [ 444.598362][T14838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.620522][T14838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.624083][T14838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.753019][T18863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5098'. [ 445.399131][ T5953] Bluetooth: hci4: command tx timeout [ 446.178958][ T5948] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 446.352261][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.363200][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.366375][ T5948] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 446.370078][ T5948] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.375532][ T5948] usb 6-1: config 0 descriptor?? [ 446.789904][ T5948] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 446.792266][ T5948] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 446.795797][ T5948] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.001A/input/input52 [ 446.807101][ T5948] cm6533_jd 0003:0D8C:0022.001A: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 446.869070][ T29] usb 14-1: new high-speed USB device number 31 using dummy_hcd [ 446.989966][ T5948] usb 6-1: USB disconnect, device number 9 [ 447.020201][ T29] usb 14-1: Using ep0 maxpacket: 8 [ 447.023932][ T29] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 447.026519][ T29] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 447.029823][ T29] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 447.032845][ T29] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 447.035942][ T29] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 447.041837][ T29] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 447.044567][ T29] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.251601][ T29] usb 14-1: usb_control_msg returned -32 [ 447.253433][ T29] usbtmc 14-1:16.0: can't read capabilities [ 447.489500][ T5953] Bluetooth: hci4: command tx timeout [ 449.559075][ T5953] Bluetooth: hci4: command tx timeout [ 449.635014][ T9] usb 14-1: USB disconnect, device number 31 [ 450.039636][ T54] usb 14-1: new high-speed USB device number 32 using dummy_hcd [ 450.202887][ T54] usb 14-1: Using ep0 maxpacket: 8 [ 450.206482][ T54] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 450.210068][ T54] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 450.213901][ T54] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 450.217821][ T54] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.222234][ T54] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.228384][ T54] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 450.232127][ T54] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.440293][ T54] usb 14-1: usb_control_msg returned -32 [ 450.442611][ T54] usbtmc 14-1:16.0: can't read capabilities [ 451.192498][T19282] bond0: entered promiscuous mode [ 451.194808][T19282] bond_slave_0: entered promiscuous mode [ 451.197347][T19282] bond_slave_1: entered promiscuous mode [ 451.203529][T19282] bond0: left promiscuous mode [ 451.205179][T19282] bond_slave_0: left promiscuous mode [ 451.207046][T19282] bond_slave_1: left promiscuous mode [ 451.649077][ T5953] Bluetooth: hci4: command tx timeout [ 452.813349][ T837] usb 14-1: USB disconnect, device number 32 [ 453.469040][ T837] usb 14-1: new high-speed USB device number 33 using dummy_hcd [ 453.619086][ T837] usb 14-1: Using ep0 maxpacket: 8 [ 453.625679][ T837] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 453.628167][ T837] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 453.631154][ T837] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 453.634233][ T837] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 453.637194][ T837] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.642336][ T837] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 453.645323][ T837] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.778444][T19416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5342'. [ 453.853678][ T837] usb 14-1: usb_control_msg returned -32 [ 453.855434][ T837] usbtmc 14-1:16.0: can't read capabilities [ 454.306564][T19439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5351'. [ 454.397719][T19448] bond0: entered promiscuous mode [ 454.403052][T19448] bond0: left promiscuous mode [ 456.029364][ T1340] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 456.187843][ T8002] usb 14-1: USB disconnect, device number 33 [ 456.196200][ T1340] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.199870][ T1340] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.203235][ T1340] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 456.206452][ T1340] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.210315][ T1340] usb 7-1: config 0 descriptor?? [ 456.435359][T19559] bond0: entered promiscuous mode [ 456.437559][T19559] bond_slave_0: entered promiscuous mode [ 456.440185][T19559] bond_slave_1: entered promiscuous mode [ 456.443701][T19559] bond0: left promiscuous mode [ 456.445353][T19559] bond_slave_0: left promiscuous mode [ 456.447405][T19559] bond_slave_1: left promiscuous mode [ 456.618204][ T1340] usbhid 7-1:0.0: can't add hid device: -71 [ 456.620338][ T1340] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 456.623789][ T1340] usb 7-1: USB disconnect, device number 29 [ 457.479028][ T837] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 457.649535][ T6005] usb 14-1: new high-speed USB device number 34 using dummy_hcd [ 457.812170][ T6005] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.815804][ T6005] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.820382][ T6005] usb 14-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 457.823370][ T6005] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.828060][ T6005] usb 14-1: config 0 descriptor?? [ 458.239013][ T6005] usbhid 14-1:0.0: can't add hid device: -71 [ 458.240988][ T6005] usbhid 14-1:0.0: probe with driver usbhid failed with error -71 [ 458.247405][ T6005] usb 14-1: USB disconnect, device number 34 [ 458.319184][ T837] usb 6-1: Using ep0 maxpacket: 8 [ 458.322525][ T837] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 458.325710][ T837] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 458.329618][ T837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 458.333310][ T837] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 458.337216][ T837] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.342756][ T837] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 458.346865][ T837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.555667][ T837] usb 6-1: usb_control_msg returned -32 [ 458.557917][ T837] usbtmc 6-1:16.0: can't read capabilities [ 460.187374][ T5948] usb 6-1: USB disconnect, device number 10 [ 460.348663][T19684] bond0: entered promiscuous mode [ 460.352398][T19684] bond0: left promiscuous mode [ 461.019187][ T54] usb 14-1: new high-speed USB device number 35 using dummy_hcd [ 461.199025][ T54] usb 14-1: Using ep0 maxpacket: 8 [ 461.209314][ T54] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 461.212442][ T54] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 461.215921][ T54] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 461.220003][ T54] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 461.223989][ T54] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.230708][ T54] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 461.233788][ T54] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.460278][ T54] usb 14-1: usb_control_msg returned -32 [ 461.462338][ T54] usbtmc 14-1:16.0: can't read capabilities [ 463.760065][ T6023] usb 14-1: USB disconnect, device number 35 [ 464.909025][ T1340] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 465.049372][ T1340] usb 8-1: device descriptor read/64, error -71 [ 465.309022][ T1340] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 465.449000][ T1340] usb 8-1: device descriptor read/64, error -71 [ 465.559083][ T1340] usb usb8-port1: attempt power cycle [ 465.909002][ T1340] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 465.929447][ T1340] usb 8-1: device descriptor read/8, error -71 [ 466.178957][ T1340] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 466.199782][ T1340] usb 8-1: device descriptor read/8, error -71 [ 466.312426][ T1340] usb usb8-port1: unable to enumerate USB device [ 466.486920][T19919] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5557'. [ 466.495057][T19919] netlink: 'syz.9.5557': attribute type 1 has an invalid length. [ 466.498346][T19919] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5557'. [ 466.776055][T19930] bond0: entered promiscuous mode [ 466.778451][T19930] bond_slave_0: entered promiscuous mode [ 466.787765][T19930] bond_slave_1: entered promiscuous mode [ 466.792008][T19930] bond0: left promiscuous mode [ 466.794124][T19930] bond_slave_0: left promiscuous mode [ 466.796606][T19930] bond_slave_1: left promiscuous mode [ 467.422945][T19956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5573'. [ 468.069051][ T54] usb 14-1: new high-speed USB device number 36 using dummy_hcd [ 468.199340][ T54] usb 14-1: device descriptor read/64, error -71 [ 468.453857][ T54] usb 14-1: new high-speed USB device number 37 using dummy_hcd [ 468.580778][T20026] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.5606'. [ 468.589162][ T54] usb 14-1: device descriptor read/64, error -71 [ 468.700150][ T54] usb usb14-port1: attempt power cycle [ 468.800054][T20046] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.5615'. [ 469.039523][ T54] usb 14-1: new high-speed USB device number 38 using dummy_hcd [ 469.059393][ T54] usb 14-1: device descriptor read/8, error -71 [ 469.192209][ T5301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 469.196927][ T5301] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 469.200012][ T5301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 469.203932][ T5301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 469.207287][ T5301] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 469.308952][ T54] usb 14-1: new high-speed USB device number 39 using dummy_hcd [ 469.330081][T20096] chnl_net:caif_netlink_parms(): no params data found [ 469.330797][ T54] usb 14-1: device descriptor read/8, error -71 [ 469.366068][ T1143] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.446544][T20096] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.449124][T20096] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.449267][ T54] usb usb14-port1: unable to enumerate USB device [ 469.451397][T20096] bridge_slave_0: entered allmulticast mode [ 469.456911][T20096] bridge_slave_0: entered promiscuous mode [ 469.461927][T20096] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.464643][T20096] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.467333][T20096] bridge_slave_1: entered allmulticast mode [ 469.471435][T20096] bridge_slave_1: entered promiscuous mode [ 469.485989][ T1143] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.553998][ T1143] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.561940][T20096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.568721][T20096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.615175][T20096] team0: Port device team_slave_0 added [ 469.622468][T20096] team0: Port device team_slave_1 added [ 469.634836][ T1143] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.672237][T20096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.674468][T20096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.683272][T20096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.687518][T20096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.690080][T20096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.700036][T20096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.749410][T20096] hsr_slave_0: entered promiscuous mode [ 469.751952][T20096] hsr_slave_1: entered promiscuous mode [ 469.754093][T20096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.756483][T20096] Cannot create hsr debugfs directory [ 470.121618][ T1143] bond0 (unregistering): Released all slaves [ 470.194686][ T1143] tipc: Left network mode [ 470.433509][ T1143] hsr_slave_0: left promiscuous mode [ 470.435751][ T1143] hsr_slave_1: left promiscuous mode [ 470.454392][ T1143] veth1_macvtap: left promiscuous mode [ 470.456168][ T1143] veth0_macvtap: left promiscuous mode [ 470.457943][ T1143] veth1_vlan: left promiscuous mode [ 470.460595][ T1143] veth0_vlan: left promiscuous mode [ 471.249085][ T5301] Bluetooth: hci2: command tx timeout [ 471.966538][T20096] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 471.988277][T20096] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 471.993720][T20096] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 472.006164][T20096] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 472.057704][T20096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.066124][T20096] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.072382][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.074707][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.087542][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.090037][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.118086][T20096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 472.218052][T20096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.247175][T20096] veth0_vlan: entered promiscuous mode [ 472.255425][T20096] veth1_vlan: entered promiscuous mode [ 472.275162][T20096] veth0_macvtap: entered promiscuous mode [ 472.280137][T20096] veth1_macvtap: entered promiscuous mode [ 472.291035][T20096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.297007][T20096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.301980][T20096] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.304862][T20096] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.307673][T20096] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.311576][T20096] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.346750][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.349563][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.365201][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.369491][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.998323][T20269] bond0: entered promiscuous mode [ 473.001435][T20269] bond_slave_0: entered promiscuous mode [ 473.003345][T20269] bond_slave_1: entered promiscuous mode [ 473.006312][T20269] bond0: left promiscuous mode [ 473.007881][T20269] bond_slave_0: left promiscuous mode [ 473.009769][T20269] bond_slave_1: left promiscuous mode [ 473.328981][ T5301] Bluetooth: hci2: command tx timeout [ 474.023361][T20330] bond0: entered promiscuous mode [ 474.025108][T20330] bond_slave_0: entered promiscuous mode [ 474.027086][T20330] bond_slave_1: entered promiscuous mode [ 474.031018][T20330] bond0: left promiscuous mode [ 474.032548][T20330] bond_slave_0: left promiscuous mode [ 474.034353][T20330] bond_slave_1: left promiscuous mode [ 474.639099][ T1340] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 474.778954][ T1340] usb 7-1: device descriptor read/64, error -71 [ 475.039054][ T1340] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 475.065885][T20386] bond0: entered promiscuous mode [ 475.067532][T20386] bond_slave_0: entered promiscuous mode [ 475.070022][T20386] bond_slave_1: entered promiscuous mode [ 475.073063][T20386] bond0: left promiscuous mode [ 475.074604][T20386] bond_slave_0: left promiscuous mode [ 475.076407][T20386] bond_slave_1: left promiscuous mode [ 475.179024][ T1340] usb 7-1: device descriptor read/64, error -71 [ 475.289766][ T1340] usb usb7-port1: attempt power cycle [ 475.409157][ T5301] Bluetooth: hci2: command tx timeout [ 475.629942][ T1340] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 475.650436][ T1340] usb 7-1: device descriptor read/8, error -71 [ 475.919047][ T1340] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 475.961303][ T1340] usb 7-1: device descriptor read/8, error -71 [ 476.080253][ T1340] usb usb7-port1: unable to enumerate USB device [ 476.275579][T20429] bond0: entered promiscuous mode [ 476.277296][T20429] bond_slave_0: entered promiscuous mode [ 476.279661][T20429] bond_slave_1: entered promiscuous mode [ 476.282653][T20429] bond0: left promiscuous mode [ 476.284183][T20429] bond_slave_0: left promiscuous mode [ 476.285963][T20429] bond_slave_1: left promiscuous mode [ 476.686691][T20456] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 477.179614][ T5953] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 477.182985][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 477.186372][ T5953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 477.190597][ T5953] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 477.193250][ T5953] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 477.311872][T20483] chnl_net:caif_netlink_parms(): no params data found [ 477.364042][ T61] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.418452][T20483] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.421678][T20483] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.424086][T20483] bridge_slave_0: entered allmulticast mode [ 477.426898][T20483] bridge_slave_0: entered promiscuous mode [ 477.434764][T20483] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.437234][T20483] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.440613][T20483] bridge_slave_1: entered allmulticast mode [ 477.443391][T20483] bridge_slave_1: entered promiscuous mode [ 477.479185][ T5953] Bluetooth: hci2: command tx timeout [ 477.479784][ T61] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.488760][T20502] bond0: entered promiscuous mode [ 477.490528][T20502] bond_slave_0: entered promiscuous mode [ 477.492466][T20502] bond_slave_1: entered promiscuous mode [ 477.496035][T20502] bond0: left promiscuous mode [ 477.497589][T20502] bond_slave_0: left promiscuous mode [ 477.499823][T20502] bond_slave_1: left promiscuous mode [ 477.531517][T20483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.548327][ T61] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.557338][T20483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.605492][T20483] team0: Port device team_slave_0 added [ 477.610458][T20483] team0: Port device team_slave_1 added [ 477.659720][T20483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.662053][T20483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.670969][T20483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.675586][T20483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.677838][T20483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.686019][T20483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.718672][ T61] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.745051][T20483] hsr_slave_0: entered promiscuous mode [ 477.747328][T20483] hsr_slave_1: entered promiscuous mode [ 477.749577][T20483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.751948][T20483] Cannot create hsr debugfs directory [ 477.885790][ T61] bridge_slave_1: left allmulticast mode [ 477.887613][ T61] bridge_slave_1: left promiscuous mode [ 477.889881][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.894247][ T61] bridge_slave_0: left allmulticast mode [ 477.896217][ T61] bridge_slave_0: left promiscuous mode [ 477.898137][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.209434][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.213658][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.217491][ T61] bond0 (unregistering): Released all slaves [ 478.324518][ T61] tipc: Left network mode [ 478.596695][ T61] hsr_slave_0: left promiscuous mode [ 478.603938][ T61] hsr_slave_1: left promiscuous mode [ 478.606152][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.608698][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.619643][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.622214][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.644599][ T61] veth1_macvtap: left promiscuous mode [ 478.646397][ T61] veth0_macvtap: left promiscuous mode [ 478.648496][ T61] veth1_vlan: left promiscuous mode [ 478.650536][ T61] veth0_vlan: left promiscuous mode [ 478.748516][ T61] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN NOPTI [ 478.752439][ T61] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 478.756993][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u32:3 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 478.761339][ T61] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 478.764911][ T61] Workqueue: netns cleanup_net [ 478.766490][ T61] RIP: 0010:mld_clear_delrec+0x2a6/0x640 [ 478.768676][ T61] Code: 20 00 0f 85 91 03 00 00 49 8b 5d 28 49 c7 45 28 00 00 00 00 48 85 db 75 37 e9 d4 00 00 00 e8 f1 9d 85 f7 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 39 03 00 00 48 8b 2b 48 8d 7b 30 48 89 de e8 [ 478.774831][ T61] RSP: 0018:ffffc90000cf7568 EFLAGS: 00010206 [ 478.776870][ T61] RAX: 000000001fffe000 RBX: 00000000ffff0000 RCX: ffffffff8a367e66 [ 478.779706][ T61] RDX: ffff8880223b8000 RSI: ffffffff8a367dff RDI: 0000000000000005 [ 478.782267][ T61] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 478.784812][ T61] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 478.787622][ T61] R13: ffff888054fe0800 R14: ffff8880392e4000 R15: dffffc0000000000 [ 478.790244][ T61] FS: 0000000000000000(0000) GS:ffff8880d6753000(0000) knlGS:0000000000000000 [ 478.792955][ T61] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.795020][ T61] CR2: 0000000000000000 CR3: 000000000e382000 CR4: 0000000000352ef0 [ 478.797631][ T61] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 478.800302][ T61] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 478.802986][ T61] Call Trace: [ 478.804320][ T61] [ 478.805569][ T61] ipv6_mc_destroy_dev+0x49/0x690 [ 478.807618][ T61] ? __local_bh_enable_ip+0xa4/0x120 [ 478.809752][ T61] addrconf_ifdown.isra.0+0x13ef/0x1a90 [ 478.812000][ T61] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 478.814482][ T61] ? tls_dev_event+0xfd/0x10b0 [ 478.816477][ T61] addrconf_notify+0x220/0x19e0 [ 478.818520][ T61] ? ip6mr_device_event+0x1bc/0x230 [ 478.820707][ T61] notifier_call_chain+0xb9/0x410 [ 478.822532][ T61] ? __pfx_addrconf_notify+0x10/0x10 [ 478.824263][ T61] call_netdevice_notifiers_info+0xbe/0x140 [ 478.826221][ T61] unregister_netdevice_many_notify+0xf9d/0x2700 [ 478.828584][ T61] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 478.830702][ T61] ? unregister_netdevice_queue+0x22e/0x3f0 [ 478.832601][ T61] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 478.835113][ T61] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 478.837583][ T61] default_device_exit_batch+0x853/0xaf0 [ 478.839969][ T61] ? __pfx_default_device_exit_batch+0x10/0x10 [ 478.842537][ T61] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 478.844739][ T61] ? __pfx___might_resched+0x10/0x10 [ 478.846878][ T61] ? __pfx_default_device_exit_batch+0x10/0x10 [ 478.849382][ T61] ops_undo_list+0x360/0xab0 [ 478.851302][ T61] ? __pfx_ops_undo_list+0x10/0x10 [ 478.853484][ T61] ? __local_bh_enable_ip+0xa4/0x120 [ 478.855528][ T61] cleanup_net+0x408/0x890 [ 478.857035][ T61] ? __pfx_cleanup_net+0x10/0x10 [ 478.858653][ T61] ? rcu_is_watching+0x12/0xc0 [ 478.860199][ T61] process_one_work+0x9cc/0x1b70 [ 478.861764][ T61] ? __pfx_process_one_work+0x10/0x10 [ 478.863460][ T61] ? assign_work+0x1a0/0x250 [ 478.865009][ T61] worker_thread+0x6c8/0xf10 [ 478.866558][ T61] ? __kthread_parkme+0x19e/0x250 [ 478.868793][ T61] ? __pfx_worker_thread+0x10/0x10 [ 478.870974][ T61] kthread+0x3c2/0x780 [ 478.872674][ T61] ? __pfx_kthread+0x10/0x10 [ 478.874590][ T61] ? rcu_is_watching+0x12/0xc0 [ 478.876690][ T61] ? __pfx_kthread+0x10/0x10 [ 478.878580][ T61] ret_from_fork+0x5d4/0x6f0 [ 478.880469][ T61] ? __pfx_kthread+0x10/0x10 [ 478.882369][ T61] ret_from_fork_asm+0x1a/0x30 [ 478.884325][ T61] [ 478.885607][ T61] Modules linked in: [ 478.888232][ T61] ---[ end trace 0000000000000000 ]--- [ 478.893084][ T61] RIP: 0010:mld_clear_delrec+0x2a6/0x640 [ 478.895759][ T61] Code: 20 00 0f 85 91 03 00 00 49 8b 5d 28 49 c7 45 28 00 00 00 00 48 85 db 75 37 e9 d4 00 00 00 e8 f1 9d 85 f7 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 0f 85 39 03 00 00 48 8b 2b 48 8d 7b 30 48 89 de e8 [ 478.904147][ T61] RSP: 0018:ffffc90000cf7568 EFLAGS: 00010206 [ 478.906632][ T61] RAX: 000000001fffe000 RBX: 00000000ffff0000 RCX: ffffffff8a367e66 [ 478.910765][ T61] RDX: ffff8880223b8000 RSI: ffffffff8a367dff RDI: 0000000000000005 [ 478.913970][ T61] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 478.917160][ T61] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 478.920564][ T61] R13: ffff888054fe0800 R14: ffff8880392e4000 R15: dffffc0000000000 [ 478.923816][ T61] FS: 0000000000000000(0000) GS:ffff8880d6753000(0000) knlGS:0000000000000000 [ 478.927385][ T61] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.930118][ T61] CR2: 0000000000000000 CR3: 0000000058574000 CR4: 0000000000352ef0 [ 478.932629][ T61] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 478.935144][ T61] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 478.937608][ T61] Kernel panic - not syncing: Fatal exception [ 478.940083][ T61] Kernel Offset: disabled [ 478.941457][ T61] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:43:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855b9f55 RDI=ffffffff9b089360 RBP=ffffffff9b089320 RSP=ffffc90000cf6f60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=70203a4e4153414b R12=0000000000000000 R13=0000000000000066 R14=ffffffff9b089320 R15=ffffffff855b9ef0 RIP=ffffffff855b9f7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0664411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0664411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0664411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0664411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0664411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0664411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0664584488 00007f0664584480 00007f0664584478 00007f0664584450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f06650ed100 00007f0664584440 00007f0664584458 00007f06645844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0664584498 00007f0664584490 00007f0664584488 00007f0664584480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000de5c5c RBX=0000000000000001 RCX=ffffffff8b801c19 RDX=ffffed100d4a6646 RSI=ffffffff8c157960 RDI=ffffffff8191fc31 RBP=ffffed1003c53488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000000 R12=0000000000000001 R13=ffff88801e29a440 R14=ffffffff90a81550 R15=0000000000000000 RIP=ffffffff8b80077f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d6853000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000466e7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffedbf55d70 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91a1411b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91a1411b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91a1411b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91a1411b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91a1411bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91a1411c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000007710b4 RBX=0000000000000002 RCX=ffffffff8b801c19 RDX=ffffed100d4c6646 RSI=ffffffff8c157960 RDI=ffffffff8191fc31 RBP=ffffed1003c53910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000000 R12=0000000000000002 R13=ffff88801e29c880 R14=ffffffff90a81550 R15=0000000000000000 RIP=ffffffff8b80077f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6953000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000034000 CR3=00000000333dd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 010000110208ffff ffffffff00000080 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff845611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff845611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff845611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff845611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff845611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff845611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cdcd536f1833b426 00d3568498da58a1 d3473ac34d7be9ab 5e0032105d94b34d ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 92e8c55376150bcd 3815cfb1ba5934ad 9ece1ecbf5500004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666b75138b56c194 1f50219a6b76934b 2fef03812a7dadc6 e943c458f1802c96 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 110f0685a0e2454c 67f43e349ebf4718 24487b6de2ce1145 ef463f3fe6a2bdee ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 663e9dd1ba3d2ff0 28c9fdd35a045af0 3a1921e725ed582e 7136c4fc0aaf33b2 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7040c3968bdad204 1780cf464ff7666b 75138b56c1941f50 219a6b76934b2fef ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03812a7dadc6e943 c458f1802c9692e8 c55376150bcd3815 cfb1ba5934ad9ece ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000001 RBX=000000000000000c RCX=ffffffff82088ca3 RDX=ffff88802f56a440 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc900016ff828 R8 =0000000000000005 R9 =0000000000000000 R10=000000000000000c R11=0000000000000000 R12=00007fda44321000 R13=ffffc900016ff9b8 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81bc15ac RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fda450e7d60 CR3=00000000335ad000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=000000007fffffff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda445846a3 00007fda445846a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd815b9a00 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555811b0e57 00005555811b0d10 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda44584d00 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555811bd3ef 00005555811bcc80 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555811b2ad4 00005555811b2ad0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffff50866800338 10000e8004381000 060102880010000e a8030108000ea003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010fffffffffffff 046680041c100006 0171ce04a2880484 0066980300000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001ffffffffff fffffff308668c03 02f60200668a03aa aaaaaaaa01ffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffff50866 80033810000e8004 3810000601028800 10000ea803010800 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ea0030408000e98 034a08000e900300 00000208060e8803 0100000808060e80 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000